last executing test programs:

1m43.758234983s ago: executing program 2 (id=676):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40042, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0xbb7, 0xf, 0x4, 0xb06c}, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9)

1m42.198968636s ago: executing program 2 (id=678):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
shutdown(r3, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1000, 0x5}, 0x8)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000180))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r9 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f00000033c0)=[@free_buffer={0x40086303, r9}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
sendto$inet(r4, 0x0, 0x0, 0xc1, 0x0, 0x0)

1m40.745485894s ago: executing program 2 (id=680):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

1m34.00109684s ago: executing program 2 (id=688):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r3, 0x0, 0x0)
shutdown(r3, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1000, 0x5}, 0x8)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000180))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000033c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
sendto$inet(r4, 0x0, 0x0, 0xc1, 0x0, 0x0)

1m31.726122816s ago: executing program 2 (id=691):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

1m30.598626189s ago: executing program 2 (id=692):
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000005ac0)=""/114)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(0x0, 0xa99, &(0x7f0000000280)='GPL\x00')
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x38, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, 0x0)
getpriority(0x1, r0)
syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580)

1m15.540255213s ago: executing program 32 (id=692):
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000005ac0)=""/114)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(0x0, 0xa99, &(0x7f0000000280)='GPL\x00')
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x38, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, 0x0)
getpriority(0x1, r0)
syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580)

52.994236999s ago: executing program 0 (id=773):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200), 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d706174683000")
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")

52.382199868s ago: executing program 0 (id=775):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d706174683000")
write(r1, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")
ioctl(r0, 0xc138fd06, 0x0)
write(r1, 0x0, 0x0)
ioctl(r0, 0xc138fd0e, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70617468300000")
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
getsockname$packet(r4, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="01990000419a0400600012800b000100697036746e6c000050000280060010000200000014000300"], 0x80}}, 0x0)
sendto$packet(r3, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60038d08001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22ec03a4dae709ec6410d3fb435bf07e0868b35b030000007ef9394b394626ddd40f7bf3a3278ac015ef1c0915866c175c230ecec66abe8921dc7f4b7fe2d0ada516d06da2835538cf54cbbca0bbad6a9275521231353c2c795f5fcf59f16d9b27a919675f868284997b49ed8271a7ec7f70363beb1707a9517fe7b9d523a51b0fab2183cc6c3f46154d1d24ad4c1d657bd70b9db82cd9309030", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780004020422ec"], 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
sendmsg$802154_dgram(r6, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
dup2(r7, r2)

52.035013944s ago: executing program 0 (id=779):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
readv(r1, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f00000005c0)=""/13, 0xd}], 0x2)
write(r1, &(0x7f0000000300)='lzo', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0)
write(r4, &(0x7f0000000600), 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
mmap(&(0x7f0000300000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
fsmount(r5, 0x1, 0x0)
open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
socket$packet(0x11, 0x3, 0x300)

51.68593593s ago: executing program 0 (id=781):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000740)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658cfecb61406ae7298f", 0xc0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

50.447209199s ago: executing program 0 (id=785):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000100)="e80000", 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='p:p1 ./file0:0', 0xe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x7, r3, 0x0, 0x0)
wait4(r3, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')

48.996418886s ago: executing program 1 (id=794):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d706174683000")
write(r1, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")
ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d70617468300000")
write(r1, 0x0, 0x0)
ioctl(r0, 0xc138fd0e, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70617468300000")
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
getsockname$packet(r4, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="01990000419a0400600012800b000100697036746e6c000050000280060010000200000014000300"], 0x80}}, 0x0)
sendto$packet(r3, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60038d08001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22ec03a4dae709ec6410d3fb435bf07e0868b35b030000007ef9394b394626ddd40f7bf3a3278ac015ef1c0915866c175c230ecec66abe8921dc7f4b7fe2d0ada516d06da2835538cf54cbbca0bbad6a9275521231353c2c795f5fcf59f16d9b27a919675f868284997b49ed8271a7ec7f70363beb1707a9517fe7b9d523a51b0fab2183cc6c3f46154d1d24ad4c1d657bd70b9db82cd9309030", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780004020422ec"], 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
sendmsg$802154_dgram(r6, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
dup2(r7, r2)

48.716640489s ago: executing program 0 (id=797):
r0 = epoll_create(0x80000000)
epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0xa2e4, &(0x7f0000000080)={[0x101]}, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000100"/17, @ANYRES32=r2, @ANYBLOB="9d"], 0x1c}}, 0x44)
syz_emit_ethernet(0x56, 0x0, 0x0)
gettid()
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000c80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000090000000300"/72], 0x58)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r6, 0x4, 0x800)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shmat(r4, &(0x7f0000d62000/0x4000)=nil, 0xa000)
msync(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x4)

48.627124633s ago: executing program 1 (id=798):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d706174683000")
write(r1, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")
ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d70617468300000")
write(r1, 0x0, 0x0)
ioctl(r0, 0xc138fd0e, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70617468300000")
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd6", 0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
getsockname$packet(r4, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="01990000419a0400600012800b000100697036746e6c000050000280060010000200000014000300"], 0x80}}, 0x0)
sendto$packet(r3, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60038d08001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22ec03a4dae709ec6410d3fb435bf07e0868b35b030000007ef9394b394626ddd40f7bf3a3278ac015ef1c0915866c175c230ecec66abe8921dc7f4b7fe2d0ada516d06da2835538cf54cbbca0bbad6a9275521231353c2c795f5fcf59f16d9b27a919675f868284997b49ed8271a7ec7f70363beb1707a9517fe7b9d523a51b0fab2183cc6c3f46154d1d24ad4c1d657bd70b9db82cd9309030", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780004020422ec"], 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
sendmsg$802154_dgram(r6, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
dup2(r7, r2)

48.165588075s ago: executing program 1 (id=803):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d706174683000")
write(r1, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")
ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d70617468300000")
write(r1, 0x0, 0x0)
ioctl(r0, 0xc138fd0e, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70617468300000")
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, r4)
getsockname$packet(r4, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="01990000419a0400600012800b000100697036746e6c000050000280060010000200000014000300"], 0x80}}, 0x0)
sendto$packet(r3, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60038d08001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22ec03a4dae709ec6410d3fb435bf07e0868b35b030000007ef9394b394626ddd40f7bf3a3278ac015ef1c0915866c175c230ecec66abe8921dc7f4b7fe2d0ada516d06da2835538cf54cbbca0bbad6a9275521231353c2c795f5fcf59f16d9b27a919675f868284997b49ed8271a7ec7f70363beb1707a9517fe7b9d523a51b0fab2183cc6c3f46154d1d24ad4c1d657bd70b9db82cd9309030", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780004020422ec"], 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
sendmsg$802154_dgram(r6, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
dup2(r7, r2)

47.84374146s ago: executing program 1 (id=806):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d706174683000")
write(r1, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")
ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d70617468300000")
write(r1, 0x0, 0x0)
ioctl(r0, 0xc138fd0e, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70617468")
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
getsockname$packet(r4, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="01990000419a0400600012800b000100697036746e6c000050000280060010000200000014000300"], 0x80}}, 0x0)
sendto$packet(r3, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60038d08001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22ec03a4dae709ec6410d3fb435bf07e0868b35b030000007ef9394b394626ddd40f7bf3a3278ac015ef1c0915866c175c230ecec66abe8921dc7f4b7fe2d0ada516d06da2835538cf54cbbca0bbad6a9275521231353c2c795f5fcf59f16d9b27a919675f868284997b49ed8271a7ec7f70363beb1707a9517fe7b9d523a51b0fab2183cc6c3f46154d1d24ad4c1d657bd70b9db82cd9309030", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780004020422ec"], 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
sendmsg$802154_dgram(r6, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
dup2(r7, r2)

47.230752899s ago: executing program 1 (id=808):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000100)="e80000", 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='p:p1 ./file0:0', 0xe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')

44.980986114s ago: executing program 1 (id=814):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040))
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1)
socket(0x10, 0x803, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
setns(0xc9, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfa, &(0x7f0000000300)=""/250, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeff}, 0x94)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x25, 0x1c, 0x67, 0x0, 0x3, 0x1, 0x0, @multicast2, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4)
sendmmsg$inet(r3, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

41.167174103s ago: executing program 3 (id=824):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

39.828933925s ago: executing program 3 (id=827):
epoll_create(0x80000000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x44)
gettid()
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000c80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000090000000300"/72], 0x58)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r4, 0x4, 0x800)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shmat(r2, &(0x7f0000d62000/0x4000)=nil, 0xa000)
msync(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x4)

39.686266592s ago: executing program 3 (id=828):
epoll_create(0x80000000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000100"/17, @ANYRES32=r1, @ANYBLOB="9d"], 0x1c}}, 0x44)
gettid()
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000c80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000090000000300"/72], 0x58)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r5, 0x4, 0x800)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shmat(r3, &(0x7f0000d62000/0x4000)=nil, 0xa000)
msync(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x4)

39.314104399s ago: executing program 3 (id=830):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffbfff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x20000080)
close(r4)
socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="88db0b9ef1cafdab", 0xa888}, {&(0x7f0000000000)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004015)

37.949560543s ago: executing program 3 (id=833):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000100)="e80000", 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='p:p1 ./file0:0', 0xe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x7, r3, 0x0, 0x0)
wait4(r3, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')

36.32043329s ago: executing program 3 (id=837):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0x100000)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
dup2(r1, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/c0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/c0/node/n0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/c0/node/n0/ipv4_address\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='127.0.0.1\n', 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/c0/node/n0/ipv4_port\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='7777\n', 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/c0/node/n0/num\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='0\n', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/c0/node/n0/local\x00', 0x1, 0x0)
write(r5, &(0x7f0000000540)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/c0/heartbeat/r0\x00', 0x1ff)

33.645380195s ago: executing program 33 (id=797):
r0 = epoll_create(0x80000000)
epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0xa2e4, &(0x7f0000000080)={[0x101]}, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000100"/17, @ANYRES32=r2, @ANYBLOB="9d"], 0x1c}}, 0x44)
syz_emit_ethernet(0x56, 0x0, 0x0)
gettid()
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000c80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000090000000300"/72], 0x58)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r6, 0x4, 0x800)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shmat(r4, &(0x7f0000d62000/0x4000)=nil, 0xa000)
msync(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x4)

29.381753524s ago: executing program 34 (id=814):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040))
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1)
socket(0x10, 0x803, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
setns(0xc9, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfa, &(0x7f0000000300)=""/250, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeff}, 0x94)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x25, 0x1c, 0x67, 0x0, 0x3, 0x1, 0x0, @multicast2, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4)
sendmmsg$inet(r3, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

20.880394442s ago: executing program 35 (id=837):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0x100000)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
dup2(r1, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/c0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/c0/node/n0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/c0/node/n0/ipv4_address\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='127.0.0.1\n', 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/c0/node/n0/ipv4_port\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='7777\n', 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/c0/node/n0/num\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='0\n', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/c0/node/n0/local\x00', 0x1, 0x0)
write(r5, &(0x7f0000000540)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/c0/heartbeat/r0\x00', 0x1ff)

4.878549331s ago: executing program 8 (id=884):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000000}], 0xcc78})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x8, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.574984205s ago: executing program 8 (id=974):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000005180)={0x2020}, 0x2020)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20)
write(r2, &(0x7f0000000280)='1', 0x1)

4.294239318s ago: executing program 8 (id=975):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

4.069346829s ago: executing program 8 (id=979):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r0, 0x0, 0x0, 0x1000000)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
dup2(r1, 0x7)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000680)='255\n', 0x4)
close(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/syz/heartbeat/hb0/dev\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='7\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dlm\x00', 0x1ff)
mount(0x0, &(0x7f0000000800)='./dlm\x00', &(0x7f0000000840)='ocfs2_dlmfs\x00', 0x0, 0x0)
syslog(0x3, &(0x7f0000001000)=""/10000, 0x2710)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dlm/syz\x00', 0x1ff)

3.971109343s ago: executing program 6 (id=980):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='md0\n', 0x4)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0)
write(r0, &(0x7f0000000540)='chec', 0x4)

3.969510603s ago: executing program 7 (id=981):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='md0\n\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000000000000010000000000000000000000020000000200"/72)
ioctl(r1, 0x40140921, &(0x7f0000000400)="00000000010000000000")
ioctl(r1, 0x40140921, &(0x7f0000000440)="010000000100000001000000010000000600")
ioctl(r1, 0x400c0930, 0x0)

3.854983589s ago: executing program 6 (id=982):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0xd0ed}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.848735359s ago: executing program 4 (id=983):
migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffff", 0x6)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d080002"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.872025155s ago: executing program 7 (id=985):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='./file0\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='tcp', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='127.0.0.1', 0x9)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r6, &(0x7f0000000580)='4420', 0x4)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r7, &(0x7f0000000600)='ipv4', 0x4)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r8, &(0x7f0000000740)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)

2.812668938s ago: executing program 6 (id=986):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000005180)={0x2020}, 0x2020)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20)
write(r2, &(0x7f0000000280)='1', 0x1)

2.75814086s ago: executing program 5 (id=987):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r0, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000000000000010000000000000000000000020000000200"/72)
ioctl(r0, 0x40140921, &(0x7f0000000400)="00000000010000000000")
ioctl(r0, 0x40140921, 0x0)
ioctl(r0, 0x400c0930, 0x0)

2.612447207s ago: executing program 6 (id=988):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r0, 0x0, 0x0, 0x1000000)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
dup2(r1, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/syz\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/syz/node/node0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/syz/node/node0/ipv4_port\x00', 0x2, 0x0)
write(r2, &(0x7f00000003c0)='7777\n', 0x5)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/syz/node/node0/ipv4_address\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/syz/node/node0/num\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='0\n', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/syz/node/node0/local\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2)
close(r5)
write(0xffffffffffffffff, &(0x7f0000000680)='255\n', 0x4)
close(0xffffffffffffffff)
r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/syz/heartbeat/hb0/dev\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='7\n', 0x2)
close(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dlm\x00', 0x1ff)
mount(0x0, &(0x7f0000000800)='./dlm\x00', &(0x7f0000000840)='ocfs2_dlmfs\x00', 0x0, 0x0)
syslog(0x3, &(0x7f0000001000)=""/10000, 0x2710)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dlm/syz\x00', 0x1ff)

2.467020424s ago: executing program 4 (id=989):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

2.453870505s ago: executing program 5 (id=990):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_', 0x30)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")

2.296945432s ago: executing program 4 (id=991):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='devtmpfs\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='md0\n\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000000000000010000000000000000000000020000000200"/72)
ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006000000")
ioctl(r1, 0x40140921, &(0x7f0000000440)="0100000001000000010000000100000006000000")
ioctl(r1, 0x400c0930, 0x0)
read(0xffffffffffffffff, &(0x7f0000000580)=""/32, 0x20)

2.223156015s ago: executing program 7 (id=992):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0)
write(r0, &(0x7f0000000540)='chec', 0x4)

2.102978041s ago: executing program 5 (id=993):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='./file0\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='tcp', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='127.0.0.1', 0x9)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r6, &(0x7f0000000580)='4420', 0x4)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r7, &(0x7f0000000600)='ipv4', 0x4)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r8, &(0x7f0000000740)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)

2.016024175s ago: executing program 4 (id=994):
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r2, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000")
ioctl(r2, 0x400c0930, &(0x7f0000000700)='\x00'/12)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./read_buf\x00', 0x42, 0x1b6)
read(r3, &(0x7f0000000900)=""/32, 0x20)

1.941040918s ago: executing program 7 (id=995):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0), 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='./file0\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='tcp', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='127.0.0.1', 0x9)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r6, &(0x7f0000000580)='4420', 0x4)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r7, &(0x7f0000000600)='ipv4', 0x4)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r8, &(0x7f0000000740)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)

1.627824083s ago: executing program 4 (id=996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000080)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000000c0)="38000000240001040400000000000000000000000100000000000400030001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000100)="38000000240001040500000000000000000000000100000000000500040001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000180)="38000000240001040700000000000000000000000100000000000700060001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000001c0)="38000000240001040800000000000000000000000100000000000800070001000000000008000100657473000c00028005", 0x31)
write(r0, &(0x7f0000000340)="38000000240001040e00000000000000000000000100000000000e000d0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000380)="38000000240001040f00000000000000000000000100000000000f000e0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000003c0)="380000002400010410000000000000000000000001000000000010000f0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24)
read(r0, &(0x7f0000002000), 0x8000)

1.511389299s ago: executing program 8 (id=997):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0xd0ed}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.420836043s ago: executing program 5 (id=998):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='127.0.0.1', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='4420', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r2, &(0x7f0000000480)='ipv4', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='tc', 0x2)
symlinkat(&(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/subsystems/testsubsys\x00')

1.112507167s ago: executing program 4 (id=999):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bonding_masters\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+bond1\n\x00', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bond1/bonding/mode\x00', 0x2, 0x0)
write(r2, &(0x7f0000000180)='balance-alb\n\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond1/bonding/slaves\x00', 0x2, 0x0)
write(r3, &(0x7f0000000200)='+dummy0\n\x00', 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'dummy0\x00', 0x1})
ioctl(r0, 0x8914, &(0x7f0000000280)="626f6e643100000000000000000000000100")

435.850259ms ago: executing program 7 (id=1000):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r0, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000000000000010000000000000000000000020000000200"/72)
ioctl(r0, 0x40140921, &(0x7f0000000400)="00000000010000000000")
ioctl(r0, 0x40140921, 0x0)
ioctl(r0, 0x400c0930, 0x0)

391.971741ms ago: executing program 6 (id=1001):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r2, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000")
ioctl(r2, 0x400c0930, &(0x7f0000000700)='\x00'/12)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./read_buf\x00', 0x42, 0x1b6)
read(r3, &(0x7f0000000900)=""/32, 0x20)

328.899934ms ago: executing program 8 (id=1002):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='./file0\n', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000480)='tcp', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000500)='127.0.0.1', 0x9)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r7, &(0x7f0000000580)='4420', 0x4)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='ipv4', 0x4)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
write(0xffffffffffffffff, &(0x7f0000000740)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)

203.99994ms ago: executing program 5 (id=1003):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_', 0x30)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")

158.354592ms ago: executing program 7 (id=1004):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='0x0525\n', 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0xa4a5\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ed)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)='0000001\n', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', 0x1ed)
symlinkat(&(0x7f00000003c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0/rd_mcp_0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x1, 0x0)
write(r5, &(0x7f0000000480)='naa.5001405000000001\n', 0x15)
symlinkat(&(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/acls/naa.5001405000000002/lun_0/lun_0\x00')
symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000000740)='dummy_udc.0\n', 0xc)

24.156658ms ago: executing program 5 (id=1005):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0)
write(r0, &(0x7f0000000540)='chec', 0x4)

0s ago: executing program 6 (id=1006):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='./file0\n', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1\n', 0x2)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000480)='tcp', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000500)='127.0.0.1', 0x9)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r7, &(0x7f0000000580)='4420', 0x4)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='ipv4', 0x4)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r9, &(0x7f0000000740)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)

kernel console output (not intermixed with test programs):

p4: detected capacity change from 0 to 256
[  135.294484][ T4668] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  135.819900][ T4679] binder: 4675:4679 ioctl c0306201 0 returned -14
[  137.961692][ T4691] atomic_op ffff8880765a5198 conn xmit_atomic 0000000000000000
[  137.980618][ T4694] binder: 4686:4694 ioctl c0306201 0 returned -14
[  137.988183][ T4694] binder: 4686:4694 ioctl c0306201 0 returned -14
[  141.511655][ T4706] loop4: detected capacity change from 0 to 4096
[  142.712541][ T4706] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  145.686673][ T4726] loop4: detected capacity change from 0 to 256
[  145.740198][ T4726] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  148.713038][ T4735] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  148.719937][ T4735] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  148.873409][ T4735] vhci_hcd vhci_hcd.0: Device attached
[  149.165492][ T4261] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  149.322945][ T4744] vhci_hcd: connection closed
[  149.328706][ T4309] vhci_hcd: stop threads
[  150.194259][ T4309] vhci_hcd: release socket
[  150.214817][ T4309] vhci_hcd: disconnect device
[  152.286747][ T4770] binder: BINDER_SET_CONTEXT_MGR already set
[  152.292887][ T4770] binder: 4763:4770 ioctl 4018620d 200000000040 returned -16
[  152.309260][ T4770] binder: 4763:4770 ioctl c0306201 0 returned -14
[  154.935518][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'.
[  155.296031][ T4261] vhci_hcd: vhci_device speed not set
[  159.293115][ T4801] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  159.299714][ T4801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  159.309334][ T4806] vhci_hcd: connection closed
[  159.309420][ T4801] vhci_hcd vhci_hcd.0: Device attached
[  159.328223][  T155] vhci_hcd: stop threads
[  159.338500][  T155] vhci_hcd: release socket
[  159.606613][ T4261] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  159.795354][  T155] vhci_hcd: disconnect device
[  159.813188][ T4261] usb 33-1: enqueue for inactive port 0
[  161.356540][ T4261] vhci_hcd: vhci_device speed not set
[  161.456693][ T4820] binder: 4815:4820 ioctl c0306201 0 returned -14
[  161.471587][ T4820] binder: 4815:4820 ioctl c0306201 0 returned -14
[  162.175132][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  162.604925][ T4827] binder: BINDER_SET_CONTEXT_MGR already set
[  162.611977][ T4827] binder: 4821:4827 ioctl 4018620d 200000000040 returned -16
[  162.622123][ T4827] binder: 4821:4827 ioctl c0306201 0 returned -14
[  162.629708][ T4827] binder: 4821:4827 ioctl c0306201 0 returned -14
[  164.696912][ T4847] binder: BINDER_SET_CONTEXT_MGR already set
[  164.703010][ T4847] binder: 4838:4847 ioctl 4018620d 200000000040 returned -16
[  164.718925][ T4847] binder: 4838:4847 ioctl c0306201 0 returned -14
[  165.655536][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  165.895345][   T23] usb 5-1: Using ep0 maxpacket: 32
[  166.025868][   T23] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  166.060879][   T23] usb 5-1: config 0 has no interface number 0
[  166.146919][   T23] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  166.270981][   T23] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  166.388707][   T23] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  166.745447][   T23] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  166.769707][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.839046][   T23] usb 5-1: Product: syz
[  166.853495][   T23] usb 5-1: Manufacturer: syz
[  166.873750][   T23] usb 5-1: SerialNumber: syz
[  166.992694][   T23] usb 5-1: config 0 descriptor??
[  167.062177][ T4854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  167.068780][ T4854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  167.076664][ T4854] vhci_hcd vhci_hcd.0: Device attached
[  167.118568][ T4844] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  167.365773][ T4852] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  167.878371][ T4858] vhci_hcd: connection reset by peer
[  167.889328][ T4392] vhci_hcd: stop threads
[  167.894477][ T4392] vhci_hcd: release socket
[  167.973354][ T4392] vhci_hcd: disconnect device
[  167.989745][   T23] usb-storage 5-1:0.20: USB Mass Storage device detected
[  168.251596][   T23] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  168.456146][   T23] scsi host1: usb-storage 5-1:0.20
[  168.536627][   T23] usb 5-1: USB disconnect, device number 2
[  170.811170][ T4881] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  170.818144][ T4881] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  170.829201][ T4881] vhci_hcd vhci_hcd.0: Device attached
[  170.901254][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'.
[  171.105376][   T23] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  171.765256][ T4882] vhci_hcd: connection reset by peer
[  171.772432][ T4256] vhci_hcd: stop threads
[  171.780337][ T4256] vhci_hcd: release socket
[  171.830713][ T4256] vhci_hcd: disconnect device
[  172.332189][ T4880] bond0: (slave bond_slave_0): Releasing backup interface
[  172.573052][ T4852] vhci_hcd: vhci_device speed not set
[  175.834466][ T4923] binder: 4922:4923 ioctl c0306201 200000000680 returned -14
[  176.000146][ T4919] ieee802154 phy0 wpan0: encryption failed: -22
[  177.963758][   T23] vhci_hcd: vhci_device speed not set
[  178.039652][ T4933] binder: 4931:4933 ioctl c0306201 200000000680 returned -14
[  179.509317][ T4935] binder: 4934:4935 ioctl c0306201 200000000680 returned -14
[  181.022936][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'.
[  181.218073][ T4941] bond0: (slave bond_slave_0): Releasing backup interface
[  188.481949][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'.
[  188.665550][ T4227] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  188.965521][ T4227] usb 5-1: Using ep0 maxpacket: 32
[  189.096039][ T4227] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  189.142086][ T4227] usb 5-1: config 0 has no interface number 0
[  189.252386][ T4227] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  189.374006][ T4227] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  189.515698][ T4227] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  189.735980][ T4227] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  189.792664][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.826578][ T5003] ieee802154 phy0 wpan0: encryption failed: -22
[  189.891435][ T4227] usb 5-1: Product: syz
[  190.530326][ T4227] usb 5-1: Manufacturer: syz
[  190.582608][ T4227] usb 5-1: SerialNumber: syz
[  190.618520][ T4227] usb 5-1: config 0 descriptor??
[  190.656318][ T4987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  191.126062][ T4227] usb-storage 5-1:0.20: USB Mass Storage device detected
[  191.205573][   T23] Bluetooth: hci0: command 0x0406 tx timeout
[  191.211678][   T23] Bluetooth: hci3: command 0x0406 tx timeout
[  191.772984][ T4228] Bluetooth: hci2: command 0x0406 tx timeout
[  192.115449][ T4228] Bluetooth: hci4: command 0x0406 tx timeout
[  192.121574][ T4228] Bluetooth: hci1: command 0x0406 tx timeout
[  192.143080][ T4227] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  192.214088][ T4227] scsi host1: usb-storage 5-1:0.20
[  192.231637][ T4227] usb 5-1: USB disconnect, device number 3
[  192.558610][ T5019] loop0: detected capacity change from 0 to 4096
[  192.631450][ T5019] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  192.723262][ T5021] binder: BINDER_SET_CONTEXT_MGR already set
[  192.729678][ T5021] binder: 5017:5021 ioctl 4018620d 200000000040 returned -16
[  192.746217][ T5021] binder: 5017:5021 ioctl c0306201 0 returned -14
[  194.250027][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.257203][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.794351][   T26] audit: type=1800 audit(1790104784.699:2): pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.190" name="file1" dev="loop0" ino=30 res=0 errno=0
[  196.733327][ T5040] device-mapper: ioctl: Empty message received.
[  196.902829][ T5041] device-mapper: ioctl: Empty message received.
[  197.551221][ T5053] loop0: detected capacity change from 0 to 256
[  197.670181][ T5053] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  200.035798][ T5061] device-mapper: ioctl: Empty message received.
[  200.528634][ T5087] binder: BINDER_SET_CONTEXT_MGR already set
[  200.534733][ T5087] binder: 5079:5087 ioctl 4018620d 200000000040 returned -16
[  200.543320][ T5087] binder: 5079:5087 ioctl c0306201 0 returned -14
[  200.550778][ T5087] binder: 5079:5087 ioctl c0306201 0 returned -14
[  201.864101][ T5100] atomic_op ffff888056d13998 conn xmit_atomic 0000000000000000
[  202.014439][ T5099] loop2: detected capacity change from 0 to 4096
[  202.267202][ T5099] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  206.683572][ T5109] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  206.690157][ T5109] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  206.699149][ T5109] vhci_hcd vhci_hcd.0: Device attached
[  206.779630][ T5110] vhci_hcd: connection closed
[  206.780728][    T9] vhci_hcd: stop threads
[  206.790531][    T9] vhci_hcd: release socket
[  206.794965][    T9] vhci_hcd: disconnect device
[  206.892617][ T5118] device-mapper: ioctl: Empty message received.
[  207.264075][ T5127] binder: BINDER_SET_CONTEXT_MGR already set
[  207.270450][ T5127] binder: 5121:5127 ioctl 4018620d 200000000040 returned -16
[  207.284348][ T5127] binder: 5121:5127 ioctl c0306201 0 returned -14
[  207.297988][ T5127] binder: 5121:5127 ioctl c0306201 0 returned -14
[  207.337732][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'.
[  209.303359][ T5145] atomic_op ffff8880221fe198 conn xmit_atomic 0000000000000000
[  210.265672][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'.
[  213.656890][ T5175] binder: 5166:5175 ioctl c0306201 0 returned -14
[  216.276987][ T5183] device-mapper: ioctl: Empty message received.
[  216.393425][ T5188] binder: BINDER_SET_CONTEXT_MGR already set
[  216.399611][ T5188] binder: 5177:5188 ioctl 4018620d 200000000040 returned -16
[  216.413435][ T5188] binder: 5177:5188 ioctl c0306201 0 returned -14
[  216.427190][ T5188] binder: 5177:5188 ioctl c0306201 0 returned -14
[  217.576888][ T5198] device-mapper: ioctl: Empty message received.
[  217.588530][ T5197] binder: 5196:5197 ioctl c0306201 200000000680 returned -14
[  219.195245][ T1325] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  219.435317][ T1325] usb 3-1: Using ep0 maxpacket: 8
[  219.716299][ T1325] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  219.766708][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.903621][ T1325] usb 3-1: Product: syz
[  219.961308][ T1325] usb 3-1: Manufacturer: syz
[  220.038376][ T1325] usb 3-1: SerialNumber: syz
[  220.212731][ T1325] usb 3-1: config 0 descriptor??
[  220.855324][ T1325] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71
[  221.271384][ T1325] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  221.285767][ T1325] usb 3-1: USB disconnect, device number 2
[  221.538847][ T5216] ieee802154 phy0 wpan0: encryption failed: -22
[  221.665586][ T4852] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  221.965198][ T4852] usb 1-1: Using ep0 maxpacket: 32
[  222.105879][ T4852] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  222.157140][ T4852] usb 1-1: config 0 has no interface number 0
[  222.268682][ T4852] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  222.389360][ T4852] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  224.346903][ T4852] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  224.405278][ T4852] usb 1-1: string descriptor 0 read error: -71
[  224.424701][ T4852] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  224.458265][ T4852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.624427][ T4852] usb 1-1: config 0 descriptor??
[  224.695233][ T4852] usb 1-1: can't set config #0, error -71
[  224.717497][ T4852] usb 1-1: USB disconnect, device number 2
[  225.499570][ T5228] binder: BINDER_SET_CONTEXT_MGR already set
[  225.505658][ T5228] binder: 5226:5228 ioctl 4018620d 200000000040 returned -16
[  225.513965][ T5228] binder: 5226:5228 ioctl c0306201 0 returned -14
[  225.521623][ T5228] binder: 5226:5228 ioctl c0306201 0 returned -14
[  225.597847][ T5239] binder: 5238:5239 ioctl c0306201 200000000680 returned -14
[  228.615436][ T1109] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  229.075850][ T1109] usb 3-1: Using ep0 maxpacket: 32
[  229.532361][ T5264] device-mapper: ioctl: Empty message received.
[  229.575352][ T1109] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  229.583512][ T1109] usb 3-1: config 0 has no interface number 0
[  229.605479][ T1109] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  229.624231][ T1109] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  229.646712][ T1109] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  230.650447][ T1109] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  230.666943][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.674984][ T1109] usb 3-1: Product: syz
[  230.679606][ T1109] usb 3-1: Manufacturer: syz
[  230.684247][ T1109] usb 3-1: SerialNumber: syz
[  230.691213][ T1109] usb 3-1: config 0 descriptor??
[  230.716275][ T5250] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  230.862517][ T1109] usb-storage 3-1:0.20: USB Mass Storage device detected
[  230.985942][ T1109] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  231.159688][ T1109] scsi host1: usb-storage 3-1:0.20
[  231.227241][ T1109] usb 3-1: USB disconnect, device number 3
[  231.310690][ T5291] device-mapper: ioctl: Empty message received.
[  231.988880][ T5299] ieee802154 phy0 wpan0: encryption failed: -22
[  232.789485][ T5305] device-mapper: ioctl: Empty message received.
[  232.845163][ T1109] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  232.881238][ T5301] zram0: detected capacity change from 0 to 8
[  233.165253][ T1109] usb 4-1: Using ep0 maxpacket: 32
[  233.740514][ T5316] loop4: detected capacity change from 0 to 256
[  233.805391][ T1109] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  233.813551][ T1109] usb 4-1: config 0 has no interface number 0
[  233.857629][ T1109] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  233.949029][ T5320] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  233.955618][ T5320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  233.963638][ T5320] vhci_hcd vhci_hcd.0: Device attached
[  234.018066][ T5316] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  234.078121][ T1109] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  234.637754][ T1109] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  234.676608][ T5321] vhci_hcd: connection closed
[  234.679046][ T1268] vhci_hcd: stop threads
[  235.195226][ T1268] vhci_hcd: release socket
[  235.199815][ T1268] vhci_hcd: disconnect device
[  235.326255][ T1109] usb 4-1: string descriptor 0 read error: -71
[  235.332634][ T1109] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  235.498873][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.519555][ T1109] usb 4-1: config 0 descriptor??
[  235.568184][ T1109] usb 4-1: can't set config #0, error -71
[  235.621939][ T1109] usb 4-1: USB disconnect, device number 3
[  236.571658][ T5344] atomic_op ffff88801fc2b998 conn xmit_atomic 0000000000000000
[  238.531749][ T5359] ieee802154 phy0 wpan0: encryption failed: -22
[  239.373324][ T5358] vivid-001: kernel_thread() failed
[  239.815510][ T5369] binder: BINDER_SET_CONTEXT_MGR already set
[  239.821572][ T5369] binder: 5363:5369 ioctl 4018620d 200000000040 returned -16
[  239.830114][ T5369] binder: 5363:5369 ioctl c0306201 0 returned -14
[  239.837898][ T5369] binder: 5363:5369 ioctl c0306201 0 returned -14
[  244.367477][ T5384] loop4: detected capacity change from 0 to 256
[  244.417306][ T5384] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  244.621869][ T5392] zram: Can't change algorithm for initialized device
[  244.636743][ T5392] zram: Cannot change disksize for initialized device
[  246.328038][ T5412] binder: 5409:5412 ioctl c0306201 200000000680 returned -14
[  248.047914][ T5413] zram: Can't change algorithm for initialized device
[  248.073687][ T5419] binder: 5418:5419 ioctl c0306201 200000000680 returned -14
[  248.079579][ T5413] zram: Cannot change disksize for initialized device
[  249.487518][ T5434] ieee802154 phy0 wpan0: encryption failed: -22
[  250.279863][ T5432] vivid-001: kernel_thread() failed
[  250.854221][ T5437] device-mapper: ioctl: Empty message received.
[  253.021426][ T5469] ieee802154 phy0 wpan0: encryption failed: -22
[  255.143775][ T5483] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  255.150482][ T5483] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  255.158643][ T5483] vhci_hcd vhci_hcd.0: Device attached
[  255.568355][ T5484] vhci_hcd: connection closed
[  255.570272][ T4392] vhci_hcd: stop threads
[  255.688544][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.695480][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.121988][ T4392] vhci_hcd: release socket
[  256.129196][ T4392] vhci_hcd: disconnect device
[  256.251997][    T7] vhci_hcd: vhci_device speed not set
[  256.297957][ T5478] zram: Can't change algorithm for initialized device
[  256.316794][ T5478] zram: Cannot change disksize for initialized device
[  256.926925][ T5497] device-mapper: table: 248:0: zero-length target
[  256.996663][ T5497] device-mapper: ioctl: error adding target to table
[  257.854297][ T5500] device-mapper: ioctl: Empty message received.
[  259.159288][ T5518] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  259.166300][ T5518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  259.200343][ T5518] vhci_hcd vhci_hcd.0: Device attached
[  260.376493][ T5522] vivid-001: kernel_thread() failed
[  260.455523][ T5519] vhci_hcd: connection closed
[  260.456652][ T4392] vhci_hcd: stop threads
[  260.495264][ T4852] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  260.705418][ T4392] vhci_hcd: release socket
[  260.710103][ T4392] vhci_hcd: disconnect device
[  262.335725][ T5549] device-mapper: table: 248:0: zero-length target
[  262.342231][ T5549] device-mapper: ioctl: error adding target to table
[  262.362198][ T5551] device-mapper: ioctl: Empty message received.
[  265.039878][ T5564] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  265.046482][ T5564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  265.054869][ T5564] vhci_hcd vhci_hcd.0: Device attached
[  265.132506][ T5567] vhci_hcd: connection closed
[  265.170214][ T1268] vhci_hcd: stop threads
[  265.182301][ T1268] vhci_hcd: release socket
[  265.715296][ T1268] vhci_hcd: disconnect device
[  265.755148][   T23] usb 33-1: new low-speed USB device number 3 using vhci_hcd
[  265.762751][   T23] usb 33-1: enqueue for inactive port 0
[  265.768785][ T4852] vhci_hcd: vhci_device speed not set
[  266.347683][ T5576] atomic_op ffff88805ca18998 conn xmit_atomic 0000000000000000
[  266.835086][   T23] vhci_hcd: vhci_device speed not set
[  272.513642][ T5615] binder: 5614:5615 ioctl c0306201 200000000680 returned -14
[  277.064824][ T5646] device-mapper: ioctl: Empty message received.
[  277.077601][ T5643] device-mapper: ioctl: Empty message received.
[  280.110547][ T5678] ieee802154 phy0 wpan0: encryption failed: -22
[  280.837665][ T5676] vivid-001: kernel_thread() failed
[  281.364919][ T5672] binder: 5653:5672 ioctl c0306201 0 returned -14
[  281.464339][ T5689] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  281.960470][ T5698] binder: BINDER_SET_CONTEXT_MGR already set
[  281.966575][ T5698] binder: 5666:5698 ioctl 4018620d 200000000040 returned -16
[  281.975087][ T5698] binder: 5666:5698 ioctl c0306201 0 returned -14
[  281.982500][ T5698] binder: 5666:5698 ioctl c0306201 0 returned -14
[  292.438217][ T5752] device-mapper: ioctl: Empty message received.
[  293.647999][ T5772] device-mapper: ioctl: Empty message received.
[  294.427267][ T5787] atomic_op ffff88807863f998 conn xmit_atomic 0000000000000000
[  295.441160][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  295.566322][ T5796] ieee802154 phy0 wpan0: encryption failed: -22
[  295.735073][    T7] usb 2-1: Using ep0 maxpacket: 8
[  296.087417][    T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  296.553834][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.589228][    T7] usb 2-1: Product: syz
[  296.604653][    T7] usb 2-1: Manufacturer: syz
[  296.656254][    T7] usb 2-1: SerialNumber: syz
[  296.761673][    T7] usb 2-1: config 0 descriptor??
[  297.125467][    T7] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  298.315400][    T7] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  299.503112][ T5833] loop4: detected capacity change from 0 to 4096
[  299.563343][ T5833] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  300.368216][   T26] audit: type=1800 audit(1790104890.279:3): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.402" name="file1" dev="loop4" ino=30 res=0 errno=0
[  300.638984][    T7] usb 2-1: USB disconnect, device number 3
[  302.364891][ T5857] capability: warning: `syz.1.406' uses deprecated v2 capabilities in a way that may be insecure
[  306.455146][    T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  306.732931][    T7] usb 4-1: Using ep0 maxpacket: 32
[  306.865124][   T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  306.915429][    T7] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  307.000083][    T7] usb 4-1: config 0 has no interface number 0
[  307.076871][    T7] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  307.173546][    T7] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  307.271731][    T7] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  307.655440][    T7] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  307.664580][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.710830][    T7] usb 4-1: Product: syz
[  307.715692][    T7] usb 4-1: Manufacturer: syz
[  307.720529][    T7] usb 4-1: SerialNumber: syz
[  307.738152][    T7] usb 4-1: config 0 descriptor??
[  307.766115][ T5874] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  307.875249][   T23] usb 1-1: Using ep0 maxpacket: 32
[  307.996382][   T23] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  308.054723][   T23] usb 1-1: config 0 has no interface number 0
[  308.154064][   T23] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  308.306176][   T23] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  308.433851][   T23] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  308.695949][    T7] usb-storage 4-1:0.20: USB Mass Storage device detected
[  308.726388][    T7] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  308.752972][   T23] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  308.770808][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.776703][    T7] scsi host1: usb-storage 4-1:0.20
[  308.782812][   T23] usb 1-1: Product: syz
[  308.788491][   T23] usb 1-1: Manufacturer: syz
[  308.793559][   T23] usb 1-1: SerialNumber: syz
[  308.805978][   T23] usb 1-1: config 0 descriptor??
[  308.821820][    T7] usb 4-1: USB disconnect, device number 4
[  308.826188][ T5881] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  310.266143][   T23] usb-storage 1-1:0.20: USB Mass Storage device detected
[  310.417201][   T23] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  310.494238][   T23] scsi host2: usb-storage 1-1:0.20
[  310.514560][   T23] usb 1-1: USB disconnect, device number 3
[  312.465724][ T5924] device-mapper: ioctl: Empty message received.
[  312.546809][ T5929] atomic_op ffff88807eb2d198 conn xmit_atomic 0000000000000000
[  314.087363][ T5942] binder: 5941:5942 ioctl c0306201 200000000680 returned -14
[  314.357860][ T5940] device-mapper: ioctl: Empty message received.
[  315.694017][ T5963] device-mapper: ioctl: Empty message received.
[  317.130494][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.136984][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  318.601496][ T5965] atomic_op ffff88802389b998 conn xmit_atomic 0000000000000000
[  318.849750][ T5977] zram: Can't change algorithm for initialized device
[  318.972264][ T5977] zram: Cannot change disksize for initialized device
[  326.771836][ T6029] atomic_op ffff88801addf998 conn xmit_atomic 0000000000000000
[  327.319376][ T6035] device-mapper: ioctl: Empty message received.
[  327.505256][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  328.565280][   T23] usb 5-1: Using ep0 maxpacket: 32
[  328.666098][ T6050] binder: 6045:6050 ioctl c0306201 200000000680 returned -14
[  328.695254][   T23] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  328.703401][   T23] usb 5-1: config 0 has no interface number 0
[  329.026068][   T23] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  330.271659][   T23] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  330.544636][   T23] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  330.615144][   T23] usb 5-1: string descriptor 0 read error: -71
[  330.625318][   T23] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  330.642782][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.683098][   T23] usb 5-1: config 0 descriptor??
[  330.718084][   T23] usb 5-1: can't set config #0, error -71
[  330.741209][   T23] usb 5-1: USB disconnect, device number 4
[  331.499253][ T6069] ieee802154 phy0 wpan0: encryption failed: -22
[  331.535119][ T4231] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  332.535120][ T4231] usb 4-1: Using ep0 maxpacket: 32
[  333.375289][ T4231] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  333.383544][ T4231] usb 4-1: config 0 has no interface number 0
[  333.389936][ T4231] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  333.400110][ T4231] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  333.410126][ T4231] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  334.995217][ T4231] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  335.004342][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.627595][ T4231] usb 4-1: Product: syz
[  335.632368][ T4231] usb 4-1: Manufacturer: syz
[  336.196878][ T4231] usb 4-1: config 0 descriptor??
[  336.235224][ T4231] usb 4-1: can't set config #0, error -71
[  336.270149][ T4231] usb 4-1: USB disconnect, device number 5
[  336.424880][ T6086] binder: 6085:6086 ioctl c0306201 200000000680 returned -14
[  336.561786][ T6089] loop0: detected capacity change from 0 to 256
[  337.979234][ T6089] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  338.045432][ T6087] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  338.051994][ T6087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  338.063941][ T6087] vhci_hcd vhci_hcd.0: Device attached
[  338.083383][ T6094] vhci_hcd: connection closed
[  338.083632][ T4392] vhci_hcd: stop threads
[  338.130390][ T4392] vhci_hcd: release socket
[  338.137549][ T4392] vhci_hcd: disconnect device
[  343.235065][ T1325] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  343.535255][ T1325] usb 3-1: Using ep0 maxpacket: 8
[  343.895371][ T1325] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  343.920155][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.821163][ T1325] usb 3-1: Product: syz
[  344.825521][ T1325] usb 3-1: Manufacturer: syz
[  344.830151][ T1325] usb 3-1: SerialNumber: syz
[  345.545129][ T1325] usb 3-1: config 0 descriptor??
[  347.233457][ T1325] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  347.715212][ T1325] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  347.789534][ T1325] usb 3-1: USB disconnect, device number 4
[  350.998936][ T6188] ieee802154 phy0 wpan0: encryption failed: -22
[  351.357778][ T6187] vivid-001: kernel_thread() failed
[  351.541405][ T6192] atomic_op ffff88807e4f6198 conn xmit_atomic 0000000000000000
[  351.985477][ T4296] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  352.084174][ T6196] loop2: detected capacity change from 0 to 256
[  352.132040][ T6196] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  352.246562][ T4296] usb 1-1: Using ep0 maxpacket: 32
[  352.375433][ T4296] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  353.207924][ T4296] usb 1-1: config 0 has no interface number 0
[  353.214228][ T4296] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  353.225143][ T4296] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  353.235304][ T4296] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  353.435627][ T4296] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  353.459113][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.666768][ T4296] usb 1-1: Product: syz
[  353.671077][ T4296] usb 1-1: Manufacturer: syz
[  353.676173][ T4296] usb 1-1: SerialNumber: syz
[  353.804551][ T4296] usb 1-1: config 0 descriptor??
[  353.834954][ T6186] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  353.897639][ T4296] usb 1-1: can't set config #0, error -71
[  353.908747][ T4296] usb 1-1: USB disconnect, device number 4
[  354.201713][ T6218] ieee802154 phy0 wpan0: encryption failed: -22
[  354.462549][ T6231] zram: Can't change algorithm for initialized device
[  355.947885][ T6242] loop2: detected capacity change from 0 to 256
[  355.992506][ T6242] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  356.134745][ T6244] device-mapper: ioctl: Empty message received.
[  357.505485][ T6267] ieee802154 phy0 wpan0: encryption failed: -22
[  358.770397][ T6273] device-mapper: ioctl: Empty message received.
[  361.317573][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'.
[  361.336415][ T6311] netlink: 104 bytes leftover after parsing attributes in process `syz.3.528'.
[  361.351339][ T6311] netlink: 48 bytes leftover after parsing attributes in process `syz.3.528'.
[  363.457844][ T6327] vivid-001: kernel_thread() failed
[  364.803222][ T6347] ieee802154 phy0 wpan0: encryption failed: -22
[  367.204741][ T6361] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  370.499924][ T6382] binder: 6380:6382 ioctl c0306201 0 returned -14
[  371.197172][ T6378] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6379] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6378]
[  375.485869][ T1109] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  375.725985][ T1109] usb 1-1: Using ep0 maxpacket: 32
[  376.395389][ T1109] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  376.403548][ T1109] usb 1-1: config 0 has no interface number 0
[  376.453797][ T1109] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  376.493780][ T1109] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  376.504330][ T1109] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  376.735390][ T1109] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  376.744801][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.799726][ T1109] usb 1-1: Product: syz
[  376.803959][ T1109] usb 1-1: Manufacturer: syz
[  376.839199][ T1109] usb 1-1: SerialNumber: syz
[  376.863528][ T1109] usb 1-1: config 0 descriptor??
[  376.965431][ T6400] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  377.025175][ T4227] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  377.371883][ T1109] usb-storage 1-1:0.20: USB Mass Storage device detected
[  378.135238][ T4227] usb 4-1: Using ep0 maxpacket: 32
[  378.157068][ T1109] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  378.255541][ T4227] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  378.344267][ T1109] scsi host1: usb-storage 1-1:0.20
[  378.353939][ T1109] usb 1-1: USB disconnect, device number 5
[  378.406991][ T4227] usb 4-1: config 0 has no interface number 0
[  378.413174][ T4227] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  378.538849][ T6423] binder: BINDER_SET_CONTEXT_MGR already set
[  378.545028][ T6423] binder: 6419:6423 ioctl 4018620d 200000000040 returned -16
[  378.559199][ T6423] binder: 6419:6423 ioctl c0306201 0 returned -14
[  378.572418][ T6423] binder: 6419:6423 ioctl c0306201 0 returned -14
[  379.287680][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  379.294041][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  379.465615][ T4227] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  379.515121][ T4227] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  379.715419][ T4227] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  380.386996][ T6429] vivid-001: kernel_thread() failed
[  380.421730][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.477291][ T4227] usb 4-1: Product: syz
[  380.482745][ T4227] usb 4-1: Manufacturer: syz
[  380.551004][ T4227] usb 4-1: SerialNumber: syz
[  380.656452][ T4227] usb 4-1: config 0 descriptor??
[  380.759741][ T4227] usb 4-1: can't set config #0, error -71
[  380.968096][ T4227] usb 4-1: USB disconnect, device number 6
[  383.344577][ T6451] device-mapper: ioctl: Empty message received.
[  386.832434][ T1325] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  389.342979][ T1325] usb 5-1: Using ep0 maxpacket: 8
[  389.585172][ T1325] usb 5-1: device descriptor read/all, error -71
[  394.460554][ T6530] zram: Can't change algorithm for initialized device
[  394.476752][ T6530] zram: Cannot change disksize for initialized device
[  398.088554][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'.
[  400.834203][ T6592] atomic_op ffff888025148998 conn xmit_atomic 0000000000000000
[  401.256698][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14
[  401.265564][ T6594] binder: BINDER_SET_CONTEXT_MGR already set
[  401.271601][ T6594] binder: 6589:6594 ioctl 4018620d 200000000040 returned -16
[  401.280080][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14
[  401.287649][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14
[  403.628752][ T6610] zram: Can't change algorithm for initialized device
[  403.661359][ T6610] zram: Cannot change disksize for initialized device
[  411.619947][ T6646] netlink: 104 bytes leftover after parsing attributes in process `syz.1.619'.
[  414.232260][ T6661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.625'.
[  419.322792][ T6683] loop4: detected capacity change from 0 to 256
[  421.101093][ T6683] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  424.205228][ T6706] binder: BINDER_SET_CONTEXT_MGR already set
[  424.979576][ T6706] binder: 6700:6706 ioctl 4018620d 200000000040 returned -16
[  424.988369][ T6706] binder: 6700:6706 ioctl c0306201 0 returned -14
[  424.995459][ T6706] binder: 6700:6706 ioctl c0306201 0 returned -14
[  425.002645][ T6706] binder: 6700:6706 ioctl c0306201 0 returned -14
[  426.178732][ T6716] atomic_op ffff888076682998 conn xmit_atomic 0000000000000000
[  430.237552][ T6740] binder: 6733:6740 ioctl 4018620d 0 returned -22
[  430.244748][ T6740] binder: 6733:6740 ioctl c0306201 0 returned -14
[  430.252258][ T6740] binder: 6733:6740 ioctl c0306201 0 returned -14
[  430.419191][ T6741] loop1: detected capacity change from 0 to 256
[  430.956622][ T6741] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  431.243458][ T6754] atomic_op ffff8880228ad198 conn xmit_atomic 0000000000000000
[  433.273076][ T6757] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  433.279734][ T6757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  433.325390][ T6757] vhci_hcd vhci_hcd.0: Device attached
[  433.348709][ T6762] vhci_hcd: connection closed
[  433.359978][ T4252] vhci_hcd: stop threads
[  433.414913][ T4252] vhci_hcd: release socket
[  433.441257][ T4252] vhci_hcd: disconnect device
[  436.475520][    T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  436.767596][ T6792] atomic_op ffff88801eee6998 conn xmit_atomic 0000000000000000
[  436.795188][    T7] usb 1-1: Using ep0 maxpacket: 32
[  436.966073][    T7] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  437.485810][    T7] usb 1-1: config 0 has no interface number 0
[  437.491975][    T7] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  437.592367][    T7] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  437.760110][    T7] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  438.285129][    T7] usb 1-1: string descriptor 0 read error: -71
[  438.296077][    T7] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  438.397121][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.214480][    T7] usb 1-1: config 0 descriptor??
[  439.893226][    T7] usb 1-1: can't set config #0, error -71
[  439.904541][    T7] usb 1-1: USB disconnect, device number 6
[  440.007816][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  440.014629][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  443.397299][ T6825] binder: BINDER_SET_CONTEXT_MGR already set
[  443.403425][ T6825] binder: 6816:6825 ioctl 4018620d 200000000040 returned -16
[  443.416808][ T6825] binder: 6816:6825 ioctl c0306201 0 returned -14
[  443.429728][ T6825] binder: 6816:6825 ioctl c0306201 0 returned -14
[  445.085792][ T6823] binder: BINDER_SET_CONTEXT_MGR already set
[  445.091984][ T6823] binder: 6820:6823 ioctl 4018620d 200000000040 returned -16
[  445.100485][ T6823] binder: 6820:6823 ioctl c0306201 0 returned -14
[  445.108044][ T6823] binder: 6820:6823 ioctl c0306201 0 returned -14
[  445.115245][ T6823] binder: 6820:6823 ioctl c0306201 0 returned -14
[  447.419870][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.670'.
[  449.326744][ T6853] binder: BINDER_SET_CONTEXT_MGR already set
[  449.332860][ T6853] binder: 6843:6853 ioctl 4018620d 200000000040 returned -16
[  449.352991][ T6853] binder: 6843:6853 ioctl c0306201 0 returned -14
[  449.366224][ T6853] binder: 6843:6853 ioctl c0306201 0 returned -14
[  452.356623][ T6866] binder: BINDER_SET_CONTEXT_MGR already set
[  452.362838][ T6866] binder: 6863:6866 ioctl 4018620d 200000000040 returned -16
[  452.376703][ T6866] binder: 6863:6866 ioctl c0306201 0 returned -14
[  452.389077][ T6866] binder: 6863:6866 ioctl c0306201 0 returned -14
[  461.270062][ T6899] binder: BINDER_SET_CONTEXT_MGR already set
[  461.276218][ T6899] binder: 6892:6899 ioctl 4018620d 200000000040 returned -16
[  461.294257][ T6899] binder: 6892:6899 ioctl c0306201 0 returned -14
[  461.369677][ T6899] binder: 6892:6899 ioctl c0306201 0 returned -14
[  463.366005][ T6904] device-mapper: ioctl: Empty message received.
[  463.777025][ T6915] binder: BINDER_SET_CONTEXT_MGR already set
[  463.783443][ T6915] binder: 6911:6915 ioctl 4018620d 200000000040 returned -16
[  463.796662][ T6915] binder: 6911:6915 ioctl c0306201 0 returned -14
[  463.809434][ T6915] binder: 6911:6915 ioctl c0306201 0 returned -14
[  466.104838][ T6930] device-mapper: ioctl: Empty message received.
[  475.492440][ T6973] device-mapper: ioctl: Empty message received.
[  477.594919][    C1] hrtimer: interrupt took 52520 ns
[  482.092523][ T4256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.217116][ T4256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.312055][ T4256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.611374][ T4256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.944608][ T7005] chnl_net:caif_netlink_parms(): no params data found
[  483.201070][ T7025] binder: BINDER_SET_CONTEXT_MGR already set
[  483.207234][ T7025] binder: 7019:7025 ioctl 4018620d 200000000040 returned -16
[  483.220656][ T7025] binder: 7019:7025 ioctl c0306201 0 returned -14
[  483.233284][ T7025] binder: 7019:7025 ioctl c0306201 0 returned -14
[  483.998013][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.005458][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.013733][ T7005] device bridge_slave_0 entered promiscuous mode
[  484.023505][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.025248][ T4227] Bluetooth: hci3: command 0x0409 tx timeout
[  484.031257][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.046221][ T7005] device bridge_slave_1 entered promiscuous mode
[  484.443918][ T7005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.470667][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.720'.
[  484.487751][ T7005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.602270][ T7005] team0: Port device team_slave_0 added
[  484.673090][ T7005] team0: Port device team_slave_1 added
[  484.765866][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.773771][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.854963][ T7005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.893701][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.913432][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.005038][ T7005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.212982][ T7005] device hsr_slave_0 entered promiscuous mode
[  485.241676][ T7005] device hsr_slave_1 entered promiscuous mode
[  485.274521][ T7005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  485.290723][ T7005] Cannot create hsr debugfs directory
[  486.596111][   T23] Bluetooth: hci3: command 0x041b tx timeout
[  487.003269][ T4256] device hsr_slave_0 left promiscuous mode
[  487.045009][ T4256] device hsr_slave_1 left promiscuous mode
[  487.057139][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.079248][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.103396][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.155074][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.373337][ T4256] device bridge_slave_1 left promiscuous mode
[  487.517647][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.994069][ T7094] device-mapper: table: 248:0: multipath: invalid number of feature args
[  488.002768][ T7094] device-mapper: ioctl: error adding target to table
[  488.016752][ T4256] device bridge_slave_0 left promiscuous mode
[  488.023040][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.197222][ T4256] device veth1_macvtap left promiscuous mode
[  488.203792][ T7099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  488.210342][ T7099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  488.230658][ T7108] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  488.241331][ T4256] device veth0_macvtap left promiscuous mode
[  488.250347][ T7099] vhci_hcd vhci_hcd.0: Device attached
[  488.281170][ T4256] device veth1_vlan left promiscuous mode
[  488.289435][ T4256] device veth0_vlan left promiscuous mode
[  488.297202][ T7096] device-mapper: table: 248:0: multipath: invalid initial priority group number
[  488.341468][ T7096] device-mapper: ioctl: error adding target to table
[  488.372369][ T7111] device-mapper: ioctl: Empty message received.
[  488.405106][ T7106] vhci_hcd: connection closed
[  488.405577][ T5487] vhci_hcd: stop threads
[  488.417470][ T5487] vhci_hcd: release socket
[  488.422076][ T5487] vhci_hcd: disconnect device
[  488.455186][ T4296] vhci_hcd: vhci_device speed not set
[  488.622603][ T4256] team0 (unregistering): Port device team_slave_1 removed
[  488.640538][ T4256] team0 (unregistering): Port device team_slave_0 removed
[  488.646074][ T4852] Bluetooth: hci3: command 0x040f tx timeout
[  488.661526][ T4256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.683479][ T4256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.762315][ T4256] bond0 (unregistering): Released all slaves
[  488.838302][ T7005] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  488.899561][ T7005] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  488.981484][ T7005] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  489.031227][ T7005] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  489.136718][ T7129] device-mapper: ioctl: Empty message received.
[  489.233664][ T7134] device-mapper: ioctl: Empty message received.
[  489.382448][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.404005][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  489.419277][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  489.453833][ T7005] 8021q: adding VLAN 0 to HW filter on device team0
[  489.494337][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  489.699937][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  489.903085][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.910331][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.728889][ T4852] Bluetooth: hci3: command 0x0419 tx timeout
[  491.238508][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  491.274662][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  491.352907][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  491.361622][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.368772][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  491.378928][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  491.430314][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  491.560553][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  491.798665][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  491.993923][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  492.148767][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  492.195218][ T7163] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  492.201973][ T7163] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  492.249452][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  492.291564][ T7005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  493.132759][ T7163] vhci_hcd vhci_hcd.0: Device attached
[  493.150277][ T7005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  493.167179][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  493.184125][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  493.288053][ T7164] vhci_hcd: connection closed
[  493.288309][ T4392] vhci_hcd: stop threads
[  493.304963][ T4392] vhci_hcd: release socket
[  493.320744][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  493.335581][ T4392] vhci_hcd: disconnect device
[  493.408297][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  493.480983][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  494.631963][ T7005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.682271][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  494.691053][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  494.720304][ T7199] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  495.108474][ T7209] device-mapper: ioctl: Empty message received.
[  496.593103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  496.618738][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  496.950928][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  496.996266][ T7239] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  497.002861][ T7239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  497.036391][ T7239] vhci_hcd vhci_hcd.0: Device attached
[  497.046896][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  497.106577][ T7005] device veth0_vlan entered promiscuous mode
[  497.138571][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  497.152909][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  497.210384][ T7005] device veth1_vlan entered promiscuous mode
[  497.251459][ T7245] vhci_hcd: connection closed
[  497.251714][ T4330] vhci_hcd: stop threads
[  497.261268][ T4330] vhci_hcd: release socket
[  497.287543][ T4330] vhci_hcd: disconnect device
[  497.305178][ T1107] usb 35-1: new low-speed USB device number 5 using vhci_hcd
[  497.312702][ T1107] usb 35-1: enqueue for inactive port 0
[  497.500769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  497.941864][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  498.267408][ T1107] vhci_hcd: vhci_device speed not set
[  498.273956][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  498.302274][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  498.361133][ T7005] device veth0_macvtap entered promiscuous mode
[  498.402169][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  499.724694][ T7005] device veth1_macvtap entered promiscuous mode
[  499.793130][ T7270] device syzkaller0 entered promiscuous mode
[  499.808568][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.828606][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.956196][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.981051][ T7277] device-mapper: ioctl: Empty message received.
[  500.241827][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.467801][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.543604][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.628155][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.695020][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.804157][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.861408][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  500.875736][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  500.943634][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.009059][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.100767][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.168440][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.188934][ T7291] device-mapper: table: 248:0: zero-length target
[  501.206013][ T7291] device-mapper: ioctl: error adding target to table
[  501.226293][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.286436][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.314773][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.342880][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.380108][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  501.413105][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  501.447874][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.454226][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  501.510229][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  501.664872][ T7295] zram: Can't change algorithm for initialized device
[  501.676634][ T7295] zram: Cannot change disksize for initialized device
[  501.681814][ T7005] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.704187][ T7005] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.722041][ T7297] device-mapper: ioctl: Empty message received.
[  501.728490][ T7005] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.738475][ T7005] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.986394][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.045478][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.072317][ T7303] device-mapper: ioctl: Empty message received.
[  502.093758][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  502.129558][ T7312] zram: Can't change algorithm for initialized device
[  502.150353][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.180634][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.190772][ T7312] zram: Cannot change disksize for initialized device
[  502.228310][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  503.108593][   T26] audit: type=1800 audit(1790105093.019:4): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.778" name="file1" dev="sda1" ino=2048 res=0 errno=0
[  503.297796][ T7333] device-mapper: table: 248:0: zero-length target
[  503.304434][ T7333] device-mapper: ioctl: error adding target to table
[  503.418434][ T7328] device-mapper: ioctl: Empty message received.
[  503.424550][ T7337] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  503.472662][ T7337] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  503.809005][ T7355] device syzkaller0 entered promiscuous mode
[  504.205182][ T7362] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  504.211737][ T7362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  504.244042][ T7362] vhci_hcd vhci_hcd.0: Device attached
[  504.251949][ T7368] vhci_hcd: connection closed
[  504.254530][ T4256] vhci_hcd: stop threads
[  504.273879][ T4256] vhci_hcd: release socket
[  504.288733][ T4256] vhci_hcd: disconnect device
[  504.574834][ T7379] device syzkaller0 entered promiscuous mode
[  504.840623][ T7384] device-mapper: table: 248:0: multipath: invalid number of feature args
[  504.865062][ T7384] device-mapper: ioctl: error adding target to table
[  504.895605][ T7384] device-mapper: ioctl: Empty message received.
[  505.026627][ T7390] device-mapper: ioctl: Empty message received.
[  505.180051][ T7397] device-mapper: ioctl: Empty message received.
[  505.533946][ T7411] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  505.557157][ T7408] device-mapper: ioctl: Empty message received.
[  505.927951][ T7425] device-mapper: table: 248:0: zero-length target
[  505.934449][ T7425] device-mapper: ioctl: error adding target to table
[  505.949318][ T7422] device-mapper: ioctl: Empty message received.
[  506.195971][ T7438] device-mapper: table: 248:0: multipath: invalid number of feature args
[  506.204646][ T7438] device-mapper: ioctl: error adding target to table
[  506.255609][ T7438] device-mapper: ioctl: Empty message received.
[  507.625008][ T4296] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  508.075297][ T4296] usb 6-1: config 0 has no interfaces?
[  508.265358][ T4296] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  508.281339][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  508.296364][ T4296] usb 6-1: Product: syz
[  508.305310][ T4296] usb 6-1: Manufacturer: syz
[  508.314603][ T4296] usb 6-1: SerialNumber: syz
[  508.348176][ T4296] usb 6-1: config 0 descriptor??
[  508.748998][   T26] audit: type=1800 audit(1790105098.659:5): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.810" name="ipv4_address" dev="configfs" ino=47115 res=0 errno=0
[  508.787125][ T1109] usb 6-1: USB disconnect, device number 2
[  508.824233][   T26] audit: type=1800 audit(1790105098.679:6): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.810" name="ipv4_port" dev="configfs" ino=47116 res=0 errno=0
[  508.955109][   T26] audit: type=1800 audit(1790105098.689:7): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.810" name="num" dev="configfs" ino=47117 res=0 errno=0
[  509.049862][   T26] audit: type=1800 audit(1790105098.689:8): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.810" name="local" dev="configfs" ino=47118 res=0 errno=0
[  509.100054][ T7498] device-mapper: table: 248:0: multipath: invalid number of feature args
[  509.134628][ T7498] device-mapper: ioctl: error adding target to table
[  509.581361][ T7506] device-mapper: table: 248:0: multipath: invalid number of feature args
[  509.610525][ T7506] device-mapper: ioctl: error adding target to table
[  509.630633][ T7506] device-mapper: ioctl: Empty message received.
[  510.382755][ T7515] device-mapper: ioctl: Empty message received.
[  510.753533][ T7521] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  510.829084][ T7521] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  510.859181][ T7521] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  510.880170][ T7521] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  510.902179][ T7521] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  510.925541][ T7521] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  510.946273][ T7521] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  510.975374][ T7521] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  511.002527][ T7521] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  511.027110][ T7521] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  511.559269][ T7527] FAULT_INJECTION: forcing a failure.
[  511.559269][ T7527] name failslab, interval 1, probability 0, space 0, times 1
[  511.633690][ T7527] CPU: 0 PID: 7527 Comm: syz.4.822 Not tainted syzkaller #0
[  511.641056][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  511.651499][ T7527] Call Trace:
[  511.654870][ T7527]  <TASK>
[  511.657924][ T7527]  dump_stack_lvl+0x188/0x250
[  511.662849][ T7527]  ? show_regs_print_info+0x20/0x20
[  511.668110][ T7527]  ? load_image+0x410/0x410
[  511.672682][ T7527]  should_fail+0x383/0x4b0
[  511.677357][ T7527]  should_failslab+0x5/0x20
[  511.682011][ T7527]  slab_pre_alloc_hook+0x51/0xc0
[  511.687062][ T7527]  kmem_cache_alloc_trace+0x47/0x290
[  511.692492][ T7527]  ? sctp_add_bind_addr+0x89/0x350
[  511.697760][ T7527]  sctp_add_bind_addr+0x89/0x350
[  511.702842][ T7527]  sctp_copy_local_addr_list+0x2f1/0x4c0
[  511.708609][ T7527]  ? asm_sysvec_call_function_single+0x16/0x20
[  511.714926][ T7527]  ? sctp_do_8_2_transport_strike+0x8b0/0x8b0
[  511.721466][ T7527]  ? sctp_copy_one_addr+0x93/0x660
[  511.726645][ T7527]  sctp_bind_addr_copy+0xaf/0x3c0
[  511.731770][ T7527]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  511.738150][ T7527]  sctp_connect_new_asoc+0x2f5/0x6a0
[  511.743486][ T7527]  ? __sctp_connect+0xd80/0xd80
[  511.748374][ T7527]  ? __local_bh_enable_ip+0x136/0x1c0
[  511.753885][ T7527]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  511.759579][ T7527]  ? security_sctp_bind_connect+0x85/0xb0
[  511.765436][ T7527]  sctp_sendmsg+0x15e1/0x2940
[  511.770182][ T7527]  ? sctp_getsockopt+0x8a0/0x8a0
[  511.775175][ T7527]  ? aa_af_perm+0x340/0x340
[  511.779897][ T7527]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  511.786411][ T7527]  ? aa_sock_msg_perm+0x94/0x150
[  511.791390][ T7527]  ? sock_rps_record_flow+0x17/0x3b0
[  511.796768][ T7527]  ? inet_sendmsg+0xca/0x2a0
[  511.801400][ T7527]  ? inet_send_prepare+0x250/0x250
[  511.806695][ T7527]  ____sys_sendmsg+0x5be/0x8f0
[  511.811609][ T7527]  ? __sys_sendmsg_sock+0x30/0x30
[  511.816694][ T7527]  ? import_iovec+0x6f/0xa0
[  511.821286][ T7527]  ___sys_sendmsg+0x236/0x2e0
[  511.826027][ T7527]  ? __sys_sendmsg+0x290/0x290
[  511.830875][ T7527]  __sys_sendmmsg+0x2ba/0x500
[  511.835694][ T7527]  ? __ia32_sys_sendmsg+0x80/0x80
[  511.840890][ T7527]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  511.846999][ T7527]  ? lock_chain_count+0x20/0x20
[  511.851991][ T7527]  __x64_sys_sendmmsg+0x9c/0xb0
[  511.856902][ T7527]  do_syscall_64+0x4c/0xa0
[  511.861413][ T7527]  ? clear_bhb_loop+0x30/0x80
[  511.866132][ T7527]  ? clear_bhb_loop+0x30/0x80
[  511.870853][ T7527]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  511.876816][ T7527] RIP: 0033:0x7f423ed7b159
[  511.881396][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.901129][ T7527] RSP: 002b:00007f423cfd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  511.909604][ T7527] RAX: ffffffffffffffda RBX: 00007f423f002fa0 RCX: 00007f423ed7b159
[  511.917626][ T7527] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 0000000000000008
[  511.925870][ T7527] RBP: 00007f423ee1206b R08: 0000000000000000 R09: 0000000000000000
[  511.934071][ T7527] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000000
[  511.942179][ T7527] R13: 00007f423f003038 R14: 00007f423f002fa0 R15: 00007ffc0b5c2528
[  511.950569][ T7527]  </TASK>
[  514.179338][ T7547] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  514.413021][ T7554] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  514.488855][ T7554] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  515.988793][ T7573] create_pit_timer: 30 callbacks suppressed
[  515.988817][ T7573] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  516.026989][ T7576] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  516.106135][ T7573] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  516.133138][ T7573] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  516.185133][ T7573] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  516.234612][ T7573] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  516.269249][ T7573] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  516.303153][ T7573] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  516.333791][ T7573] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  516.365858][ T7573] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  519.235406][ T7626] device-mapper: ioctl: Empty message received.
[  519.252290][ T7631] loop0: detected capacity change from 0 to 2048
[  519.572525][ T7641] device syzkaller0 entered promiscuous mode
[  520.521837][ T7666] block device autoloading is deprecated and will be removed.
[  520.622940][ T7663] md: invalid raid superblock magic on loop0
[  520.638714][ T7663] md: loop0 does not have a valid v0.0 superblock, not importing!
[  520.675369][ T7663] md: md_import_device returned -22
[  521.182034][ T4394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.374738][ T4394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.548587][ T4394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.607602][ T7672] chnl_net:caif_netlink_parms(): no params data found
[  521.678716][ T4394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.069025][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.085048][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.103442][ T7672] device bridge_slave_0 entered promiscuous mode
[  522.152328][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.175419][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.213434][ T7672] device bridge_slave_1 entered promiscuous mode
[  522.470792][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.560460][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.814647][ T7672] team0: Port device team_slave_0 added
[  522.869232][ T7672] team0: Port device team_slave_1 added
[  522.988279][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.034971][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.065423][   T23] Bluetooth: hci2: command 0x0409 tx timeout
[  523.164979][ T7672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.228976][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.254975][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.345318][ T7672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.471256][ T7672] device hsr_slave_0 entered promiscuous mode
[  523.492876][ T7672] device hsr_slave_1 entered promiscuous mode
[  523.551870][ T7672] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.571961][ T7672] Cannot create hsr debugfs directory
[  524.132023][ T7672] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  524.198833][ T7672] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  524.253709][ T7672] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  524.335236][ T7672] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  524.462529][ T4394] device hsr_slave_0 left promiscuous mode
[  524.515251][ T4394] device hsr_slave_1 left promiscuous mode
[  524.525573][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.533062][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.635762][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.643369][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.705807][ T4394] device bridge_slave_1 left promiscuous mode
[  524.733085][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.804476][ T4394] device bridge_slave_0 left promiscuous mode
[  524.834552][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.911381][ T4394] device veth1_macvtap left promiscuous mode
[  524.930908][ T4394] device veth0_macvtap left promiscuous mode
[  524.962852][ T4394] device veth1_vlan left promiscuous mode
[  524.990748][ T4394] device veth0_vlan left promiscuous mode
[  525.126092][ T1107] Bluetooth: hci2: command 0x041b tx timeout
[  525.633952][ T4394] team0 (unregistering): Port device team_slave_1 removed
[  525.662096][ T4394] team0 (unregistering): Port device team_slave_0 removed
[  525.689703][ T7762] md: array md0 already has disks!
[  525.696452][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  525.707085][ T7762] md: could not open device unknown-block(7,0).
[  525.720072][ T7762] md: error, md_import_device() returned -16
[  526.006886][ T4394] bond0 (unregistering): Released all slaves
[  526.612678][ T7672] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.694606][ T7777] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  526.701187][ T7777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  526.712106][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  526.736492][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  526.753562][ T7672] 8021q: adding VLAN 0 to HW filter on device team0
[  526.771042][ T7777] vhci_hcd vhci_hcd.0: Device attached
[  527.109135][ T7778] vhci_hcd: connection closed
[  527.110251][ T1268] vhci_hcd: stop threads
[  527.136064][ T1268] vhci_hcd: release socket
[  527.153802][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  527.167958][ T1268] vhci_hcd: disconnect device
[  527.185877][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  527.215017][ T4228] Bluetooth: hci2: command 0x040f tx timeout
[  527.223866][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.231069][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.295060][ T4228] Bluetooth: hci0: command 0x0409 tx timeout
[  527.328684][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  527.352958][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  527.373655][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  527.412413][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.419622][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.500586][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  527.610629][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  527.632367][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  527.726030][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  527.734860][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  527.816898][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  527.857800][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  527.883522][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  527.915737][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  527.946505][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  527.975393][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  528.005850][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  528.050763][ T7757] chnl_net:caif_netlink_parms(): no params data found
[  528.363366][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.415012][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.453882][ T7757] device bridge_slave_0 entered promiscuous mode
[  528.521606][ T7757] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.562158][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.603799][ T7757] device bridge_slave_1 entered promiscuous mode
[  528.676454][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  528.694413][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  528.720493][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.761365][ T7757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.826890][ T7757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.957152][ T7757] team0: Port device team_slave_0 added
[  528.988050][ T7757] team0: Port device team_slave_1 added
[  529.089522][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.128498][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.246006][ T7757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.285062][ T1109] Bluetooth: hci2: command 0x0419 tx timeout
[  529.300475][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.335439][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.375442][ T1109] Bluetooth: hci0: command 0x041b tx timeout
[  529.461332][ T7757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.682237][ T7757] device hsr_slave_0 entered promiscuous mode
[  529.740266][ T7757] device hsr_slave_1 entered promiscuous mode
[  529.776530][ T7757] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  529.800681][ T7757] Cannot create hsr debugfs directory
[  529.963365][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  530.048540][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  530.350512][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  530.365455][ T7856] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  530.406578][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  530.445890][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  530.485463][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  530.527499][ T7672] device veth0_vlan entered promiscuous mode
[  530.592817][ T7672] device veth1_vlan entered promiscuous mode
[  530.812541][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  530.867678][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  530.941758][ T7672] device veth0_macvtap entered promiscuous mode
[  530.988231][ T7672] device veth1_macvtap entered promiscuous mode
[  531.136356][ T7872] create_pit_timer: 33 callbacks suppressed
[  531.136373][ T7872] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  531.141005][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.245213][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.295369][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.334941][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.355890][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.394944][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.431326][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.454985][   T23] Bluetooth: hci0: command 0x040f tx timeout
[  531.479615][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.526388][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.586380][ T7757] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  531.616042][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  531.630088][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  531.666435][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  531.726002][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  531.761824][ T7757] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  531.792294][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.834052][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.874813][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.904921][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.944934][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.995024][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.044978][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.086070][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.124668][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.155926][ T7672] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.191016][ T7672] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.225852][ T7672] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.254959][ T7672] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.298207][ T7757] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  532.320204][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  532.341135][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  532.367348][ T7757] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  532.598411][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.627435][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.662419][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  532.866964][ T7757] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.892465][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.915661][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  532.933276][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.942046][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  533.053430][ T7757] 8021q: adding VLAN 0 to HW filter on device team0
[  533.080437][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  533.120900][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  533.165736][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  533.207952][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.215136][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.228462][   T26] audit: type=1800 audit(1790105123.139:9): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.885" name="attr_allow_any_host" dev="configfs" ino=49401 res=0 errno=0
[  533.275929][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  533.300748][ T7908] nvmet_tcp: address family 255 not supported
[  533.316550][   T26] audit: type=1800 audit(1790105123.189:10): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.885" name="addr_traddr" dev="configfs" ino=49407 res=0 errno=0
[  533.343271][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  533.381168][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  533.390065][   T26] audit: type=1800 audit(1790105123.209:11): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.885" name="addr_trsvcid" dev="configfs" ino=49408 res=0 errno=0
[  533.421571][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.428736][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.512165][   T26] audit: type=1800 audit(1790105123.209:12): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.885" name="addr_adrfam" dev="configfs" ino=49409 res=0 errno=0
[  533.533199][    C1] vkms_vblank_simulate: vblank timer overrun
[  533.545801][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[  533.595429][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  533.617041][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  533.845423][   T26] audit: type=1800 audit(1790105123.209:13): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.885" name="addr_trtype" dev="configfs" ino=49410 res=0 errno=0
[  533.880974][ T7923] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  533.887718][ T7923] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  533.915164][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  533.970814][ T7923] vhci_hcd vhci_hcd.0: Device attached
[  534.017226][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  534.069478][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  534.095699][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  534.192394][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  534.245845][ T7924] vhci_hcd: connection closed
[  534.251398][   T26] audit: type=1800 audit(1790105124.159:14): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.889" name="attr_allow_any_host" dev="configfs" ino=49057 res=0 errno=0
[  534.282551][ T4311] vhci_hcd: stop threads
[  534.287123][ T1109] usb 41-1: new low-speed USB device number 3 using vhci_hcd
[  534.294711][ T4311] vhci_hcd: release socket
[  534.300425][ T4311] vhci_hcd: disconnect device
[  534.313332][ T4394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.327596][ T7928] nvmet_tcp: enabling port 1 (127.0.0.1:4420)
[  534.388948][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  534.430697][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  534.444711][   T26] audit: type=1800 audit(1790105124.219:15): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.889" name="addr_traddr" dev="configfs" ino=49058 res=0 errno=0
[  534.450164][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  534.492535][ T7936] nvmet: adding nsid 1 to subsystem testsubsys
[  534.497944][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  534.512929][   T26] audit: type=1800 audit(1790105124.229:16): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.889" name="addr_trsvcid" dev="configfs" ino=49448 res=0 errno=0
[  534.538115][ T7757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  534.586532][ T4394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.603806][   T26] audit: type=1800 audit(1790105124.239:17): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.889" name="addr_adrfam" dev="configfs" ino=49449 res=0 errno=0
[  534.613554][ T7936] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  534.664985][   T26] audit: type=1800 audit(1790105124.239:18): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.889" name="addr_trtype" dev="configfs" ino=49450 res=0 errno=0
[  534.705090][ T7936] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  534.716463][ T7936] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  534.770721][ T7937] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  534.793087][ T4394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.918257][ T4394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.005288][ T7936] nvme nvme0: failed to connect socket: -111
[  535.218174][ T7959] md: array md0 already has disks!
[  535.226532][ T7957] nvmet: disable ns before setting buffered_io value.
[  535.275452][ T7957] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  535.287586][ T7959] md/raid1:md0: active with 1 out of 1 mirrors
[  535.323402][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  535.333172][ T7962] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  535.347355][ T7959] md0: detected capacity change from 0 to 2048
[  535.355890][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  535.376500][ T7957] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  535.411574][ T7757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.478162][ T7957] nvme nvme0: failed to connect socket: -111
[  535.539926][ T7930] chnl_net:caif_netlink_parms(): no params data found
[  535.747616][ T7976] nvmet: disable ns before setting buffered_io value.
[  535.762081][ T7976] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  535.810078][ T7976] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  535.857389][ T7976] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  536.058255][ T7976] nvme nvme0: failed to connect socket: -111
[  536.207300][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.240359][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.250193][ T8006] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  536.275500][ T7930] device bridge_slave_0 entered promiscuous mode
[  536.290604][ T8008] nvmet: disable ns before setting buffered_io value.
[  536.306244][ T8006] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  536.330835][ T8008] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  536.342204][ T8006] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  536.361164][ T8008] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  536.395533][ T7930] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.402656][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.415200][ T4695] Bluetooth: hci4: command 0x0409 tx timeout
[  536.440753][ T8008] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  536.467100][ T7930] device bridge_slave_1 entered promiscuous mode
[  536.570245][ T8008] nvme nvme0: failed to connect socket: -111
[  536.587652][ T7930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.873593][ T8023] nvmet: disable ns before setting buffered_io value.
[  537.089951][ T8027] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  537.101899][ T8019] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  537.108486][ T8019] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  537.119617][ T8023] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  537.139298][ T7930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.173388][ T8019] vhci_hcd vhci_hcd.0: Device attached
[  537.199366][ T8023] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  537.224662][ T8024] vhci_hcd: connection closed
[  537.225926][ T4330] vhci_hcd: stop threads
[  537.240629][ T4330] vhci_hcd: release socket
[  537.245172][ T4330] vhci_hcd: disconnect device
[  537.251434][ T8023] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  537.261649][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  537.279824][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  537.370075][ T8035] md: couldn't update array info. -22
[  537.387084][ T7930] team0: Port device team_slave_0 added
[  537.395066][ T8023] nvme nvme0: failed to connect socket: -111
[  537.412060][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  537.431213][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  537.451404][ T8035] md: could not open device unknown-block(1,1).
[  537.460622][ T8035] md: md_import_device returned -16
[  537.515883][ T7930] team0: Port device team_slave_1 added
[  537.559991][ T7757] device veth0_vlan entered promiscuous mode
[  537.568400][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  537.580447][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  537.624071][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  537.642151][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.717171][ T8043] nvmet: disable ns before setting buffered_io value.
[  537.724479][ T7930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  537.738361][ T8043] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  537.754576][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  537.761645][ T8043] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  537.781886][ T8043] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  537.788390][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.811514][ T8043] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  537.847280][ T7930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.909896][ T7757] device veth1_vlan entered promiscuous mode
[  537.953829][ T8043] nvme nvme0: failed to connect socket: -111
[  537.978644][ T8048] nvmet: disable ns before setting buffered_io value.
[  538.011905][ T7930] device hsr_slave_0 entered promiscuous mode
[  538.031343][ T8048] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  538.051957][ T7930] device hsr_slave_1 entered promiscuous mode
[  538.063000][ T7930] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  538.072168][ T8048] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  538.087409][ T7930] Cannot create hsr debugfs directory
[  538.118909][ T8048] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  538.142010][ T8048] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  538.176390][ T7757] device veth0_macvtap entered promiscuous mode
[  538.197541][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  538.225489][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  538.238203][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  538.261381][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  538.273706][ T7757] device veth1_macvtap entered promiscuous mode
[  538.303703][ T8048] nvme nvme0: failed to connect socket: -111
[  538.395178][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  538.406312][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  538.485383][ T4228] Bluetooth: hci4: command 0x041b tx timeout
[  538.585365][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.620601][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.654165][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.682071][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.730414][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.765148][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.808284][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.854738][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.865219][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.875903][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.902973][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.924026][ T8078] nvmet: disable ns before setting buffered_io value.
[  538.959985][ T8078] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  538.976566][ T8078] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  538.987208][ T8078] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  539.011773][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  539.020930][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  539.041004][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.073615][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.089331][ T8078] nvme nvme0: failed to connect socket: -111
[  539.100232][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.120210][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.161101][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.187907][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.197940][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.208753][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.218772][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.229267][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.240963][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.297292][ T8088] md: couldn't update array info. -22
[  539.303800][ T8088] md: could not open device unknown-block(1,0).
[  539.311142][ T8088] md: md_import_device returned -16
[  539.321023][ T8088] md: could not open device unknown-block(1,1).
[  539.321464][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  539.329072][ T8088] md: md_import_device returned -16
[  539.400479][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  539.450536][ T1109] vhci_hcd: vhci_device speed not set
[  539.474308][ T8091] md: couldn't update array info. -22
[  539.489581][ T8091] md: could not open device unknown-block(1,0).
[  539.507748][ T8091] md: md_import_device returned -16
[  539.514540][ T8091] md: could not open device unknown-block(1,1).
[  539.521187][ T8091] md: md_import_device returned -16
[  539.535937][ T4394] device hsr_slave_0 left promiscuous mode
[  539.539661][ T8096] gr_udc Fixed MDIO bus.0: invalid resource
[  539.553375][ T4394] device hsr_slave_1 left promiscuous mode
[  539.564165][ T8096] gr_udc: probe of Fixed MDIO bus.0 failed with error -22
[  539.581861][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.596966][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.633324][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.654773][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  539.654820][   T26] audit: type=1800 audit(1790105129.559:23): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.920" name="addr_traddr" dev="configfs" ino=50129 res=0 errno=0
[  539.682355][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.692775][ T8099] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  539.698674][ T4394] device bridge_slave_1 left promiscuous mode
[  539.730963][ T8102] md: couldn't update array info. -22
[  539.736994][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.738638][ T8102] md: could not open device unknown-block(1,0).
[  539.752170][   T26] audit: type=1800 audit(1790105129.659:24): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.920" name="addr_trsvcid" dev="configfs" ino=50136 res=0 errno=0
[  539.777067][ T4394] device bridge_slave_0 left promiscuous mode
[  539.783345][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.793182][ T8099] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  539.797847][ T8102] md: md_import_device returned -16
[  539.817163][ T8099] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  539.826473][   T26] audit: type=1800 audit(1790105129.729:25): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.920" name="addr_adrfam" dev="configfs" ino=50137 res=0 errno=0
[  539.838118][ T8104] md: could not open device unknown-block(1,1).
[  539.857052][ T4394] device veth1_macvtap left promiscuous mode
[  539.864539][ T4394] device veth0_macvtap left promiscuous mode
[  539.872889][ T8103] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  539.882192][   T26] audit: type=1800 audit(1790105129.779:26): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.920" name="addr_trtype" dev="configfs" ino=50138 res=0 errno=0
[  539.897733][ T8104] md: md_import_device returned -16
[  539.915110][ T4394] device veth1_vlan left promiscuous mode
[  539.922532][ T4394] device veth0_vlan left promiscuous mode
[  540.174114][ T8111] md: couldn't update array info. -22
[  540.190008][ T8111] md: could not open device unknown-block(7,0).
[  540.208401][ T8111] md: md_import_device returned -16
[  540.225441][ T8113] nvmet: disable ns before setting buffered_io value.
[  540.277295][ T8113] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  540.327020][ T8113] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  540.363831][ T8113] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  540.393699][ T8113] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  540.512466][ T8113] nvme nvme0: failed to connect socket: -111
[  540.565546][ T1325] Bluetooth: hci4: command 0x040f tx timeout
[  540.990796][ T4394] team0 (unregistering): Port device team_slave_1 removed
[  541.022333][ T4394] team0 (unregistering): Port device team_slave_0 removed
[  541.052610][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.296690][ T8131] nvmet: disable ns before setting buffered_io value.
[  541.307596][ T8131] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  541.318838][ T8131] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  541.329988][ T8131] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  541.351127][ T8131] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  541.438456][ T4394] bond0 (unregistering): Released all slaves
[  541.460032][ T8131] nvme nvme0: failed to connect socket: -111
[  541.484358][ T8135] nvmet: disable ns before setting buffered_io value.
[  541.495803][ T8135] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  541.512493][ T8135] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  541.524489][ T8135] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  541.551536][ T7757] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.551654][ T8135] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  541.573845][ T7757] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.584592][ T7757] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.596482][ T7757] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.771246][ T8141] nvmet: disable ns before setting buffered_io value.
[  541.833740][ T8141] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  541.871633][ T8136] nvme nvme0: failed to connect socket: -111
[  541.888134][ T8141] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  541.912481][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.929495][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.992195][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  542.002430][ T8145] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  542.064020][ T7930] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  542.074327][ T8141] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  542.124003][ T7930] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  542.176198][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.180235][ T7930] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  542.204955][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.237767][ T8145] nvme nvme0: failed to connect socket: -111
[  542.267459][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  542.288008][ T7930] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  542.298920][ T8156] nvmet: disable ns before setting buffered_io value.
[  542.323221][ T8156] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  542.355520][ T8156] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  542.384345][ T8156] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  542.701686][ T1107] Bluetooth: hci4: command 0x0419 tx timeout
[  542.726500][ T8156] nvme nvme0: failed to connect socket: -111
[  542.865507][ T7930] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.919470][ T8174] md: couldn't update array info. -22
[  542.947048][ T8174] md: could not open device unknown-block(1,0).
[  542.968216][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  542.977799][ T8174] md: md_import_device returned -16
[  543.002193][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  543.022582][ T8178] md: couldn't update array info. -22
[  543.032298][ T8180] md: could not open device unknown-block(1,1).
[  543.065142][ T7930] 8021q: adding VLAN 0 to HW filter on device team0
[  543.109414][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  543.124642][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  543.156414][ T8180] md: md_import_device returned -16
[  543.175292][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.182431][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.206057][ T8185] md: data-check of RAID array md0
[  543.246543][ T8186] nvmet: disable ns before setting buffered_io value.
[  543.263046][ T8185] md: md0: data-check done.
[  543.299443][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  543.311629][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  543.323633][ T8186] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  543.337711][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  543.385702][ T8189] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  543.416464][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.423614][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.433364][ T8189] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  543.457422][ T8194] o2cb: This node has not been configured.
[  543.473805][ T8186] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  543.483728][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  543.508609][ T8194] o2cb: Cluster check failed. Fix errors before retrying.
[  543.516881][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  543.582687][ T8194] (syz.6.941,8194,0):user_dlm_register:675 ERROR: status = -22
[  543.599302][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  543.616874][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  543.629447][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  543.642981][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  543.652062][ T8194] (syz.6.941,8194,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "syz"
[  543.664123][ T8186] nvme nvme0: failed to connect socket: -111
[  543.676060][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  543.688425][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  543.702339][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  543.732569][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  543.761974][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  543.799891][ T7930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  544.126243][ T8211] nvmet: disable ns before setting buffered_io value.
[  544.173783][ T8211] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  544.213964][ T8211] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  544.267413][ T8211] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  544.288217][ T8217] o2cb: This node has not been configured.
[  544.306854][ T8211] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  544.359317][ T8217] o2cb: Cluster check failed. Fix errors before retrying.
[  544.424456][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  544.452934][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  544.480551][ T8217] (syz.7.946,8217,0):user_dlm_register:675 ERROR: status = -22
[  544.512767][ T7930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.544250][ T8211] nvme nvme0: failed to connect socket: -111
[  544.603216][ T8217] (syz.7.946,8217,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "syz"
[  545.676122][ T8253] nvmet: disable ns before setting buffered_io value.
[  545.700826][ T8252] md: couldn't update array info. -22
[  545.721837][ T8253] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  545.732190][ T8252] md: could not open device unknown-block(7,0).
[  545.761272][ T8252] md: md_import_device returned -16
[  545.775394][ T8253] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  545.822537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  545.847170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  545.860488][ T8253] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  545.908333][ T8253] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  545.947348][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  546.006235][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  546.047257][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  546.096073][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  546.107931][ T8260] nvmet: disable ns before setting buffered_io value.
[  546.129212][ T8260] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  546.165491][ T7930] device veth0_vlan entered promiscuous mode
[  546.180251][ T8260] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  546.206507][ T8260] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  546.241826][ T8253] nvme nvme0: failed to connect socket: -111
[  546.271651][ T7930] device veth1_vlan entered promiscuous mode
[  546.304182][ T8260] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  546.433117][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  546.468616][ T8266] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  546.475193][ T8266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  546.491075][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  546.524474][ T8266] vhci_hcd vhci_hcd.0: Device attached
[  546.536620][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  546.545832][ T8269] vhci_hcd: connection closed
[  546.546185][  T154] vhci_hcd: stop threads
[  546.561631][  T154] vhci_hcd: release socket
[  546.570847][  T154] vhci_hcd: disconnect device
[  546.578524][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  546.601225][ T8264] nvme nvme0: failed to connect socket: -111
[  546.626127][ T7930] device veth0_macvtap entered promiscuous mode
[  546.649371][ T7930] device veth1_macvtap entered promiscuous mode
[  546.703369][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.762260][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.791424][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.831773][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.853557][ T8273] nvme nvme0: failed to connect socket: -111
[  546.875164][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.904943][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.995488][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.036705][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.052091][   T26] audit: type=1800 audit(1790105136.959:27): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.959" name="addr_traddr" dev="configfs" ino=51683 res=0 errno=0
[  547.075056][ T8281] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  547.108036][ T8281] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  547.136627][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.154982][   T26] audit: type=1800 audit(1790105137.019:28): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.959" name="addr_trsvcid" dev="configfs" ino=51684 res=0 errno=0
[  547.195101][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.209172][ T8281] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  547.242920][   T26] audit: type=1800 audit(1790105137.119:29): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.959" name="addr_adrfam" dev="configfs" ino=52420 res=0 errno=0
[  547.249348][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.272246][ T8286] md: couldn't update array info. -22
[  547.284726][ T8290] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  547.315211][ T8289] md: couldn't update array info. -22
[  547.321601][ T8286] md: could not open device unknown-block(1,0).
[  547.346460][ T8286] md: md_import_device returned -16
[  547.353116][ T8289] md: could not open device unknown-block(1,0).
[  547.362943][   T26] audit: type=1800 audit(1790105137.179:30): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.959" name="addr_trtype" dev="configfs" ino=51689 res=0 errno=0
[  547.385397][ T8289] md: md_import_device returned -16
[  547.396816][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  547.416437][ T8295] bonding: bond1 is being created...
[  547.421682][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  547.430186][ T8286] md: could not open device unknown-block(1,1).
[  547.436967][ T8286] md: md_import_device returned -16
[  547.456518][ T8296] md: could not open device unknown-block(1,1).
[  547.462883][ T8296] md: md_import_device returned -16
[  547.463122][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  547.592448][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  547.722370][ T8306] nvmet: disable ns before setting buffered_io value.
[  547.764307][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.775748][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.786594][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.797153][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.807069][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.824936][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.848582][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.868935][ T8306] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  547.883722][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.895454][ T7930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.906117][ T7930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.916436][ T8312] o2cb: This node has not been configured.
[  547.922293][ T8312] o2cb: Cluster check failed. Fix errors before retrying.
[  547.931301][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.947810][ T8306] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  547.978878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  547.988904][ T8312] (syz.4.962,8312,1):user_dlm_register:675 ERROR: status = -22
[  547.992336][ T8306] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  548.008347][ T8306] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  548.017538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  548.059576][ T8301] 8021q: adding VLAN 0 to HW filter on device bond1
[  548.069665][ T8306] nvme nvme0: failed to connect socket: -111
[  548.082187][ T7930] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.106306][ T7930] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.125002][ T7930] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.133862][ T8312] (syz.4.962,8312,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "syz"
[  548.143743][ T7930] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.393904][ T8321] bonding: bond1 is being created...
[  548.506697][ T8326] nvmet: disable ns before setting buffered_io value.
[  548.639317][ T8326] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  548.678804][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.717023][ T8326] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  548.729828][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.743621][ T8326] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  548.771102][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  548.815891][ T8331] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  548.850796][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.859707][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.887697][ T8327] 8021q: adding VLAN 0 to HW filter on device bond1
[  548.912543][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  549.046157][ T8326] nvme nvme0: failed to connect socket: -111
[  549.183792][ T8343] bonding: bond1 is being created...
[  549.213675][ T8343] bonding: bond1 already exists
[  549.310356][ T8353] nvmet: disable ns before setting buffered_io value.
[  549.317954][ T8343] bond1: option mode: unable to set because the bond device is up
[  549.359426][ T8353] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  549.417052][ T8355] md: couldn't update array info. -22
[  549.423531][ T8355] md: could not open device unknown-block(1,0).
[  549.431702][ T8353] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  549.464065][ T8343] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  549.486712][ T8355] md: md_import_device returned -16
[  549.520869][ T8361] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  549.527464][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  549.535852][ T8356] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  549.558700][ T8361] vhci_hcd vhci_hcd.0: Device attached
[  549.568375][ T8363] vhci_hcd: connection closed
[  549.568828][ T1268] vhci_hcd: stop threads
[  549.582750][ T8353] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  549.596655][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  549.642496][ T1268] vhci_hcd: release socket
[  549.661118][ T1268] vhci_hcd: disconnect device
[  549.787834][ T4394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.851925][ T8353] nvme nvme0: failed to connect socket: -111
[  549.923469][ T4394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.075467][ T8387] md: couldn't update array info. -22
[  550.117722][ T4394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.145828][ T8387] md: could not open device unknown-block(1,0).
[  550.161420][ T8390] o2cb: This node has not been configured.
[  550.187724][ T8387] md: md_import_device returned -16
[  550.197134][ T8394] md: could not open device unknown-block(1,1).
[  550.249909][ T8390] o2cb: Cluster check failed. Fix errors before retrying.
[  550.375808][ T8394] md: md_import_device returned -16
[  551.019065][ T4394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.083949][ T8390] (syz.8.979,8390,1):user_dlm_register:675 ERROR: status = -22
[  551.220950][ T8405] nvmet: disable ns before setting buffered_io value.
[  551.276700][ T8405] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  551.309588][ T8405] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  551.347458][ T8405] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  551.386491][ T8405] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  551.415907][ T8390] (syz.8.979,8390,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "syz"
[  551.557053][ T8405] nvme nvme0: failed to connect socket: -111
[  551.703223][ T8425] o2cb: This node has not been configured.
[  551.733404][ T8425] o2cb: Cluster check failed. Fix errors before retrying.
[  551.756236][ T8428] md: couldn't update array info. -22
[  551.781232][ T8425] (syz.6.988,8425,0):user_dlm_register:675 ERROR: status = -22
[  551.783989][ T8428] md: could not open device unknown-block(1,0).
[  551.828573][ T8428] md: md_import_device returned -16
[  551.836778][ T8425] (syz.6.988,8425,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "syz"
[  551.896111][ T8435] md: could not open device unknown-block(1,1).
[  551.902476][ T8435] md: md_import_device returned -16
[  551.949115][ T8436] nvmet: disable ns before setting buffered_io value.
[  552.069802][ T8436] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  552.121477][ T8442] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  552.122784][ T8440] md: couldn't update array info. -22
[  552.167253][ T8436] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  552.188068][ T8436] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  552.191467][ T8445] md: could not open device unknown-block(7,0).
[  552.199831][ T8442] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  552.239225][ T8436] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  552.248690][ T8445] md: md_import_device returned -16
[  552.266529][ T8442] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  552.346535][ T8442] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  552.433467][ T8441] nvme nvme0: failed to connect socket: -111
[  553.021317][ T8442] nvme nvme0: failed to connect socket: -512
[  553.420491][   T26] audit: type=1800 audit(1790105143.329:31): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.998" name="addr_traddr" dev="configfs" ino=52972 res=0 errno=0
[  553.422618][ T8458] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  553.505703][ T8460] bonding: bond1 is being created...
[  553.564207][   T26] audit: type=1800 audit(1790105143.469:32): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.998" name="addr_trsvcid" dev="configfs" ino=52212 res=0 errno=0
[  553.566217][ T8458] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  553.604551][ T8458] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  553.628490][ T8458] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  553.659334][ T4394] device hsr_slave_0 left promiscuous mode
[  553.722302][ T4394] device hsr_slave_1 left promiscuous mode
[  553.728412][   T26] audit: type=1800 audit(1790105143.509:33): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.998" name="addr_adrfam" dev="configfs" ino=52213 res=0 errno=0
[  553.760421][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.792724][ T8470] nvmet: disable ns before setting buffered_io value.
[  553.801491][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.832833][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.845408][   T26] audit: type=1800 audit(1790105143.539:34): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.998" name="addr_trtype" dev="configfs" ino=52214 res=0 errno=0
[  553.872179][ T8470] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  553.888616][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.912049][ T8470] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  553.934144][ T4394] device bridge_slave_1 left promiscuous mode
[  553.954662][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.966901][ T8470] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  553.978050][ T8474] 
[  553.980449][ T8474] ======================================================
[  553.987504][ T8474] WARNING: possible circular locking dependency detected
[  553.994637][ T8474] syzkaller #0 Not tainted
[  553.999092][ T8474] ------------------------------------------------------
[  554.006210][ T8474] syz.7.1004/8474 is trying to acquire lock:
[  554.012229][ T8474] ffffffff8cf20cc8 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x1d/0x2c0
[  554.021282][ T8474] 
[  554.021282][ T8474] but task is already holding lock:
[  554.028684][ T8474] ffff88807de23310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250
[  554.037804][ T8474] 
[  554.037804][ T8474] which lock already depends on the new lock.
[  554.037804][ T8474] 
[  554.048336][ T8474] 
[  554.048336][ T8474] the existing dependency chain (in reverse order) is:
[  554.057805][ T8474] 
[  554.057805][ T8474] -> #2 (&gi->lock){+.+.}-{3:3}:
[  554.065147][ T8474]        __mutex_lock_common+0x1e5/0x2400
[  554.071062][ T8474]        mutex_lock_nested+0x17/0x20
[  554.076870][ T8474]        config_usb_cfg_link+0x55/0x250
[  554.082489][ T8474]        configfs_symlink+0x5a4/0x13b0
[  554.088174][ T8474]        vfs_symlink+0x245/0x3d0
[  554.093258][ T8474]        do_symlinkat+0x1ab/0x6b0
[  554.098330][ T8474]        __x64_sys_symlinkat+0x95/0xa0
[  554.103839][ T8474]        do_syscall_64+0x4c/0xa0
[  554.108976][ T8474]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  554.115627][ T8474] 
[  554.115627][ T8474] -> #1 (&sb->s_type->i_mutex_key#21){++++}-{3:3}:
[  554.124378][ T8474]        down_write+0x38/0x60
[  554.129228][ T8474]        configfs_depend_item_unlocked+0x14f/0x430
[  554.135778][ T8474]        usbg_make_tpg+0x1dd/0x550
[  554.140943][ T8474]        target_fabric_make_tpg+0xa0/0x6d0
[  554.146914][ T8474]        configfs_mkdir+0x511/0x9e0
[  554.152559][ T8474]        vfs_mkdir+0x386/0x570
[  554.157374][ T8474]        do_mkdirat+0x1dd/0x5c0
[  554.162415][ T8474]        __x64_sys_mkdirat+0x85/0x90
[  554.166243][ T8481] nvmet: disable ns before setting buffered_io value.
[  554.167833][ T8474]        do_syscall_64+0x4c/0xa0
[  554.179773][ T8474]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  554.186604][ T8474] 
[  554.186604][ T8474] -> #0 (tpg_instances_lock){+.+.}-{3:3}:
[  554.194578][ T8474]        __lock_acquire+0x2c66/0x7b50
[  554.200008][ T8474]        lock_acquire+0x19e/0x400
[  554.205086][ T8474]        __mutex_lock_common+0x1e5/0x2400
[  554.210991][ T8474]        mutex_lock_nested+0x17/0x20
[  554.216320][ T8474]        tcm_alloc+0x1d/0x2c0
[  554.221043][ T8474]        usb_get_function+0x59/0xa0
[  554.226460][ T8474]        config_usb_cfg_link+0x144/0x250
[  554.232177][ T8474]        configfs_symlink+0x5a4/0x13b0
[  554.237815][ T8474]        vfs_symlink+0x245/0x3d0
[  554.242919][ T8474]        do_symlinkat+0x1ab/0x6b0
[  554.248004][ T8474]        __x64_sys_symlinkat+0x95/0xa0
[  554.253520][ T8474]        do_syscall_64+0x4c/0xa0
[  554.256197][ T8481] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  554.258784][ T8474]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  554.274270][ T8474] 
[  554.274270][ T8474] other info that might help us debug this:
[  554.274270][ T8474] 
[  554.284557][ T8474] Chain exists of:
[  554.284557][ T8474]   tpg_instances_lock --> &sb->s_type->i_mutex_key#21 --> &gi->lock
[  554.284557][ T8474] 
[  554.295153][ T8481] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  554.298661][ T8474]  Possible unsafe locking scenario:
[  554.298661][ T8474] 
[  554.298668][ T8474]        CPU0                    CPU1
[  554.320575][ T8474]        ----                    ----
[  554.325974][ T8474]   lock(&gi->lock);
[  554.329912][ T8474]                                lock(&sb->s_type->i_mutex_key#21);
[  554.334767][ T8481] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  554.338132][ T8474]                                lock(&gi->lock);
[  554.338152][ T8474]   lock(tpg_instances_lock);
[  554.338182][ T8474] 
[  554.338182][ T8474]  *** DEADLOCK ***
[  554.338182][ T8474] 
[  554.338187][ T8474] 3 locks held by syz.7.1004/8474:
[  554.338200][ T8474]  #0: ffff8881466c6460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  554.338340][ T8474]  #1: ffff88805e089fb0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0
[  554.338400][ T8474]  #2: ffff88807de23310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250
[  554.338451][ T8474] 
[  554.338451][ T8474] stack backtrace:
[  554.338458][ T8474] CPU: 1 PID: 8474 Comm: syz.7.1004 Not tainted syzkaller #0
[  554.338477][ T8474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  554.338489][ T8474] Call Trace:
[  554.338496][ T8474]  <TASK>
[  554.338504][ T8474]  dump_stack_lvl+0x188/0x250
[  554.399125][ T8481] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  554.401596][ T8474]  ? load_image+0x410/0x410
[  554.449899][ T8474]  ? show_regs_print_info+0x20/0x20
[  554.455177][ T8474]  ? print_circular_bug+0x12b/0x1a0
[  554.460434][ T8474]  check_noncircular+0x296/0x330
[  554.465443][ T8474]  ? add_chain_block+0x9b0/0x9b0
[  554.470578][ T8474]  ? lockdep_lock+0xf1/0x1f0
[  554.475236][ T8474]  ? mark_lock+0x94/0x320
[  554.479614][ T8474]  ? _find_first_zero_bit+0xd1/0xf0
[  554.484882][ T8474]  __lock_acquire+0x2c66/0x7b50
[  554.489893][ T8474]  ? stack_trace_save+0xf0/0xf0
[  554.494949][ T8474]  ? verify_lock_unused+0x140/0x140
[  554.500202][ T8474]  ? verify_lock_unused+0x140/0x140
[  554.505533][ T8474]  ? kmem_cache_free+0x8f/0x210
[  554.510530][ T8474]  ? stack_trace_save+0xa6/0xf0
[  554.515454][ T8474]  lock_acquire+0x19e/0x400
[  554.520004][ T8474]  ? tcm_alloc+0x1d/0x2c0
[  554.524390][ T8474]  ? __might_sleep+0xf0/0xf0
[  554.529263][ T8474]  ? read_lock_is_recursive+0x10/0x10
[  554.534686][ T8474]  ? __mutex_trylock_common+0x15c/0x260
[  554.540458][ T8474]  __mutex_lock_common+0x1e5/0x2400
[  554.545817][ T8474]  ? tcm_alloc+0x1d/0x2c0
[  554.550215][ T8474]  ? __mutex_lock_common+0x435/0x2400
[  554.555724][ T8474]  ? lock_chain_count+0x20/0x20
[  554.560619][ T8474]  ? tcm_alloc+0x1d/0x2c0
[  554.565090][ T8474]  ? mutex_lock_io_nested+0x60/0x60
[  554.570495][ T8474]  ? mutex_lock_io_nested+0x60/0x60
[  554.575929][ T8474]  mutex_lock_nested+0x17/0x20
[  554.580856][ T8474]  tcm_alloc+0x1d/0x2c0
[  554.585066][ T8474]  usb_get_function+0x59/0xa0
[  554.589791][ T8474]  config_usb_cfg_link+0x144/0x250
[  554.594958][ T8474]  configfs_symlink+0x5a4/0x13b0
[  554.599948][ T8474]  ? end_current_label_crit_section+0x14b/0x170
[  554.606310][ T8474]  ? common_perm+0x15d/0x1b0
[  554.610954][ T8474]  ? from_kgid+0x14f/0x6a0
[  554.615505][ T8474]  ? apparmor_path_symlink+0x1ac/0x230
[  554.621091][ T8474]  ? lookup_one_qstr_excl+0x11c/0x240
[  554.626606][ T8474]  ? detach_groups+0x370/0x370
[  554.631432][ T8474]  ? inode_permission+0xef/0x480
[  554.636422][ T8474]  ? bpf_lsm_inode_symlink+0x5/0x10
[  554.641665][ T8474]  ? security_inode_symlink+0xb2/0x100
[  554.647234][ T8474]  vfs_symlink+0x245/0x3d0
[  554.651704][ T8474]  do_symlinkat+0x1ab/0x6b0
[  554.656247][ T8474]  ? strncpy_from_user+0x1f4/0x350
[  554.658414][ T8481] nvme nvme0: failed to connect socket: -111
[  554.661399][ T8474]  ? vfs_symlink+0x3d0/0x3d0
[  554.672020][ T8474]  __x64_sys_symlinkat+0x95/0xa0
[  554.677349][ T8474]  do_syscall_64+0x4c/0xa0
[  554.681820][ T8474]  ? clear_bhb_loop+0x30/0x80
[  554.686649][ T8474]  ? clear_bhb_loop+0x30/0x80
[  554.691425][ T8474]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  554.697375][ T8474] RIP: 0033:0x7f6faa8c8159
[  554.702098][ T8474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.721839][ T8474] RSP: 002b:00007f6fa8b20028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  554.730468][ T8474] RAX: ffffffffffffffda RBX: 00007f6faab4ffa0 RCX: 00007f6faa8c8159
[  554.738496][ T8474] RDX: 0000200000000640 RSI: ffffffffffffff9c RDI: 0000200000000600
[  554.746568][ T8474] RBP: 00007f6faa95f06b R08: 0000000000000000 R09: 0000000000000000
[  554.754587][ T8474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.762800][ T8474] R13: 00007f6faab50038 R14: 00007f6faab4ffa0 R15: 00007fff8f0165c8
[  554.770835][ T8474]  </TASK>
[  554.785558][ T4394] device bridge_slave_0 left promiscuous mode
[  554.786069][ T8470] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  554.803224][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.828655][ T4394] device veth1_macvtap left promiscuous mode
[  554.844095][ T4394] device veth0_macvtap left promiscuous mode
[  554.860617][ T4394] device veth1_vlan left promiscuous mode
[  554.872106][ T4394] device veth0_vlan left promiscuous mode
[  554.943401][ T8492] udc dummy_udc.0: failed to start g1: -19
[  555.060926][ T4394] team0 (unregistering): Port device team_slave_1 removed
[  555.074796][ T4394] team0 (unregistering): Port device team_slave_0 removed
[  555.088751][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.144610][ T4394] bond0 (unregistering): Released all slaves
[  555.199152][ T8460] bonding: bond1 creation failed
[  562.887499][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  562.893830][ T1422] ieee802154 phy1 wpan1: encryption failed: -22