last executing test programs: 17m18.215671277s ago: executing program 32 (id=222): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x3, 0x2, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047437, 0xffffffffffffffff) 17m5.645784171s ago: executing program 33 (id=215): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x18, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95", 0x6, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$eJzs08FLbGUUAPBzp4bp9d5zHvGgRe3e8CCwhCQSciCRYXCjYmUuWgsuaiG4cDEo46zN/oHCVDA30t6laSAKuhJpJfMPKG1mETdG7zgQtal8ovx+i/nuPZx7vvPxnQnutVwUn1w/pYWI+OPvcp5FROHm7afOQ+FxfLH1ZWWyPj408Xl8lMRXEVF597pcEt2qSff7tFNn5FEcrx4MX+bj8MXJfmktl8V3chGLEfH1+Xrx0T81nf9vZ+bh2C7vFZcas9Xl+XIhqrVm/3Rn8mIwiVicygZr52p9rf3zxv+7f3uir/afOa3WmqXjgY2jdOzi+6cf5PePWx/+epXVc/N/4GH5tD1Sje79//C8flZvjb7cnOvrfT12F1ayi/89Wz/5redO+wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6u7fJeKxqz1eX58sxptdbsn36/8s63lW+++/jHwYXJtwencu2s5Db3Ly418tlbrVkqDGwcpWMX8XS2HXizk9d7ey1wh957HLHUnr/O/T6vn9Vboy835/p63zrbXVjJ4ulfPyy+4kYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHujEotpOjSRi0jil6QbTwvXayf0c7aOZfGRwmfJ6sHw5dazwxcn+6W18Sy+8yRLPF8vdqv13PYx+Jf+DAAA//84pm1S") r4 = socket(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x4001, 0x8, 0x1000, 0x5}, 0x10) sendmsg$nl_route(r4, 0x0, 0x24080) 13m51.727250487s ago: executing program 34 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xd, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m37.097592012s ago: executing program 35 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0x9d0000, 0x6, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9909de, 0x3, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x900}, 0x4000000) write(r3, &(0x7f0000000400)='!*:', 0x3) 11m34.365817444s ago: executing program 4 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000000)='./cgrp\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+io\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgrp/io.cost.qos\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='8:0 enable=1\n\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgrp/io.cost.model\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='8:0 ctrl=user model=linear rbps=1048576 wbps=1048576 rseqiops=100 wseqiops=100 rrandiops=100 wrandiops=100\n\x00', 0x5a) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp/cg1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgrp/cg1/io.weight\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='1\n\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgrp/cg1/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='0\n\x00', 0x2) close(r4) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./dev_sda\x00', 0x81b0, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev_sda\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='\x00'/1048576, 0x100000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file_test\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000900)='\x00'/1048576, 0x100000) fsync(r6) syncfs(r5) nanosleep(&(0x7f0000000a00)={0x0, 0x11e1a300}, 0x0) 11m32.552236126s ago: executing program 4 (id=1116): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x800) write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000080)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f00000000c0)="38000000240001040400000000000000000000000100000000000400030001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f00000002c0)="38000000240001040c00000000000000000000000100000000000c000b0001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000340)="38000000240001040e00000000000000000000000100000000000e000d00010000000000080001006574", 0x2a) write(r0, &(0x7f0000000380)="38000000240001040f00000000000000000000000100000000000f000e0001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f00000003c0)="380000002400010410000000000000000000000001000000000010000f0001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24) read(r0, &(0x7f0000002000), 0x8000) read(r0, &(0x7f0000002000), 0x8000) 11m30.100505239s ago: executing program 4 (id=1125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)='1\n\x00', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='loop\n\x00', 0x5) close(r6) symlinkat(&(0x7f0000000500)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write(r7, &(0x7f00000005c0)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r7) nanosleep(&(0x7f0000000600)={0x0, 0xee6b280}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./nvmedev\x00', 0x81b0, 0x10300) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nvmedev\x00', 0x2, 0x0) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f00000006c0)) 11m29.085344513s ago: executing program 4 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000140), &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000000000000010000000000000000000000020000000200"/72) ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006000000") ioctl(r1, 0x40140921, &(0x7f0000000440)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='check\n\x00', 0x6) nanosleep(&(0x7f0000000600)={0x1}, 0x0) 11m27.807934326s ago: executing program 4 (id=1133): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x412, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0xffffffff8509852a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m25.23715787s ago: executing program 4 (id=1137): r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x40000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000140)={0x0, 0x5f5e100}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)=""/8, 0x8}], 0x1}, 0x0) 11m10.090143113s ago: executing program 36 (id=1137): r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x40000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000140)={0x0, 0x5f5e100}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)=""/8, 0x8}], 0x1}, 0x0) 10m35.827193987s ago: executing program 6 (id=1259): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='127.0.0', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='4420', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000480)='ipv4', 0x4) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='tcp', 0x3) close(r3) symlinkat(&(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 10m35.126330106s ago: executing program 6 (id=1262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='raid1\n', 0x6) 10m34.50673476s ago: executing program 6 (id=1264): open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x3, 0x4, 0x1000, 0x0, r1, 0x0, '\x00', 0x0, r0}, 0x50) socket$tipc(0x1e, 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_open_pts(r2, 0xa0200) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000840), &(0x7f0000000140)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 10m33.36113057s ago: executing program 6 (id=1268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='rai', 0x3) 10m32.464739282s ago: executing program 6 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='none\n', 0x5) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='2\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000d00)='1:0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r3, &(0x7f0000001100)='active\n', 0x7) write(0xffffffffffffffff, &(0x7f0000001300)='1:1\n', 0x4) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) 10m31.504860381s ago: executing program 6 (id=1273): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_complete(0x0, r0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r6 = dup(r2) syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f00000000c0)={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x2, 0xa8b, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x120}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0xc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x2, 0x0, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20000, 0x2, 0xffffffff, 0x0, r6}}], 0x1, 0x0, 0x0) 10m16.112005575s ago: executing program 37 (id=1273): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_complete(0x0, r0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r6 = dup(r2) syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f00000000c0)={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x2, 0xa8b, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x120}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0xc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x2, 0x0, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20000, 0x2, 0xffffffff, 0x0, r6}}], 0x1, 0x0, 0x0) 2m51.718060925s ago: executing program 8 (id=2610): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='00:02\n\x00', 0x6) write(r1, &(0x7f00000001c0)='00:03\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='disable\n\x00', 0x8) write(r2, &(0x7f0000000280)='auto\n\x00', 0x5) write(r2, &(0x7f00000002c0)='fill\n\x00', 0x5) write(r2, &(0x7f0000000300)='activate\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='disable\n\x00', 0x8) write(r3, &(0x7f00000003c0)='auto\n\x00', 0x5) write(r3, &(0x7f0000000440)='activate\n\x00', 0x9) r4 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='00:02\n\x00', 0x6) write(r4, &(0x7f0000000500)='00:03\n\x00', 0x6) 2m49.281577434s ago: executing program 8 (id=2621): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="000000000700000000000000000000000600") r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='16\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0) write(r5, &(0x7f0000000840)='65500\x00', 0x6) close(r5) ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) write(r6, &(0x7f0000000940)='8\x00', 0x2) close(r6) 2m48.31768751s ago: executing program 8 (id=2625): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/syz\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/syz/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/syz/node/node0/ipv4_port\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='7777\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/syz/node/node0/ipv4_address\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='127.0.0.1\n', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/syz/node/node0/num\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/syz/node/node0/local\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/syz/heartbeat/hb0/block_bytes\x00', 0x2, 0x0) write(r6, &(0x7f0000000580)='512\n', 0x4) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/cluster/syz/heartbeat/hb0/start_block\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='1\n', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/syz/heartbeat/hb0/blocks\x00', 0x2, 0x0) write(r8, &(0x7f0000000680)='255\n', 0x4) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/syz/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r9, &(0x7f0000000700)='7\n', 0x2) close(r9) mount(0x0, &(0x7f0000000800)='./dlm\x00', &(0x7f0000000840)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dlm/hb0\x00', 0x1ff) 2m46.236839382s ago: executing program 8 (id=2634): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 2m41.08206067s ago: executing program 3 (id=2648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='md0\n', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='none\n', 0x5) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='2\n', 0x2) 2m40.368638142s ago: executing program 3 (id=2651): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="2c0000002f0005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c0000002f0005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000300005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000310005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000310005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000320005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000320005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000330005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000370005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) 2m39.737062929s ago: executing program 3 (id=2655): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='00:02\n\x00', 0x6) write(r1, &(0x7f00000001c0)='00:03\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='disable\n\x00', 0x8) write(r2, &(0x7f0000000280)='auto\n\x00', 0x5) write(r2, &(0x7f00000002c0)='fill\n\x00', 0x5) write(r2, &(0x7f0000000300)='activate\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='disable\n\x00', 0x8) write(r3, &(0x7f00000003c0)='auto\n\x00', 0x5) write(r3, &(0x7f0000000440)='activate\n\x00', 0x9) r4 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='00:02\n\x00', 0x6) write(r4, &(0x7f0000000500)='00:03\n\x00', 0x6) 2m38.690409154s ago: executing program 8 (id=2658): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000200)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000280)=0x800, 0x4) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000200)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000240)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x200}, 0x8) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000001000)='\x00'/32768, 0x8000, 0x0, 0x0, 0x0) 2m37.786979924s ago: executing program 3 (id=2662): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="00000000070000000000000000000000060000") r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='16\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0) write(r5, &(0x7f0000000840)='65500\x00', 0x6) close(r5) ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) write(r6, &(0x7f0000000940)='8\x00', 0x2) close(r6) 2m37.170189329s ago: executing program 8 (id=2664): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4 +4.1 +4.2\n', 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) write(0xffffffffffffffff, &(0x7f00000003c0)='localhost /tmp 2147483647 136208 0 0 0\n', 0x27) 2m36.803051456s ago: executing program 3 (id=2667): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='connect 22:aa:aa:aa:aa:aa 1\n', 0x1c) write(r0, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c) 2m36.206203359s ago: executing program 3 (id=2669): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4 +4.1 +4.2\n', 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='localhost / 2147483647 136208 0 0 0\n', 0x24) write(0xffffffffffffffff, &(0x7f0000000440)='localhost 1 \\x00000000 2147483647 /\n', 0x24) 2m21.709741823s ago: executing program 38 (id=2664): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4 +4.1 +4.2\n', 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) write(0xffffffffffffffff, &(0x7f00000003c0)='localhost /tmp 2147483647 136208 0 0 0\n', 0x27) 2m20.99885846s ago: executing program 39 (id=2669): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4 +4.1 +4.2\n', 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='localhost / 2147483647 136208 0 0 0\n', 0x24) write(0xffffffffffffffff, &(0x7f0000000440)='localhost 1 \\x00000000 2147483647 /\n', 0x24) 9.001754062s ago: executing program 0 (id=3248): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="2c0000002f0005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000300005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000300005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000310005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000310005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000320005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000320005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000330005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000330005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000340005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000340005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="2c000000370005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) 8.592052249s ago: executing program 9 (id=3251): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$incfs_size(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000280)=@v2={0x2000000, [{0x80, 0xa}, {0x2262, 0x401}]}, 0x14, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) 8.40166331s ago: executing program 0 (id=3252): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x161) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8.012215469s ago: executing program 9 (id=3256): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0xf) nanosleep(0x0, 0x0) syz_emit_vhci(0x0, 0x10) nanosleep(0x0, 0x0) syz_emit_vhci(0x0, 0x1a) nanosleep(0x0, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000440)="1c0001000700aaaaaaaaaa1101", 0xd) write(r0, &(0x7f0000000480)="1c00ffff0700aaaaaaaaaa1101", 0xd) write(r0, &(0x7f00000004c0)="1c0000000700aaaaaaaaaa1102", 0xd) nanosleep(&(0x7f00000005c0)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9001500110006000300"/26], 0x1a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 5.348090301s ago: executing program 7 (id=3262): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) io_uring_enter(r0, 0x2219, 0x4b01, 0x16, 0x0, 0x0) 4.810288902s ago: executing program 2 (id=3264): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$loop(0x0, 0x4, 0x12bb41) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x40000, 0x101, 0x9}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[], 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40084, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x428, 0x1b8, 0x428, 0x0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'lo\x00', 'vcan0\x00', {}, {0xff}, 0x2f, 0x6, 0x2, 0x50}, 0x0, 0xa8, 0xd0, 0x0, {0x100000000000000}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 4.79793138s ago: executing program 7 (id=3265): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0x30, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}}, 0x0) 4.724818934s ago: executing program 9 (id=3267): write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='md0', 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) unshare(0x2c020400) ioctl(r0, 0x40140921, &(0x7f0000000500)) 4.516606815s ago: executing program 0 (id=3268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/syz\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/syz/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/syz/node/node0/ipv4_port\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='7777\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/syz/node/node0/ipv4_address\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='127.0.0.1\n', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/syz/node/node0/num\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='0\n', 0x2) close(r4) write(0xffffffffffffffff, &(0x7f00000004c0)='1\n', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/syz/heartbeat/hb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/syz/heartbeat/hb0/block_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000580)='512\n', 0x4) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/cluster/syz/heartbeat/hb0/start_block\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='1\n', 0x2) close(r6) write(0xffffffffffffffff, &(0x7f0000000680)='255\n', 0x4) close(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/syz/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r7, &(0x7f0000000700)='7\n', 0x2) mount(0x0, &(0x7f0000000800)='./dlm\x00', &(0x7f0000000840)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dlm/hb0\x00', 0x1ff) 4.211826976s ago: executing program 7 (id=3270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='00:02\n\x00', 0x6) write(r1, &(0x7f00000001c0)='00:03\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='disable\n\x00', 0x8) write(r2, &(0x7f0000000280)='auto\n\x00', 0x5) write(r2, &(0x7f00000002c0)='fill\n\x00', 0x5) write(r2, &(0x7f0000000300)='activate\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='disable\n\x00', 0x8) write(r3, &(0x7f00000003c0)='auto\n\x00', 0x5) write(r3, &(0x7f0000000440)='activ', 0x5) r4 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='00:02\n\x00', 0x6) write(r4, &(0x7f0000000500)='00:03\n\x00', 0x6) 4.171978273s ago: executing program 2 (id=3271): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='readonly', 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000440)={0x4, 0x7}) 4.107441371s ago: executing program 9 (id=3272): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80), 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) recvfrom(r0, &(0x7f0000001400)=""/4024, 0xfb8, 0x40020100, 0x0, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000c80)='x', 0x1}], 0x1) 3.837767022s ago: executing program 5 (id=3273): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r0, &(0x7f0000000540), 0x0) 3.836146598s ago: executing program 1 (id=3274): r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) write(0xffffffffffffffff, &(0x7f0000000340)='3\n', 0x2) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000440)='1\n', 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000600)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200e2f90000000101000001ef0101010a000001"], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200ddf90000000106000001ef0101010a000001"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="01005e00001600112233445508004600003800004000010242f7c0a8010ae0000016940400002200e2f30000000201000001ef0101010a00000106000001ef0101010a000001"], 0x0) 3.469785505s ago: executing program 9 (id=3275): setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40) 3.228704034s ago: executing program 5 (id=3276): syz_emit_ethernet(0xbb5, &(0x7f0000000480)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x2, 0x6, "4f148a", 0xb7f, 0x6, 0xff, @loopback, @remote, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x3, 0x0, 0x7fff}, {"a96b46785d1a313f80c6a0f2e5bc8593126e2c5b09dd4b9e82715d8ee1af82bc88bd37dcfe536de21f02bae9ece576ee98a25de65b506b8bcf8e3d387406e93ab4fcd19a8dd05c2fd93481a889b40402fcc5f1221924ec5023d75532bac4ce1ceb0244fc858b3eca9ff62b9b472ce469ee9d1105cb39507c15d126a4067979ece1fb05f398b366d6c2c96a30fa7e55094f2c6e9ba7de3fc8dcd3c06005edcfad14b7b63e4388e52f0bcf915b2d733effa2fbab00d6f3c4b76fa4c7266802536904ebcf2e3da4c1f3e5297931b3ee06094797170a0a766b5b7414c5b3b14a6cbb8d9fbda455d1395063a2fe5718e0b33109566dc72f808ccded04c02b76b201eaca39e6d88c8b6b952cb32fc5705e10b3b6f242b3bb9b7dad144a0003dcd10ed69b558c605cc143bc7e8af3c6ec32cf6a0ab51c79388f39c60fb7f11539535399d8df061d694c6b978db045b34a9e416c521936de899230fb4f7fab61c4538d292e1dbe260800f2636faa8e8e3ce78a0e56afbef095b809108001b6a9fa4bf5420bc669ca197ee6357923acc8c2d02200d91eecbd826f8a06b2a12d7ac72eb4e3056a31b86173b3429a0c52254b7430449576c4f72b8307ee3e2f16b03fc7f4f380827813e997a4f35a8ed517e15144f8a8116706e128d2d7b8d8bc29de08de620a722bdf34a3a8212f6a2814c47c90dc7e54cc7ad0bace83a685cc174603f82b43b8d81818880d6843b139df636d2996b7b5af05720014622564226c0e27acc91dc34ed1f9d8322835d0daf9f11e9f69eedfba13e9112de11e5bd8419cb61774eb6d7780b6df5a398f87cb43a7e2b4ee85b7479571f4280aa4ac6744846d59ebd7999293f8bad2b1c1f071911e49e7a0975a79c704539f75d4cd386f3ebfa313cc8e8cbc43039b28133beaa28e71398de569adc41b8509b5c3b75b20cfac0bd7fcabb8798dde9f643b344ab62fcc30b0a8f78c4bdd4dc4d719f03e0dea1a901b46d9724a836a4da7e56acb5ddd2331e3919187434d3a13b9c48133db905b3e25f4ad0500ba47fe95a02209b6a734112d8f790ed2be746c84f4f0cb2d02942aa49435930f03b6ead95237e0f98b84039a27efb9af0bdd407c0c0ad8a2e1b6d62e8186e3ecaa34f3f98c9f96d55a1431f36034cd58476533a63cfb838b445dd92c09ab840fe4226291831cb3f02150e720cb5835a70143ac483e50b342f6a8cc7f286b8fd420dc8a54bed372d7a3952110de1a4c4e2f7668e6fcc2f34e632c1f82f524bbd689470f1effc89425a20e29adc8e908c44c7dcaaae0045024f5e20b116deb861710871c9766096aa6bf11195ef13389410cbedaeee3e7960f0abcf65fce661d954bcfb03481a87f7bf47428e7cb04ca08028c7acea99b13c6a9d2663ca9fa5ca0c1346f8cdd7149f5acb35b1843e16a8770454eb137ce9dd0e55b181698c1326f4671b60691471516a133d8bf1a592cbe930ba5290968e720c18077831c9f03a346afd09a0be222b9f325af7e40e88dc5157d0babd248c874de39773c658c1302fcef866311640f4807d4395781d52655cab2a508165034f9f4197b2bd9a3714e2f0eabeff9772f16af203e8434d77102d4343fb0b8e04080ff4f5e3ed32cec4626619e9eb7d6bbe46c03960e62af37a4e7b7282d7ad70931dbba82151b4069bfa4a7b65932ac48f806aad190c9b481f70b3891c143cd4def1418fcf1f784c681fcde6f9cde5479b459f15c8eba472e21e8eb448501ba17bd3a9788f57557c10e0c9db58d09933ea237e35f4ca657be7826cbea3344399219a2b88a58c3fb5af8660fa989e68285cc9c150cc00d240c0fbc0a49d0f6d055ff31324e1f998da3af28e0b28b93d5c6c543f2630815a3e250dd5a69951b3ebeb215314ba42b45e9480c1312abcedbff6fa9ef6706b5735fd17668747b53dc9212dc3179cd8d14e5290cb48bf840f74abf7ef7b4a31b92537c2b6f8bb7fad21911cd864ec00a18c31c36c82ecb4f4eb69b953042bf73a18534ab5a08da993b61ff41462f9fbae7bf1cc64a48ac4a2dc82b81c3db4d6e51e76b0250eff5a9e5ef3fa0d329f9fc5989a1d4968c5095b5a5f1843529da0c44d2f6f764c56b5ed2a2dce1797451b2751db769f70a444e95dfbacb644550de7e1b0d8bd64895925ab8348442f4cd382c6ecfff4262503caedf512abb177b8b4c3d67b640fe8c717d918f889274da272bb958df6d3ecb78754b497459191a246396a63ba2af5b27a79b6f97aa2f0d037144a4854ce7470665346a6570498e8596cc598d5bc549796bace4cbc106ffc8e7e2a5432c6e06c269f33445b5f19426b9d27835b1de956128180c3ff67ad0421e359a2cfb0a97991c8c0d367d058ea998ddd8994174011317c394d40c6ca74b86a3812431bd1a3fa98469d47b9eb174e13c8ace6c535ffd7e27bc45fdeeb4f1df9f1779ae40e96cd9fc9e5fdf575ed06d5b5dd613464530d536a440e374fc07f88af85895037d421ab60edf7788d601ea19056f9125841b57c7bb744e796190473ec0b4422f7a42db53bede56d3be81b9247a089104a61e8a9df36927ad0fff52ce3a4626dcdde1ea31ea81e5202e22554da24324f24086903386e1fc4f8f71e671a243f030b9ef6549d352f7f6d564c2e96b706f802b80987ed723f0c80c8ae08f326837e5abccff3849f9d7821424d4f79fb08cfc65d71868246694d48a21ca69fb59e83c716a28ed5cfea2ff8f74256f12f4969126d558cfa13e812130d392e1eaecabed42dd13876c843c13221baa581aea99ac11f7d2bb609b4d492bc5590b483f5a659357473da6b3f9a00946445bcb8605653bbb86eac925ada06176948a912605df9693e770cbd583a2e79e8c2c365260709cb9a31af8550f1642bdc106e050b83e6fb2e483487e4f9be7b278b24110a337d960311af391084fcf170b5bf81095e1995cc47b22299302b953d248c69f0b923baf84c71364f536d3a4400db69a4e6841d6654affea274d2d0e8df3fc788c86c213a89ace1647c42f02d391e9aed3c0bcda5feaa9933a6c5359c847467366c456295d8ec0db6eb2a93fde2cd60cee5874da2361dd7e80aef9edb870a49e08446319059785062eaf0201b9c9f45fdbdd978b0ac234118710a6c79feb6e45b2f567ae89f7522e8a3cdb09fd509b46589f6f7aeb0700158ce170e498d240fa1defc7bc6f537c9c2ecae3277bdf88c7919cff58479421462a3c49fa546d23d39a06f2ad577b45d7412aee6e420e5067107bb0453d0dee73f3c08b24fa4bd54da3183beddaa0c8466c038dc7528f2cef518da4b25dd07ad3e966203d7269310c57db126f9268bb069d9009b1decaa05ca289d4566593a68beccc38bebd457c48bfd384989d21bf4d6488de744c4da83fa807c99e66677924e90646e8264d9a7ab279df46785353d040496ca628028e6d5043a5405b4810a5fc9dd5ff8d8070faff2fde040da943d9cd0f1fdf5f5ab495cec133c962d8ea7cfd0314c4eb243963df075d300ae1e625d9949b8757d253a62a5dc166e6d2f12ab09e60b0009d002842be7687e30f6e95ea17033a4d932b28378e59efa9cb521f9bbe3f08978ed31e58b7715727e8d2a3685b0fdbdb3e59cfc0dde30635c4ff82eb634699c65cf8e914217283019da83cbc1e86e52f438a2fb2376f822a8054c1e7764ad2231d1631558d482b9c26f628734bddb4c7048f36ebed6ef9df5e3d3fa9852e96de151d01cc3e4278715de8b6a22e8afac49e9534862e85681be69f0fe94c3b56278d5e4c768267fbb95af98174b91d51431e5e2f5b4bd6a3c29a7ce7d2f99d3eeeeea29aff8bf329076eac06dcd041150d441abf624005434f0d946a27fa1dacd35cd3401c91d5dc6431ef32412c05e856d4d20c249be1bd1ab37421912dee63ce9d45ba6a81871ff5a7ae60dd5ade3fddd7a9ef80b79899e9c08eee43e305bbabf231346c9ba85f862ed280cf9ebff8d18bedaffcef437c1a5bfa5ab30e23afc74a840bc5288b6dfd88f28abec76d43e962a35189849c5d8a02b3351d2c021eb86f3da71e79f3dfd6a71d828bcb9ec6b1abe4a7cd54e590bfbe6d2064bc453122ead8293dde9bc67525367f6997f371a52f7c2d7c7d8480865f"}}}}}}}, 0x0) 3.121115466s ago: executing program 1 (id=3277): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x24000000) 2.96824925s ago: executing program 2 (id=3278): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) io_uring_enter(r0, 0x2219, 0x4b01, 0x16, 0x0, 0x0) 2.796719892s ago: executing program 9 (id=3279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0x1, 0xa}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x2, 0x9, 0x4, 0xfffffe01, 0x200}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.796410074s ago: executing program 0 (id=3280): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 2.672106236s ago: executing program 5 (id=3281): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/syz\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/syz/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/syz/node/node0/ipv4_port\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='7777\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/syz/node/node0/ipv4_address\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='127.0.0.1\n', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/syz/node/node0/num\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/syz/node/node0/local\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/syz/heartbeat/hb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000580)='51', 0x2) 2.569129479s ago: executing program 7 (id=3282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0x30, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}}, 0x0) 2.41647703s ago: executing program 1 (id=3283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x1, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x9}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}]}}}}}}}}, 0x0) 2.353363396s ago: executing program 2 (id=3284): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='readonly', 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000440)={0x4, 0x7}) 2.25609179s ago: executing program 0 (id=3285): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='00:02\n\x00', 0x6) write(r1, &(0x7f00000001c0)='00:03\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='disable\n\x00', 0x8) write(r2, &(0x7f0000000280)='auto\n\x00', 0x5) write(r2, &(0x7f00000002c0)='fill\n\x00', 0x5) write(r2, &(0x7f0000000300)='activate\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='disable\n\x00', 0x8) write(r3, &(0x7f00000003c0)='auto\n\x00', 0x5) write(r3, 0x0, 0x0) r4 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='00:02\n\x00', 0x6) write(r4, &(0x7f0000000500)='00:03\n\x00', 0x6) 2.014082926s ago: executing program 7 (id=3286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='00:02\n\x00', 0x6) write(r1, &(0x7f00000001c0)='00:03\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='disable\n\x00', 0x8) write(r2, &(0x7f0000000280)='auto\n\x00', 0x5) write(r2, &(0x7f00000002c0)='fill\n\x00', 0x5) write(r2, &(0x7f0000000300)='activate\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='disable\n\x00', 0x8) write(r3, &(0x7f00000003c0)='auto\n\x00', 0x5) write(r3, &(0x7f0000000440)='activate\n\x00', 0x9) r4 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000500)='00:03\n\x00', 0x6) 1.988860389s ago: executing program 1 (id=3287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) read(r0, 0x0, 0x0) 1.065750292s ago: executing program 2 (id=3288): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000680)=ANY=[], 0x1, 0xa13, &(0x7f0000006080)="$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") mount$overlay(0x0, 0x0, 0x0, 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x1800, 0x0) 1.050848037s ago: executing program 5 (id=3289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) 616.86239ms ago: executing program 1 (id=3290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='00:02\n\x00', 0x6) write(0xffffffffffffffff, &(0x7f00000001c0)='00:03\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='auto\n\x00', 0x5) write(r1, &(0x7f00000002c0)='fill\n\x00', 0x5) write(r1, &(0x7f0000000300)='activate\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='disable\n\x00', 0x8) write(r2, &(0x7f00000003c0)='auto\n\x00', 0x5) write(r2, &(0x7f0000000440)='activate\n\x00', 0x9) r3 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='00:02\n\x00', 0x6) 599.99526ms ago: executing program 5 (id=3291): setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40) 278.602947ms ago: executing program 0 (id=3292): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x161) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 255.809596ms ago: executing program 7 (id=3293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 140.04457ms ago: executing program 2 (id=3294): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='readonly', 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000440)={0x4, 0x7}) 665.291µs ago: executing program 5 (id=3295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='00:02\n\x00', 0x6) write(r1, &(0x7f00000001c0)='00:03\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='disable\n\x00', 0x8) write(r2, &(0x7f0000000280)='auto\n\x00', 0x5) write(r2, &(0x7f00000002c0)='fill\n\x00', 0x5) write(r2, &(0x7f0000000300)='activate\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='disable\n\x00', 0x8) write(r3, &(0x7f00000003c0)='auto\n\x00', 0x5) write(r3, &(0x7f0000000440)='activate', 0x8) r4 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='00:02\n\x00', 0x6) write(r4, &(0x7f0000000500)='00:03\n\x00', 0x6) 0s ago: executing program 1 (id=3296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0x1, 0xa}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x2, 0x9, 0x4, 0xfffffe01, 0x200}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): d: recover of RAID array md0 [ 951.365776][T16157] md: md0: recover done. [ 952.694901][T15936] Bluetooth: hci0: command 0x0406 tx timeout [ 952.694936][T15936] Bluetooth: hci4: command 0x0406 tx timeout [ 952.763844][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 952.808435][T16145] md: could not open device unknown-block(1,1). [ 952.986990][T16168] md: recover of RAID array md0 [ 952.987023][T16168] md: md0: recover done. [ 953.198755][T16169] netlink: 'syz.9.2339': attribute type 11 has an invalid length. [ 953.249425][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2339'. [ 953.253486][T16169] netlink: 'syz.9.2339': attribute type 1 has an invalid length. [ 953.283622][T16167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.397925][T16170] md: recover of RAID array md0 [ 953.397959][T16170] md: md0: recover done. [ 953.596333][T16181] md: recover of RAID array md0 [ 953.596416][T16181] md: md0: recover done. [ 953.789535][T16185] netlink: 'syz.9.2345': attribute type 11 has an invalid length. [ 953.805310][T16186] md: recover of RAID array md0 [ 953.805383][T16186] md: md0: recover done. [ 953.843991][T16185] netlink: 'syz.9.2345': attribute type 1 has an invalid length. [ 953.844008][T16185] netlink: 'syz.9.2345': attribute type 3 has an invalid length. [ 953.903920][T16189] netlink: 'syz.9.2345': attribute type 3 has an invalid length. [ 953.935033][T16185] netlink: 'syz.9.2345': attribute type 3 has an invalid length. [ 953.951175][T16185] netlink: 'syz.9.2345': attribute type 1 has an invalid length. [ 953.951980][T16183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.076170][T16190] 9pnet_fd: Insufficient options for proto=fd [ 954.118170][T16191] md: recover of RAID array md0 [ 954.118227][T16191] md: md0: recover done. [ 954.199026][T16178] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 954.199047][T16178] device-mapper: ioctl: error adding target to table [ 955.249277][T15893] Bluetooth: hci0: command 0x0406 tx timeout [ 956.305844][T16198] md: recover of RAID array md0 [ 956.305897][T16198] md: md0: recover done. [ 956.425005][T16197] md: couldn't update array info. -22 [ 956.466611][T16197] md: could not open device unknown-block(1,0). [ 956.466677][T16197] md: md_import_device returned -16 [ 956.508152][T16197] md: could not open device unknown-block(1,1). [ 956.508219][T16197] md: md_import_device returned -16 [ 956.533044][T16203] se_dev->se_dev_ptr already set for storage object [ 956.615089][T16208] md: recover of RAID array md0 [ 956.615848][T16208] md: md0: recover done. [ 956.645182][T11366] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 956.777734][T16211] md: recover of RAID array md0 [ 956.777764][T16211] md: md0: recover done. [ 956.965469][T16215] md: recover of RAID array md0 [ 956.965550][T16215] md: md0: recover done. [ 957.006258][T16090] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.138023][T16217] md: recover of RAID array md0 [ 957.138052][T16217] md: md0: recover done. [ 957.376006][T16221] md: recover of RAID array md0 [ 957.376038][T16221] md: md0: recover done. [ 957.500026][T16218] md: could not open device unknown-block(1,0). [ 957.596006][T16090] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.606360][T16218] md: could not open device unknown-block(1,1). [ 957.632761][T16224] netlink: 'syz.9.2357': attribute type 11 has an invalid length. [ 957.652528][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'. [ 957.665738][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2357'. [ 957.698204][T16224] netlink: 'syz.9.2357': attribute type 1 has an invalid length. [ 957.716081][T16222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.720202][T16230] md: recover of RAID array md0 [ 957.720231][T16230] md: md0: recover done. [ 957.980110][T16235] md: recover of RAID array md0 [ 957.980141][T16235] md: md0: recover done. [ 958.266527][T16244] md: recover of RAID array md0 [ 958.266559][T16244] md: md0: recover done. [ 958.269467][T16090] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.363395][T16242] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 958.538839][T15900] Bluetooth: hci1: command 0x0406 tx timeout [ 958.543105][T16248] md: recover of RAID array md0 [ 958.543186][T16248] md: md0: recover done. [ 958.578783][T16090] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.699594][T15893] Bluetooth: hci7: command 0x0406 tx timeout [ 958.781271][T16253] md: recover of RAID array md0 [ 958.781303][T16253] md: md0: recover done. [ 958.859849][T16255] 9pnet_fd: Insufficient options for proto=fd [ 960.866578][T15893] Bluetooth: hci1: command 0x0406 tx timeout [ 960.866617][T15893] Bluetooth: hci7: command 0x0406 tx timeout [ 961.076760][T16261] md: recover of RAID array md0 [ 961.076791][T16261] md: md0: recover done. [ 961.325881][T16269] md: recover of RAID array md0 [ 961.325913][T16269] md: md0: recover done. [ 961.405812][T16264] md: couldn't update array info. -22 [ 961.435208][T16264] md: could not open device unknown-block(1,0). [ 961.435259][T16264] md: md_import_device returned -16 [ 961.515104][T16264] md: could not open device unknown-block(1,1). [ 961.515182][T16264] md: md_import_device returned -16 [ 961.619443][T16274] md: recover of RAID array md0 [ 961.619462][T16274] md: md0: recover done. [ 961.749490][T16260] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 961.749513][T16260] device-mapper: ioctl: error adding target to table [ 961.840784][T16090] bridge_slave_1: left allmulticast mode [ 961.840805][T16090] bridge_slave_1: left promiscuous mode [ 961.841004][T16090] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.890892][T16090] bridge_slave_0: left allmulticast mode [ 961.890919][T16090] bridge_slave_0: left promiscuous mode [ 961.891100][T16090] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.941413][T16277] md: recover of RAID array md0 [ 961.941431][T16277] md: md0: recover done. [ 962.260224][T16282] md: recover of RAID array md0 [ 962.260250][T16282] md: md0: recover done. [ 962.311047][T16280] se_dev->se_dev_ptr already set for storage object [ 962.438160][T16285] md: recover of RAID array md0 [ 962.438212][T16285] md: md0: recover done. [ 962.465259][T16281] md: could not open device unknown-block(1,0). [ 962.536181][T16281] md: could not open device unknown-block(1,1). [ 962.600826][T16290] md: recover of RAID array md0 [ 962.600874][T16290] md: md0: recover done. [ 962.766868][T16291] md: recover of RAID array md0 [ 962.766898][T16291] md: md0: recover done. [ 962.821474][T16284] printk: console [ttyS0] disabled syzkaller syzkaller login: [ 965.039703][T16310] printk: console [ttyS0] enabled [ 965.285519][T16330] md: recover of RAID array md0 [ 965.285541][T16330] md: md0: recover done. [ 966.245475][T11366] Bluetooth: hci2: command 0x0406 tx timeout [ 967.259115][T16338] printk: console [ttyS0] disabled [ 967.259172][T16343] md: recover of RAID array md0 [ 967.259220][T16343] md: md0: recover done. [ 972.003637][T16417] md: recover of RAID array md0 [ 972.003667][T16417] md: md0: recover done. [ 972.019450][T16400] printk: console [ttyS0] enabled [ 972.307614][T16421] md: recover of RAID array md0 [ 972.307646][T16421] md: md0: recover done. [ 972.387489][T16419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 972.535401][T16419] md: couldn't update array info. -22 [ 972.576674][T16419] md: loop0 has zero or unknown size, marking faulty! [ 972.576757][T16419] md: md_import_device returned -22 [ 972.582104][T16425] md: recover of RAID array md0 [ 972.582137][T16425] md: md0: recover done. [ 972.797964][T16430] md: recover of RAID array md0 [ 972.797997][T16430] md: md0: recover done. [ 972.985462][T16434] md: recover of RAID array md0 [ 972.985493][T16434] md: md0: recover done. [ 973.152819][T16435] nvmet: disable ns before setting buffered_io value. [ 973.154040][T16090] team0 (unregistering): Port device team_slave_1 removed [ 973.172643][T16439] md: recover of RAID array md0 [ 973.172693][T16439] md: md0: recover done. [ 973.202038][T16435] nvmet: the ns:1 is already enabled. [ 973.233204][T16435] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 973.269193][T16090] team0 (unregistering): Port device team_slave_0 removed [ 973.342183][T16446] md: recover of RAID array md0 [ 973.342215][T16446] md: md0: recover done. [ 973.489395][T16450] md: recover of RAID array md0 [ 973.489427][T16450] md: md0: recover done. [ 973.629375][ T6111] nvmet: Created nvm controller 68 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:21e0a11c-9495-4ab3-b9a3-a29ab3776d12. [ 973.667617][T16435] nvme nvme67: creating 1 I/O queues. [ 973.673669][T16435] nvme nvme67: new ctrl: "testsubsys" [ 973.689168][T16453] md: recover of RAID array md0 [ 973.689194][T16453] md: md0: recover done. [ 973.764244][T11366] Bluetooth: hci1: link tx timeout [ 973.765595][T11366] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 973.863795][T16455] md: recover of RAID array md0 [ 973.863828][T16455] md: md0: recover done. [ 973.985982][T16456] md: recover of RAID array md0 [ 973.986013][T16456] md: md0: recover done. [ 974.109150][T16459] md: recover of RAID array md0 [ 974.109181][T16459] md: md0: recover done. [ 974.307211][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 974.378975][T16462] md: recover of RAID array md0 [ 974.379026][T16462] md: md0: recover done. [ 974.713555][T16470] md: recover of RAID array md0 [ 974.714531][T16470] md: md0: recover done. [ 974.748528][T16469] netlink: 'syz.0.2405': attribute type 11 has an invalid length. [ 974.843780][T16469] netlink: 'syz.0.2405': attribute type 1 has an invalid length. [ 974.843798][T16469] netlink: 'syz.0.2405': attribute type 3 has an invalid length. [ 974.868646][T16469] netlink: 'syz.0.2405': attribute type 3 has an invalid length. [ 974.888416][T16469] netlink: 'syz.0.2405': attribute type 3 has an invalid length. [ 974.908904][T16469] netlink: 'syz.0.2405': attribute type 1 has an invalid length. [ 974.933418][T16467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.116413][T16475] md: recover of RAID array md0 [ 975.116434][T16475] md: md0: recover done. [ 975.137512][T11366] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 975.369505][T16477] printk: console [ttyS0] disabled [ 976.021351][T16477] printk: console [ttyS0] enabled [ 976.097196][T16500] md: recover of RAID array md0 [ 976.097216][T16500] md: md0: recover done. [ 976.134965][T15936] Bluetooth: hci6: command 0x0406 tx timeout [ 976.315463][T15900] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 976.336013][T16504] netlink: 'syz.2.2413': attribute type 11 has an invalid length. [ 976.363646][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2413'. [ 976.378874][T16504] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 976.379627][T16502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.403809][T16508] md: recover of RAID array md0 [ 976.403836][T16508] md: md0: recover done. [ 976.694273][T16511] md: recover of RAID array md0 [ 976.694307][T16511] md: md0: recover done. [ 976.885054][T16518] md: recover of RAID array md0 [ 976.885083][T16518] md: md0: recover done. [ 978.897559][T15900] Bluetooth: hci6: command 0x0406 tx timeout [ 979.042414][T16525] md: recover of RAID array md0 [ 979.042446][T16525] md: md0: recover done. [ 979.294897][T16516] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 979.294920][T16516] device-mapper: ioctl: error adding target to table [ 979.324710][T16530] md: recover of RAID array md0 [ 979.324739][T16530] md: md0: recover done. [ 979.561122][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'. [ 979.607633][T16538] md: recover of RAID array md0 [ 979.607808][T16538] md: md0: recover done. [ 979.881746][T16544] md: recover of RAID array md0 [ 979.881779][T16544] md: md0: recover done. [ 979.923820][T16541] netlink: 'syz.1.2421': attribute type 11 has an invalid length. [ 979.963817][T16541] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 979.963856][T16541] netlink: 'syz.1.2421': attribute type 3 has an invalid length. [ 980.005684][T16541] netlink: 'syz.1.2421': attribute type 3 has an invalid length. [ 980.029386][T16541] netlink: 'syz.1.2421': attribute type 3 has an invalid length. [ 980.030648][T16541] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 980.031938][T16539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.275351][T16548] md: couldn't update array info. -22 [ 980.354881][T16551] md: recover of RAID array md0 [ 980.354911][T16551] md: md0: recover done. [ 980.396909][T16550] md: could not open device unknown-block(1,0). [ 980.396957][T16550] md: md_import_device returned -16 [ 980.445910][T16548] md: could not open device unknown-block(1,1). [ 980.445956][T16548] md: md_import_device returned -16 [ 980.597668][T16559] md: recover of RAID array md0 [ 980.597805][T16559] md: md0: recover done. [ 980.672150][T16558] se_dev->se_dev_ptr already set for storage object [ 980.739080][T16556] md: could not open device unknown-block(1,0). [ 980.781856][T15936] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 980.830086][T16556] md: could not open device unknown-block(1,1). [ 980.832112][T16565] md: recover of RAID array md0 [ 980.832162][T16565] md: md0: recover done. [ 981.069784][T16572] md: recover of RAID array md0 [ 981.069897][T16572] md: md0: recover done. [ 981.130617][T16571] netlink: 'syz.9.2429': attribute type 11 has an invalid length. [ 981.148215][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2429'. [ 981.149292][T16571] netlink: 'syz.9.2429': attribute type 1 has an invalid length. [ 981.149727][T16569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.501863][T16577] md: recover of RAID array md0 [ 981.503565][T16577] md: md0: recover done. [ 983.523438][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 983.626883][T16588] md: recover of RAID array md0 [ 983.627700][T16588] md: md0: recover done. [ 983.897247][T16598] md: recover of RAID array md0 [ 983.897913][T16598] md: md0: recover done. [ 984.107336][T16604] md: recover of RAID array md0 [ 984.107455][T16604] md: md0: recover done. [ 984.314255][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2438'. [ 984.406294][T16610] md: recover of RAID array md0 [ 984.406313][T16610] md: md0: recover done. [ 984.589143][T16596] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 984.589166][T16596] device-mapper: ioctl: error adding target to table [ 984.700592][T16617] md: recover of RAID array md0 [ 984.700621][T16617] md: md0: recover done. [ 984.859809][T16618] netlink: 'syz.8.2440': attribute type 11 has an invalid length. [ 984.926439][T16618] netlink: 'syz.8.2440': attribute type 1 has an invalid length. [ 984.926457][T16618] netlink: 'syz.8.2440': attribute type 3 has an invalid length. [ 984.966416][T16618] netlink: 'syz.8.2440': attribute type 3 has an invalid length. [ 984.985011][T16618] netlink: 'syz.8.2440': attribute type 3 has an invalid length. [ 985.004296][T16618] netlink: 'syz.8.2440': attribute type 1 has an invalid length. [ 985.036260][T16615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.079434][T16620] md: recover of RAID array md0 [ 985.079464][T16620] md: md0: recover done. [ 985.334140][T16623] md: recover of RAID array md0 [ 985.334195][T16623] md: md0: recover done. [ 985.486108][T16622] md: couldn't update array info. -22 [ 985.531665][T16629] md: could not open device unknown-block(1,0). [ 985.531721][T16629] md: md_import_device returned -16 [ 985.576231][T16622] md: could not open device unknown-block(1,1). [ 985.576277][T16622] md: md_import_device returned -16 [ 985.630316][T16636] md: recover of RAID array md0 [ 985.630344][T16636] md: md0: recover done. [ 985.685463][T16634] netlink: 'syz.9.2444': attribute type 11 has an invalid length. [ 985.714987][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2444'. [ 985.723735][T16634] netlink: 'syz.9.2444': attribute type 1 has an invalid length. [ 985.724853][T16630] md: could not open device unknown-block(1,0). [ 985.737831][T16631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.861087][T16630] md: could not open device unknown-block(1,1). [ 985.901716][T16637] md: recover of RAID array md0 [ 985.901797][T16637] md: md0: recover done. [ 986.186395][T16647] md: recover of RAID array md0 [ 986.186511][T16647] md: md0: recover done. [ 987.451224][T16646] se_dev->se_dev_ptr already set for storage object [ 988.352933][T16658] md: recover of RAID array md0 [ 988.352991][T16658] md: md0: recover done. [ 988.399139][T15936] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 988.542684][T16661] md: recover of RAID array md0 [ 988.542744][T16661] md: md0: recover done. [ 988.757363][T16668] md: recover of RAID array md0 [ 988.757568][T16668] md: md0: recover done. [ 988.926280][T16671] md: recover of RAID array md0 [ 988.928075][T16671] md: md0: recover done. [ 989.129611][T16676] md: recover of RAID array md0 [ 989.129664][T16676] md: md0: recover done. [ 989.399044][T16669] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 989.399087][T16669] device-mapper: ioctl: error adding target to table [ 989.428432][T16679] md: recover of RAID array md0 [ 989.428461][T16679] md: md0: recover done. [ 989.681337][T16690] md: recover of RAID array md0 [ 989.681368][T16690] md: md0: recover done. [ 989.736736][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'. [ 989.932412][T16692] netlink: 'syz.8.2458': attribute type 11 has an invalid length. [ 989.965572][T16693] md: recover of RAID array md0 [ 989.965854][T16693] md: md0: recover done. [ 990.012851][T16692] netlink: 'syz.8.2458': attribute type 1 has an invalid length. [ 990.012889][T16692] netlink: 'syz.8.2458': attribute type 3 has an invalid length. [ 990.051410][T16692] netlink: 'syz.8.2458': attribute type 3 has an invalid length. [ 990.079099][T16692] netlink: 'syz.8.2458': attribute type 3 has an invalid length. [ 990.083914][T16692] netlink: 'syz.8.2458': attribute type 1 has an invalid length. [ 990.112032][T16691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.286730][T16697] md: couldn't update array info. -22 [ 990.287519][T16700] md: recover of RAID array md0 [ 990.287546][T16700] md: md0: recover done. [ 990.341010][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 990.381322][T16697] md: could not open device unknown-block(1,0). [ 990.381388][T16697] md: md_import_device returned -16 [ 990.452375][T16701] md: could not open device unknown-block(1,1). [ 990.452422][T16701] md: md_import_device returned -16 [ 990.609363][T16703] md: recover of RAID array md0 [ 990.609395][T16703] md: md0: recover done. [ 990.722686][T16705] netlink: 'syz.8.2461': attribute type 11 has an invalid length. [ 990.790900][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2461'. [ 990.805248][T16705] netlink: 'syz.8.2461': attribute type 1 has an invalid length. [ 990.805705][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.971657][T16709] md: recover of RAID array md0 [ 990.971724][T16709] md: md0: recover done. [ 993.013250][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.013298][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.168154][T16719] md: recover of RAID array md0 [ 993.168185][T16719] md: md0: recover done. [ 993.345148][T16725] md: recover of RAID array md0 [ 993.345227][T16725] md: md0: recover done. [ 993.350742][T16723] se_dev->se_dev_ptr already set for storage object [ 993.590143][T16732] md: recover of RAID array md0 [ 993.590174][T16732] md: md0: recover done. [ 993.732431][T15936] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 993.776110][T16738] md: recover of RAID array md0 [ 993.776164][T16738] md: md0: recover done. [ 994.417055][T16748] md: recover of RAID array md0 [ 994.417109][T16748] md: md0: recover done. [ 994.698989][T16755] md: recover of RAID array md0 [ 994.699230][T16755] md: md0: recover done. [ 994.924911][T16760] netlink: 'syz.2.2475': attribute type 11 has an invalid length. [ 994.959722][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2474'. [ 994.991564][T16760] netlink: 'syz.2.2475': attribute type 1 has an invalid length. [ 994.991580][T16760] netlink: 'syz.2.2475': attribute type 3 has an invalid length. [ 995.026838][T16768] md: recover of RAID array md0 [ 995.026946][T16768] md: md0: recover done. [ 995.031145][T16760] netlink: 'syz.2.2475': attribute type 3 has an invalid length. [ 995.032322][T16762] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 995.072279][T16760] netlink: 'syz.2.2475': attribute type 3 has an invalid length. [ 995.094346][T16760] netlink: 'syz.2.2475': attribute type 1 has an invalid length. [ 995.119269][T16756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.372143][T16769] netlink: 'syz.1.2478': attribute type 11 has an invalid length. [ 996.393319][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'. [ 997.213998][T16769] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 997.227525][T16765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.262316][T16770] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 997.421436][T16777] md: recover of RAID array md0 [ 997.421466][T16777] md: md0: recover done. [ 997.759448][T16781] md: recover of RAID array md0 [ 997.759479][T16781] md: md0: recover done. [ 997.965153][T16791] md: recover of RAID array md0 [ 997.965211][T16791] md: md0: recover done. [ 998.164759][T16787] md: could not open device unknown-block(1,0). [ 998.189183][T16796] md: recover of RAID array md0 [ 998.190163][T16796] md: md0: recover done. [ 998.277057][T16787] md: could not open device unknown-block(1,1). [ 998.415590][T16803] md: recover of RAID array md0 [ 998.415669][T16803] md: md0: recover done. [ 998.424153][T16799] se_dev->se_dev_ptr already set for storage object [ 998.682132][T16809] md: recover of RAID array md0 [ 998.682184][T16809] md: md0: recover done. [ 999.010641][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 999.259069][T16818] netlink: 'syz.0.2493': attribute type 11 has an invalid length. [ 1000.261685][T16818] netlink: 'syz.0.2493': attribute type 1 has an invalid length. [ 1000.261709][T16818] netlink: 'syz.0.2493': attribute type 3 has an invalid length. [ 1000.262476][T16818] netlink: 'syz.0.2493': attribute type 3 has an invalid length. [ 1000.262841][T16818] netlink: 'syz.0.2493': attribute type 3 has an invalid length. [ 1000.263860][T16818] netlink: 'syz.0.2493': attribute type 1 has an invalid length. [ 1001.099509][T15900] Bluetooth: hci7: command 0x0406 tx timeout [ 1001.148263][T16815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1001.288799][T16823] md: recover of RAID array md0 [ 1001.288829][T16823] md: md0: recover done. [ 1001.515185][T16827] md: recover of RAID array md0 [ 1001.515227][T16827] md: md0: recover done. [ 1001.559262][T16825] netlink: 'syz.3.2494': attribute type 11 has an invalid length. [ 1001.601368][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2494'. [ 1001.616975][T16825] netlink: 'syz.3.2494': attribute type 1 has an invalid length. [ 1001.620178][T16824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1001.818074][T16835] md: recover of RAID array md0 [ 1001.818127][T16835] md: md0: recover done. [ 1001.824212][T16833] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1001.957555][T16838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 1002.137106][T16845] md: recover of RAID array md0 [ 1002.137135][T16845] md: md0: recover done. [ 1002.245015][T16843] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1002.426829][T16849] md: recover of RAID array md0 [ 1002.426859][T16849] md: md0: recover done. [ 1002.760935][T16854] md: recover of RAID array md0 [ 1002.760959][T16854] md: md0: recover done. [ 1003.055449][T16862] md: recover of RAID array md0 [ 1003.055472][T16862] md: md0: recover done. [ 1003.124635][T16856] md: could not open device unknown-block(1,0). [ 1003.174792][T15900] Bluetooth: hci7: command 0x0406 tx timeout [ 1004.464282][T16856] md: could not open device unknown-block(1,1). [ 1005.393661][T16875] md: recover of RAID array md0 [ 1005.393687][T16875] md: md0: recover done. [ 1005.688046][T16882] netlink: 'syz.2.2508': attribute type 11 has an invalid length. [ 1005.713077][T16884] md: recover of RAID array md0 [ 1005.713116][T16884] md: md0: recover done. [ 1005.728305][T16880] se_dev->se_dev_ptr already set for storage object [ 1005.765996][T16882] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 1005.766012][T16882] netlink: 'syz.2.2508': attribute type 3 has an invalid length. [ 1005.795106][T16882] netlink: 'syz.2.2508': attribute type 3 has an invalid length. [ 1005.817324][T16882] netlink: 'syz.2.2508': attribute type 3 has an invalid length. [ 1005.820530][T16882] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 1005.821330][T15936] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:202' [ 1005.821348][T15936] CPU: 0 UID: 0 PID: 15936 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1005.821369][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1005.821382][T15936] Workqueue: hci1 hci_rx_work [ 1005.821406][T15936] Call Trace: [ 1005.821414][T15936] [ 1005.821423][T15936] dump_stack_lvl+0xe8/0x150 [ 1005.821457][T15936] sysfs_create_dir_ns+0x271/0x2a0 [ 1005.821491][T15936] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1005.821524][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.821547][T15936] ? do_raw_spin_unlock+0xf5/0x200 [ 1005.821580][T15936] kobject_add_internal+0x622/0xcd0 [ 1005.821617][T15936] kobject_add+0x163/0x240 [ 1005.821643][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.821672][T15936] ? __pfx_kobject_add+0x10/0x10 [ 1005.821698][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.821728][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.821754][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.821776][T15936] ? get_device_parent+0x366/0x3a0 [ 1005.821802][T15936] device_add+0x3fa/0xb80 [ 1005.821826][T15936] hci_conn_add_sysfs+0xd5/0x210 [ 1005.821862][T15936] le_conn_complete_evt+0xfe3/0x16d0 [ 1005.821891][T15936] ? le_conn_complete_evt+0x1b1/0x16d0 [ 1005.821919][T15936] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1005.821946][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.821968][T15936] ? __mutex_unlock_slowpath+0x731/0x900 [ 1005.821998][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.822020][T15936] ? skb_pull_data+0xf0/0x200 [ 1005.822056][T15936] hci_le_conn_complete_evt+0x187/0x470 [ 1005.822088][T15936] hci_event_packet+0x67a/0xf10 [ 1005.822115][T15936] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1005.822138][T15936] ? __pfx_hci_event_packet+0x10/0x10 [ 1005.822164][T15936] ? audit_filter_rules+0x45f0/0x5d10 [ 1005.822192][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.822215][T15936] ? hci_send_to_monitor+0xe2/0x590 [ 1005.822246][T15936] hci_rx_work+0x3ee/0x1020 [ 1005.822273][T15936] ? process_scheduled_works+0x97a/0x1630 [ 1005.822301][T15936] process_scheduled_works+0xc3d/0x1630 [ 1005.822327][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.822379][T15936] ? __pfx_process_scheduled_works+0x10/0x10 [ 1005.822411][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.822433][T15936] ? assign_work+0x3cf/0x5d0 [ 1005.822464][T15936] worker_thread+0xa47/0xfb0 [ 1005.822493][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.822526][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.822548][T15936] ? __kthread_parkme+0x71/0x1f0 [ 1005.822587][T15936] kthread+0x38b/0x480 [ 1005.822607][T15936] ? __pfx_worker_thread+0x10/0x10 [ 1005.822632][T15936] ? __pfx_kthread+0x10/0x10 [ 1005.822653][T15936] ret_from_fork+0x514/0xb70 [ 1005.822675][T15936] ? __pfx_ret_from_fork+0x10/0x10 [ 1005.822694][T15936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.822722][T15936] ? __switch_to+0xc89/0x1420 [ 1005.822752][T15936] ? __pfx_kthread+0x10/0x10 [ 1005.822773][T15936] ret_from_fork_asm+0x1a/0x30 [ 1005.822820][T15936] [ 1005.822891][T15936] kobject: kobject_add_internal failed for hci1:202 with -EEXIST, don't try to register things with the same name in the same directory. [ 1005.822919][T15936] Bluetooth: hci1: failed to register connection device [ 1005.844011][T16877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.524068][T16891] netlink: 'syz.3.2512': attribute type 11 has an invalid length. [ 1006.568390][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'. [ 1006.597498][T16891] netlink: 'syz.3.2512': attribute type 1 has an invalid length. [ 1006.597930][T16890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.642807][T16894] md: recover of RAID array md0 [ 1006.642826][T16894] md: md0: recover done. [ 1006.691760][T16893] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1006.904528][T16897] md: recover of RAID array md0 [ 1006.904548][T16897] md: md0: recover done. [ 1007.172552][T16903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1007.191055][T16904] md: recover of RAID array md0 [ 1007.191072][T16904] md: md0: recover done. [ 1007.411475][T16911] md: recover of RAID array md0 [ 1007.411495][T16911] md: md0: recover done. [ 1007.525410][T16910] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1007.553117][T16910] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1007.580649][T16910] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1007.613218][T16910] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1007.700114][T16914] md: recover of RAID array md0 [ 1007.700134][T16914] md: md0: recover done. [ 1007.779164][T16913] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1007.894623][T15900] Bluetooth: hci1: command 0x0406 tx timeout [ 1010.128314][T15900] Bluetooth: hci1: command 0x0406 tx timeout [ 1010.149048][T16923] md: recover of RAID array md0 [ 1010.149069][T16923] md: md0: recover done. [ 1010.265518][T16913] md: could not open device unknown-block(1,1). [ 1010.474092][T16928] netlink: 'syz.2.2524': attribute type 11 has an invalid length. [ 1010.503732][T16926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1010.516756][T16929] md: recover of RAID array md0 [ 1010.516797][T16929] md: md0: recover done. [ 1010.758350][T16932] md: recover of RAID array md0 [ 1010.758371][T16932] md: md0: recover done. [ 1011.008031][T16941] md: recover of RAID array md0 [ 1011.008084][T16941] md: md0: recover done. [ 1011.249450][T16947] md: recover of RAID array md0 [ 1011.249521][T16947] md: md0: recover done. [ 1011.309149][T16946] netlink: 'syz.8.2530': attribute type 11 has an invalid length. [ 1011.342666][T16946] netlink: 'syz.8.2530': attribute type 11 has an invalid length. [ 1011.423776][T16945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.535979][T16952] md: recover of RAID array md0 [ 1011.536016][T16952] md: md0: recover done. [ 1011.609832][T16949] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1011.665389][T16949] md: couldn't update array info. -22 [ 1011.694851][T16949] md: loop0 has zero or unknown size, marking faulty! [ 1011.694911][T16949] md: md_import_device returned -22 [ 1011.741715][T16956] md: recover of RAID array md0 [ 1011.741752][T16956] md: md0: recover done. [ 1011.827747][T16953] loop9: detected capacity change from 0 to 2048 [ 1012.155391][T16953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.079719][T16964] md: recover of RAID array md0 [ 1014.079775][T16964] md: md0: recover done. [ 1014.217317][T10088] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1014.369367][T10088] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1014.391701][T10088] usb 4-1: config index 0 descriptor too short (expected 65000, got 45) [ 1014.425828][T10088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.425854][T10088] usb 4-1: Product: syz [ 1014.425868][T10088] usb 4-1: Manufacturer: syz [ 1014.425881][T10088] usb 4-1: SerialNumber: syz [ 1014.490808][T16968] md: recover of RAID array md0 [ 1014.492561][T16968] md: md0: recover done. [ 1014.591518][T10117] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.876085][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 1015.168503][T10088] rtl8150 4-1:1.0: couldn't reset the device [ 1015.170873][T10088] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1015.278300][T10088] usb 4-1: USB disconnect, device number 8 [ 1015.496921][T16989] md: recover of RAID array md0 [ 1015.496960][T16989] md: md0: recover done. [ 1015.818539][T16996] md: recover of RAID array md0 [ 1015.818575][T16996] md: md0: recover done. [ 1015.903360][T16993] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1015.961250][T16993] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1015.986912][T16993] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1016.018185][T16993] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1016.122366][T17003] md: recover of RAID array md0 [ 1016.122402][T17003] md: md0: recover done. [ 1017.891994][T17007] md: recover of RAID array md0 [ 1017.892042][T17007] md: md0: recover done. [ 1018.119290][T17018] md: recover of RAID array md0 [ 1018.119328][T17018] md: md0: recover done. [ 1018.161769][T17014] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1018.250459][T17017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1018.347386][T17017] md: couldn't update array info. -22 [ 1018.365425][T17017] md: loop0 has zero or unknown size, marking faulty! [ 1018.365489][T17017] md: md_import_device returned -22 [ 1018.367572][T17022] md: recover of RAID array md0 [ 1018.367606][T17022] md: md0: recover done. [ 1018.405125][T17014] md: could not open device unknown-block(1,1). [ 1018.682345][T17025] md: recover of RAID array md0 [ 1018.682380][T17025] md: md0: recover done. [ 1020.910490][T17032] md: recover of RAID array md0 [ 1020.910554][T17032] md: md0: recover done. [ 1021.195626][T17040] md: recover of RAID array md0 [ 1021.195688][T17040] md: md0: recover done. [ 1021.240464][T17039] netlink: 'syz.3.2554': attribute type 11 has an invalid length. [ 1021.272574][T17039] netlink: 'syz.3.2554': attribute type 11 has an invalid length. [ 1021.351636][T17035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.438127][T17045] md: recover of RAID array md0 [ 1021.438163][T17045] md: md0: recover done. [ 1021.659600][T17047] md: recover of RAID array md0 [ 1021.659657][T17047] md: md0: recover done. [ 1021.847851][T10088] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1021.917170][T17051] md: recover of RAID array md0 [ 1021.918884][T17051] md: md0: recover done. [ 1021.986247][T17049] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1022.009447][T10088] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1022.024654][T10088] usb 2-1: config index 0 descriptor too short (expected 65000, got 45) [ 1022.050041][T10088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.050067][T10088] usb 2-1: Product: syz [ 1022.050080][T10088] usb 2-1: Manufacturer: syz [ 1022.050094][T10088] usb 2-1: SerialNumber: syz [ 1022.213148][T17054] md: recover of RAID array md0 [ 1022.213190][T17054] md: md0: recover done. [ 1022.405387][T17060] md: recover of RAID array md0 [ 1022.407231][T17060] md: md0: recover done. [ 1022.603703][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 1022.698009][T17066] md: recover of RAID array md0 [ 1022.698460][T17066] md: md0: recover done. [ 1022.792278][T10088] rtl8150 2-1:1.0: couldn't reset the device [ 1022.792564][T10088] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1022.909929][T10088] usb 2-1: USB disconnect, device number 2 [ 1023.047860][T17071] md: recover of RAID array md0 [ 1023.047897][T17071] md: md0: recover done. [ 1023.392125][T17076] md: recover of RAID array md0 [ 1023.393944][T17076] md: md0: recover done. [ 1023.819429][T17082] md: recover of RAID array md0 [ 1023.819493][T17082] md: md0: recover done. [ 1025.415231][T17086] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1025.476553][T17087] md: recover of RAID array md0 [ 1025.476586][T17087] md: md0: recover done. [ 1025.694869][T17086] md: could not open device unknown-block(1,1). [ 1025.715952][T17092] md: recover of RAID array md0 [ 1025.717796][T17092] md: md0: recover done. [ 1025.745644][T17090] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1025.850149][T17090] md: couldn't update array info. -22 [ 1025.931644][T17090] md: loop0 has zero or unknown size, marking faulty! [ 1025.931707][T17090] md: md_import_device returned -22 [ 1025.997760][T17098] md: recover of RAID array md0 [ 1025.997820][T17098] md: md0: recover done. [ 1026.289044][T17103] md: recover of RAID array md0 [ 1026.290939][T17103] md: md0: recover done. [ 1026.407919][T17101] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1026.502533][T17106] netlink: 'syz.2.2567': attribute type 11 has an invalid length. [ 1026.553962][T17106] netlink: 'syz.2.2567': attribute type 11 has an invalid length. [ 1026.576731][T17101] md: couldn't update array info. -22 [ 1026.577649][T17109] md: recover of RAID array md0 [ 1026.579428][T17109] md: md0: recover done. [ 1026.625198][T17101] md: loop0 has zero or unknown size, marking faulty! [ 1026.625283][T17101] md: md_import_device returned -22 [ 1026.625633][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 1026.664583][T17104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.902677][T17115] md: recover of RAID array md0 [ 1026.902711][T17115] md: md0: recover done. [ 1026.993554][T17113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1027.185795][T17113] md: couldn't update array info. -22 [ 1027.218387][T17122] md: recover of RAID array md0 [ 1027.218410][T17122] md: md0: recover done. [ 1027.223761][T17116] printk: console [ttyS0] disabled [ 1027.799121][T17116] printk: console [ttyS0] enabled [ 1028.040827][T17132] printk: console [ttyS0] disabled [ 1028.061954][T17143] md: recover of RAID array md0 [ 1028.062015][T17143] md: md0: recover done. [ 1037.732298][T17331] md: recover of RAID array md0 [ 1037.732333][T17331] md: md0: recover done. [ 1037.740453][ T12] nvmet: Created nvm controller 71 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:21e0a11c-9495-4ab3-b9a3-a29ab3776d12. [ 1037.778264][T17310] printk: console [ttyS0] enabled [ 1037.826186][T17304] nvme nvme70: creating 1 I/O queues. [ 1037.863320][T17330] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1037.985876][T17304] nvme nvme70: new ctrl: "testsubsys" [ 1038.126171][T17335] md: recover of RAID array md0 [ 1038.126205][T17335] md: md0: recover done. [ 1038.142187][T17291] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1038.435567][T17340] md: recover of RAID array md0 [ 1038.435598][T17340] md: md0: recover done. [ 1038.707554][T17344] md: recover of RAID array md0 [ 1038.707590][T17344] md: md0: recover done. [ 1038.938482][T17353] md: recover of RAID array md0 [ 1038.939509][T17353] md: md0: recover done. [ 1038.968357][T17348] serial 00:02: in use; can't configure [ 1038.985500][T17348] serial 00:02: in use; can't configure [ 1038.990769][T17348] serial 00:02: in use; can't configure [ 1038.991057][T17348] serial 00:02: in use; can't configure [ 1039.033604][T17350] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1039.052224][T17348] serial 00:03: in use; can't configure [ 1039.052486][T17348] serial 00:03: in use; can't configure [ 1039.052859][T17342] printk: console [ttyS0] disabled [ 1039.549666][T17348] printk: console [ttyS0] enabled [ 1039.679618][T17367] md: recover of RAID array md0 [ 1039.679683][T17367] md: md0: recover done. [ 1040.046278][T17373] md: recover of RAID array md0 [ 1040.046313][T17373] md: md0: recover done. [ 1040.097223][T17358] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1040.308833][T17376] netlink: 'syz.1.2616': attribute type 11 has an invalid length. [ 1040.314300][T17375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.389802][T17380] md: recover of RAID array md0 [ 1040.389823][T17380] md: md0: recover done. [ 1040.563277][T17381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1040.668210][T17383] md: recover of RAID array md0 [ 1040.668733][T17383] md: md0: recover done. [ 1040.777300][T17381] md: could not open device unknown-block(1,0). [ 1040.868235][T17390] md: recover of RAID array md0 [ 1040.868267][T17390] md: md0: recover done. [ 1040.936376][T17381] md: could not open device unknown-block(1,1). [ 1040.989923][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1041.072904][T17395] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1041.116570][T17396] md: recover of RAID array md0 [ 1041.118812][T17396] md: md0: recover done. [ 1041.226712][T17395] md: couldn't update array info. -22 [ 1041.296261][T17395] md: loop0 has zero or unknown size, marking faulty! [ 1041.296344][T17395] md: md_import_device returned -22 [ 1041.411692][T17401] md: recover of RAID array md0 [ 1041.411729][T17401] md: md0: recover done. [ 1041.555469][T17402] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1041.676040][T17405] se_dev->se_dev_ptr already set for storage object [ 1041.694732][T17406] md: recover of RAID array md0 [ 1041.694763][T17406] md: md0: recover done. [ 1041.942247][T17411] md: recover of RAID array md0 [ 1041.942282][T17411] md: md0: recover done. [ 1042.136475][T17418] md: recover of RAID array md0 [ 1042.136984][T17415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1042.137131][T17418] md: md0: recover done. [ 1042.265806][T17415] md: could not open device unknown-block(1,0). [ 1042.305264][T17415] md: could not open device unknown-block(1,1). [ 1042.335934][T17422] md: recover of RAID array md0 [ 1042.335986][T17422] md: md0: recover done. [ 1042.532583][T17423] md: recover of RAID array md0 [ 1042.532638][T17423] md: md0: recover done. [ 1042.582347][T17421] o2cb: Local heartbeat has not been started. [ 1042.582364][T17421] o2cb: Cluster check failed. Fix errors before retrying. [ 1042.582384][T17421] (syz.1.2628,17421,0):user_dlm_register:674 ERROR: status = -22 [ 1042.582428][T17421] (syz.1.2628,17421,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "hb0" [ 1042.755136][T17427] md: recover of RAID array md0 [ 1042.755224][T17427] md: md0: recover done. [ 1042.758886][T17425] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1042.825173][T17425] md: couldn't update array info. -22 [ 1042.864699][T17425] md: loop0 has zero or unknown size, marking faulty! [ 1042.864763][T17425] md: md_import_device returned -22 [ 1042.903415][T17430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1042.972543][T17431] md: recover of RAID array md0 [ 1042.972576][T17431] md: md0: recover done. [ 1043.100693][T17430] md: could not open device unknown-block(1,0). [ 1043.192310][T17432] md: recover of RAID array md0 [ 1043.192345][T17432] md: md0: recover done. [ 1043.245163][T17430] md: could not open device unknown-block(1,1). [ 1043.397896][T10303] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1043.414716][T17434] md: recover of RAID array md0 [ 1043.414813][T17434] md: md0: recover done. [ 1043.550908][T10303] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1043.574114][T10303] usb 3-1: config index 0 descriptor too short (expected 65000, got 45) [ 1043.596300][T17435] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1043.619096][T10303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.619120][T10303] usb 3-1: Product: syz [ 1043.619134][T10303] usb 3-1: Manufacturer: syz [ 1043.619147][T10303] usb 3-1: SerialNumber: syz [ 1043.710701][T17436] md: recover of RAID array md0 [ 1043.710735][T17436] md: md0: recover done. [ 1043.807719][T17435] md: could not open device unknown-block(1,0). [ 1043.856644][T17440] md: recover of RAID array md0 [ 1043.856738][T17440] md: md0: recover done. [ 1043.935179][T17435] md: could not open device unknown-block(1,1). [ 1044.371686][T17448] md: recover of RAID array md0 [ 1044.371835][T17448] md: md0: recover done. [ 1044.420983][T17446] netlink: 'syz.0.2635': attribute type 11 has an invalid length. [ 1044.451784][T17446] netlink: 'syz.0.2635': attribute type 11 has an invalid length. [ 1044.501220][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'. [ 1044.539436][T17445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.611842][T17451] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1044.672123][T17453] md: recover of RAID array md0 [ 1044.672159][T17453] md: md0: recover done. [ 1044.706385][T10303] rtl8150 3-1:1.0: couldn't reset the device [ 1044.740888][T10303] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1044.814970][T10303] usb 3-1: USB disconnect, device number 6 [ 1044.875387][T17451] md: could not open device unknown-block(1,0). [ 1044.936580][T17455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1044.937230][T17458] md: recover of RAID array md0 [ 1044.937939][T17458] md: md0: recover done. [ 1045.005373][T17451] md: could not open device unknown-block(1,1). [ 1045.108526][T17455] md: could not open device unknown-block(1,0). [ 1045.177662][T17466] md: recover of RAID array md0 [ 1045.177786][T17466] md: md0: recover done. [ 1045.212652][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 1045.255036][T17455] md: could not open device unknown-block(1,1). [ 1045.471619][T17469] md: recover of RAID array md0 [ 1045.471656][T17469] md: md0: recover done. [ 1045.770565][T17475] md: recover of RAID array md0 [ 1045.770597][T17475] md: md0: recover done. [ 1045.922454][T17472] loop1: detected capacity change from 0 to 2048 [ 1048.172237][T17482] md: recover of RAID array md0 [ 1048.172366][T17482] md: md0: recover done. [ 1048.301001][T17481] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1048.378338][T17472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1048.435021][T17487] md: recover of RAID array md0 [ 1048.435410][T17487] md: md0: recover done. [ 1048.585172][T17489] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1048.669979][T17491] md: recover of RAID array md0 [ 1048.670005][T17491] md: md0: recover done. [ 1048.721206][T17489] md: couldn't update array info. -22 [ 1048.732095][T11431] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.875786][T17492] md: loop0 has zero or unknown size, marking faulty! [ 1048.875845][T17492] md: md_import_device returned -22 [ 1048.951371][T17494] md: recover of RAID array md0 [ 1048.951655][T17494] md: md0: recover done. [ 1049.087266][T17495] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1049.226219][T17500] md: recover of RAID array md0 [ 1049.226274][T17500] md: md0: recover done. [ 1049.332312][T17498] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1049.335075][T17495] md: could not open device unknown-block(1,0). [ 1049.454767][T17495] md: could not open device unknown-block(1,1). [ 1049.476921][T17503] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1049.494255][T17506] md: recover of RAID array md0 [ 1049.494290][T17506] md: md0: recover done. [ 1049.506111][T17504] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1049.629376][T17504] md: could not open device unknown-block(1,0). [ 1049.654565][T17503] md: couldn't update array info. -22 [ 1049.671723][T17503] md: loop0 has zero or unknown size, marking faulty! [ 1049.671804][T17503] md: md_import_device returned -22 [ 1049.673491][T17508] md: recover of RAID array md0 [ 1049.673557][T17508] md: md0: recover done. [ 1049.795124][T17504] md: could not open device unknown-block(1,1). [ 1049.895688][T17510] netlink: 'syz.3.2651': attribute type 11 has an invalid length. [ 1049.896676][T17511] md: recover of RAID array md0 [ 1049.896746][T17511] md: md0: recover done. [ 1049.928549][T17510] netlink: 'syz.3.2651': attribute type 11 has an invalid length. [ 1049.998686][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 1050.015934][T17509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1050.155076][T17514] md: recover of RAID array md0 [ 1050.155108][T17514] md: md0: recover done. [ 1050.387717][T17518] md: recover of RAID array md0 [ 1050.388967][T17518] md: md0: recover done. [ 1050.519592][T15936] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1050.578684][T17526] md: recover of RAID array md0 [ 1050.578718][T17526] md: md0: recover done. [ 1050.580814][T17523] printk: console [ttyS0] disabled [ 1051.091928][T17523] printk: console [ttyS0] enabled [ 1051.119190][T10303] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1051.122185][T10303] usb 3-1: config index 0 descriptor too short (expected 65000, got 45) [ 1051.145070][T10303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.145093][T10303] usb 3-1: Product: syz [ 1051.145106][T10303] usb 3-1: Manufacturer: syz [ 1051.145143][T10303] usb 3-1: SerialNumber: syz [ 1051.245543][T17534] md: recover of RAID array md0 [ 1051.245565][T17534] md: md0: recover done. [ 1051.465551][T17537] md: recover of RAID array md0 [ 1051.465578][T17537] md: md0: recover done. [ 1051.657535][T17543] md: recover of RAID array md0 [ 1051.658386][T17543] md: md0: recover done. [ 1051.711671][T17541] md: couldn't update array info. -22 [ 1051.753212][T17528] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1051.772389][T17536] md: loop0 has zero or unknown size, marking faulty! [ 1051.772451][T17536] md: md_import_device returned -22 [ 1051.860323][T17548] serial 00:02: in use; can't configure [ 1051.891121][T17548] serial 00:02: in use; can't configure [ 1051.909845][T17548] serial 00:02: in use; can't configure [ 1051.922887][T17548] serial 00:02: in use; can't configure [ 1051.942993][T17548] serial 00:03: in use; can't configure [ 1051.966347][T17548] serial 00:03: in use; can't configure [ 1051.967784][T17551] md: recover of RAID array md0 [ 1051.967872][T17551] md: md0: recover done. [ 1051.970742][T10303] rtl8150 3-1:1.0: couldn't reset the device [ 1051.971147][T10303] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1052.018843][T17548] serial 00:03: in use; can't configure [ 1052.059806][T17542] printk: console [ttyS0] disabled [ 1053.629651][T17577] printk: console [ttyS0] enabled [ 1053.676974][T17587] netlink: 'syz.9.2668': attribute type 11 has an invalid length. [ 1053.727574][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2668'. [ 1053.731680][T17585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1053.797745][T17588] md: recover of RAID array md0 [ 1053.797767][T17588] md: md0: recover done. [ 1053.817742][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.817799][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.056362][T17592] md: recover of RAID array md0 [ 1054.056418][T17592] md: md0: recover done. [ 1054.243825][T17595] netlink: 'syz.9.2671': attribute type 1 has an invalid length. [ 1054.243844][T17595] netlink: 'syz.9.2671': attribute type 3 has an invalid length. [ 1054.261253][T17595] netlink: 'syz.9.2671': attribute type 3 has an invalid length. [ 1054.270489][T17595] netlink: 'syz.9.2671': attribute type 3 has an invalid length. [ 1054.271155][T17595] netlink: 'syz.9.2671': attribute type 1 has an invalid length. [ 1054.295520][T17598] md: recover of RAID array md0 [ 1054.295617][T17598] md: md0: recover done. [ 1054.329049][T17584] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1054.370217][T17599] serial 00:02: in use; can't configure [ 1054.386299][T17599] serial 00:02: in use; can't configure [ 1054.389235][T17599] serial 00:02: in use; can't configure [ 1054.389833][T17599] serial 00:02: in use; can't configure [ 1054.431617][T17599] serial 00:03: in use; can't configure [ 1054.433557][T17599] serial 00:03: in use; can't configure [ 1054.600938][T17601] md: recover of RAID array md0 [ 1054.601013][T17601] md: md0: recover done. [ 1054.630360][T17593] printk: console [ttyS0] disabled [ 1055.181311][T17599] printk: console [ttyS0] enabled [ 1055.273634][T17617] serial 00:02: in use; can't configure [ 1055.286721][T17617] serial 00:02: in use; can't configure [ 1055.288940][T17617] serial 00:02: in use; can't configure [ 1055.289215][T17617] serial 00:02: in use; can't configure [ 1055.312509][T17619] md: recover of RAID array md0 [ 1055.312587][T17619] md: md0: recover done. [ 1055.329972][T15900] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1055.330975][T17617] serial 00:03: in use; can't configure [ 1055.332303][T15900] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:202' [ 1055.332346][T15900] CPU: 0 UID: 0 PID: 15900 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1055.332368][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1055.332381][T15900] Workqueue: hci1 hci_rx_work [ 1055.332405][T15900] Call Trace: [ 1055.332414][T15900] [ 1055.332422][T15900] dump_stack_lvl+0xe8/0x150 [ 1055.332454][T15900] sysfs_create_dir_ns+0x271/0x2a0 [ 1055.332492][T15900] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1055.332525][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.332548][T15900] ? do_raw_spin_unlock+0xf5/0x200 [ 1055.332580][T15900] kobject_add_internal+0x622/0xcd0 [ 1055.332622][T15900] kobject_add+0x163/0x240 [ 1055.332649][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.332678][T15900] ? __pfx_kobject_add+0x10/0x10 [ 1055.332709][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.332733][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.332759][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.332782][T15900] ? get_device_parent+0x366/0x3a0 [ 1055.332808][T15900] device_add+0x3fa/0xb80 [ 1055.332832][T15900] hci_conn_add_sysfs+0xd5/0x210 [ 1055.332868][T15900] le_conn_complete_evt+0xfe3/0x16d0 [ 1055.332897][T15900] ? le_conn_complete_evt+0x1b1/0x16d0 [ 1055.332924][T15900] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1055.332951][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.332974][T15900] ? __mutex_unlock_slowpath+0x731/0x900 [ 1055.333003][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.333026][T15900] ? skb_pull_data+0xf0/0x200 [ 1055.333062][T15900] hci_le_conn_complete_evt+0x187/0x470 [ 1055.333094][T15900] hci_event_packet+0x67a/0xf10 [ 1055.333121][T15900] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1055.333144][T15900] ? __pfx_hci_event_packet+0x10/0x10 [ 1055.333171][T15900] ? audit_filter_rules+0x45f0/0x5d10 [ 1055.333200][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.333222][T15900] ? hci_send_to_monitor+0xe2/0x590 [ 1055.333253][T15900] hci_rx_work+0x3ee/0x1020 [ 1055.333281][T15900] ? process_scheduled_works+0x97a/0x1630 [ 1055.333309][T15900] process_scheduled_works+0xc3d/0x1630 [ 1055.333336][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.333386][T15900] ? __pfx_process_scheduled_works+0x10/0x10 [ 1055.333418][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.333441][T15900] ? assign_work+0x3cf/0x5d0 [ 1055.333472][T15900] worker_thread+0xa47/0xfb0 [ 1055.333501][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.333533][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.333556][T15900] ? __kthread_parkme+0x71/0x1f0 [ 1055.333594][T15900] kthread+0x38b/0x480 [ 1055.333614][T15900] ? __pfx_worker_thread+0x10/0x10 [ 1055.333639][T15900] ? __pfx_kthread+0x10/0x10 [ 1055.333660][T15900] ret_from_fork+0x514/0xb70 [ 1055.333683][T15900] ? __pfx_ret_from_fork+0x10/0x10 [ 1055.333706][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.333728][T15900] ? __switch_to+0xc89/0x1420 [ 1055.333758][T15900] ? __pfx_kthread+0x10/0x10 [ 1055.333780][T15900] ret_from_fork_asm+0x1a/0x30 [ 1055.333825][T15900] [ 1055.333890][T15900] kobject: kobject_add_internal failed for hci1:202 with -EEXIST, don't try to register things with the same name in the same directory. [ 1055.333923][T15900] Bluetooth: hci1: failed to register connection device [ 1055.795641][T17612] printk: console [ttyS0] disabled [ 1056.525868][T17634] md: couldn't update array info. -22 [ 1056.536675][T17622] printk: console [ttyS0] enabled [ 1056.591491][T17634] md: could not open device unknown-block(1,0). [ 1056.591566][T17634] md: md_import_device returned -16 [ 1056.591748][T17637] md: recover of RAID array md0 [ 1056.591778][T17637] md: md0: recover done. [ 1056.638823][T17636] md: could not open device unknown-block(1,1). [ 1056.638878][T17636] md: md_import_device returned -16 [ 1056.750313][T15900] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1056.750890][T15900] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1056.772956][T17640] md: recover of RAID array md0 [ 1056.773031][T17640] md: md0: recover done. [ 1056.928097][T17641] md: recover of RAID array md0 [ 1056.928134][T17641] md: md0: recover done. [ 1057.055990][T17645] md: recover of RAID array md0 [ 1057.056026][T17645] md: md0: recover done. [ 1057.085418][T17643] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1057.147603][T17646] printk: console [ttyS0] disabled [ 1057.659082][T17646] printk: console [ttyS0] enabled [ 1057.659296][T17654] md: recover of RAID array md0 [ 1057.659328][T17654] md: md0: recover done. [ 1057.811223][T17657] netlink: 'syz.0.2682': attribute type 11 has an invalid length. [ 1057.868122][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'. [ 1057.872286][T17657] netlink: 'syz.0.2682': attribute type 1 has an invalid length. [ 1057.872821][T17656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.956890][T17659] netlink: 'syz.1.2683': attribute type 11 has an invalid length. [ 1057.981379][T17661] md: recover of RAID array md0 [ 1057.981414][T17661] md: md0: recover done. [ 1058.038189][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 1058.071196][T17658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.120471][T17647] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1058.166852][T17662] md: recover of RAID array md0 [ 1058.166908][T17662] md: md0: recover done. [ 1058.355262][T17665] md: recover of RAID array md0 [ 1058.355326][T17665] md: md0: recover done. [ 1058.438043][T17664] printk: console [ttyS0] disabled [ 1064.096866][T17759] printk: console [ttyS0] enabled [ 1064.262369][T17770] md: recover of RAID array md0 [ 1064.262392][T17770] md: md0: recover done. [ 1064.413203][T17763] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1064.478454][T17773] md: recover of RAID array md0 [ 1064.478475][T17773] md: md0: recover done. [ 1064.650171][T17775] md: recover of RAID array md0 [ 1064.650193][T17775] md: md0: recover done. [ 1064.728109][T15900] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1064.756279][T15900] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:202' [ 1064.756301][T15900] CPU: 0 UID: 0 PID: 15900 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1064.756323][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1064.756336][T15900] Workqueue: hci1 hci_rx_work [ 1064.756360][T15900] Call Trace: [ 1064.756371][T15900] [ 1064.756380][T15900] dump_stack_lvl+0xe8/0x150 [ 1064.756412][T15900] sysfs_create_dir_ns+0x271/0x2a0 [ 1064.756446][T15900] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1064.756479][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.756502][T15900] ? do_raw_spin_unlock+0xf5/0x200 [ 1064.756535][T15900] kobject_add_internal+0x622/0xcd0 [ 1064.756572][T15900] kobject_add+0x163/0x240 [ 1064.756598][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.756627][T15900] ? __pfx_kobject_add+0x10/0x10 [ 1064.756653][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.756683][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.756709][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.756731][T15900] ? get_device_parent+0x366/0x3a0 [ 1064.756758][T15900] device_add+0x3fa/0xb80 [ 1064.756782][T15900] hci_conn_add_sysfs+0xd5/0x210 [ 1064.756817][T15900] le_conn_complete_evt+0xfe3/0x16d0 [ 1064.756847][T15900] ? le_conn_complete_evt+0x1b1/0x16d0 [ 1064.756874][T15900] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1064.756901][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.756924][T15900] ? __mutex_unlock_slowpath+0x731/0x900 [ 1064.756954][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.756976][T15900] ? skb_pull_data+0xf0/0x200 [ 1064.757012][T15900] hci_le_conn_complete_evt+0x187/0x470 [ 1064.757044][T15900] hci_event_packet+0x67a/0xf10 [ 1064.757072][T15900] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1064.757095][T15900] ? __pfx_hci_event_packet+0x10/0x10 [ 1064.757121][T15900] ? audit_filter_rules+0x45f0/0x5d10 [ 1064.757150][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.757173][T15900] ? hci_send_to_monitor+0xe2/0x590 [ 1064.757204][T15900] hci_rx_work+0x3ee/0x1020 [ 1064.757231][T15900] ? process_scheduled_works+0x97a/0x1630 [ 1064.757259][T15900] process_scheduled_works+0xc3d/0x1630 [ 1064.757286][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.757336][T15900] ? __pfx_process_scheduled_works+0x10/0x10 [ 1064.757368][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.757391][T15900] ? assign_work+0x3cf/0x5d0 [ 1064.757422][T15900] worker_thread+0xa47/0xfb0 [ 1064.757451][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.757482][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.757505][T15900] ? __kthread_parkme+0x71/0x1f0 [ 1064.757543][T15900] kthread+0x38b/0x480 [ 1064.757563][T15900] ? __pfx_worker_thread+0x10/0x10 [ 1064.757589][T15900] ? __pfx_kthread+0x10/0x10 [ 1064.757610][T15900] ret_from_fork+0x514/0xb70 [ 1064.757632][T15900] ? __pfx_ret_from_fork+0x10/0x10 [ 1064.757651][T15900] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.757674][T15900] ? __switch_to+0xc89/0x1420 [ 1064.757708][T15900] ? __pfx_kthread+0x10/0x10 [ 1064.757729][T15900] ret_from_fork_asm+0x1a/0x30 [ 1064.757775][T15900] [ 1064.757827][T15900] kobject: kobject_add_internal failed for hci1:202 with -EEXIST, don't try to register things with the same name in the same directory. [ 1064.757856][T15900] Bluetooth: hci1: failed to register connection device [ 1065.169069][T17778] md: recover of RAID array md0 [ 1065.169097][T17778] md: md0: recover done. [ 1065.174969][T15936] Bluetooth: hci0: command 0x0406 tx timeout [ 1065.340687][T17782] md: recover of RAID array md0 [ 1065.340710][T17782] md: md0: recover done. [ 1065.354537][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1065.526564][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1065.529662][ T9] usb 2-1: config index 0 descriptor too short (expected 65000, got 45) [ 1065.534362][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.561183][ T9] usb 2-1: Product: syz [ 1065.561226][ T9] usb 2-1: Manufacturer: syz [ 1065.561240][ T9] usb 2-1: SerialNumber: syz [ 1065.579381][T17785] md: recover of RAID array md0 [ 1065.579403][T17785] md: md0: recover done. [ 1065.761129][T17788] md: recover of RAID array md0 [ 1065.761153][T17788] md: md0: recover done. [ 1065.930637][T17789] md: recover of RAID array md0 [ 1065.930661][T17789] md: md0: recover done. [ 1066.117928][ T9] rtl8150 2-1:1.0: couldn't reset the device [ 1066.118212][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1066.149992][T17794] md: recover of RAID array md0 [ 1066.150015][T17794] md: md0: recover done. [ 1066.172372][ T9] usb 2-1: USB disconnect, device number 3 [ 1066.173405][T17791] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1066.265191][T17791] md: couldn't update array info. -22 [ 1066.275466][T17791] md: loop0 has zero or unknown size, marking faulty! [ 1066.275549][T17791] md: md_import_device returned -22 [ 1066.377095][T17796] md: recover of RAID array md0 [ 1066.377118][T17796] md: md0: recover done. [ 1066.603002][T17798] md: recover of RAID array md0 [ 1066.603027][T17798] md: md0: recover done. [ 1066.776388][T11366] Bluetooth: hci1: command 0x0406 tx timeout [ 1066.841008][T17804] md: recover of RAID array md0 [ 1066.841052][T17804] md: md0: recover done. [ 1067.110851][T17810] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1067.169359][T17811] md: recover of RAID array md0 [ 1067.170065][T17811] md: md0: recover done. [ 1067.236907][T17801] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 1067.236932][T17801] device-mapper: ioctl: error adding target to table [ 1067.285379][T17810] md: could not open device unknown-block(1,0). [ 1067.358408][T17810] md: could not open device unknown-block(1,1). [ 1067.362267][T17814] md: recover of RAID array md0 [ 1067.362298][T17814] md: md0: recover done. [ 1067.550204][T17818] md: recover of RAID array md0 [ 1067.550762][T17818] md: md0: recover done. [ 1068.067656][T17823] md: recover of RAID array md0 [ 1068.067690][T17823] md: md0: recover done. [ 1068.106133][T17822] bridge0: port 3(syz_tun) entered blocking state [ 1068.106225][T17822] bridge0: port 3(syz_tun) entered disabled state [ 1068.106423][T17822] syz_tun: entered allmulticast mode [ 1068.139091][T17822] syz_tun: entered promiscuous mode [ 1068.146641][T17822] bridge0: port 3(syz_tun) entered blocking state [ 1068.146752][T17822] bridge0: port 3(syz_tun) entered forwarding state [ 1068.346616][T17830] md: recover of RAID array md0 [ 1068.346652][T17830] md: md0: recover done. [ 1068.391821][T17828] netlink: 'syz.0.2723': attribute type 3 has an invalid length. [ 1068.414182][T17828] netlink: 'syz.0.2723': attribute type 3 has an invalid length. [ 1068.435569][T17829] loop9: detected capacity change from 0 to 256 [ 1068.474809][T17828] netlink: 'syz.0.2723': attribute type 1 has an invalid length. [ 1068.694033][T17832] netlink: 'syz.1.2726': attribute type 11 has an invalid length. [ 1068.694862][T17831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.733662][T17833] md: recover of RAID array md0 [ 1068.733697][T17833] md: md0: recover done. [ 1068.854853][T11366] Bluetooth: hci1: command 0x0406 tx timeout [ 1069.069820][T17839] md: recover of RAID array md0 [ 1069.069862][T17839] md: md0: recover done. [ 1069.120990][ T5623] process 7859 (syz.3.500) no longer affine to cpu1 [ 1069.122554][ T5623] process 8480 (syz.3.687) no longer affine to cpu1 [ 1069.435064][T17844] md: recover of RAID array md0 [ 1069.435153][T17844] md: md0: recover done. [ 1069.618033][T11366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1069.623995][T11366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1069.642271][T11366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1069.660191][T11366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1069.661404][T11366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1069.727694][T17847] md: recover of RAID array md0 [ 1069.727726][T17847] md: md0: recover done. [ 1069.945619][T17851] md: recover of RAID array md0 [ 1069.945652][T17851] md: md0: recover done. [ 1070.145462][T10303] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1070.153055][T15900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1070.165614][T15900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1070.175334][T15900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1070.195548][T15900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1070.195755][T17854] md: recover of RAID array md0 [ 1070.195806][T17854] md: md0: recover done. [ 1070.232201][T15900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1070.348667][T10303] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1070.367015][T10303] usb 2-1: config index 0 descriptor too short (expected 65000, got 45) [ 1070.390354][T10303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.390376][T10303] usb 2-1: Product: syz [ 1070.390390][T10303] usb 2-1: Manufacturer: syz [ 1070.390404][T10303] usb 2-1: SerialNumber: syz [ 1070.509308][T17860] md: recover of RAID array md0 [ 1070.509343][T17860] md: md0: recover done. [ 1070.889509][T10303] rtl8150 2-1:1.0: couldn't reset the device [ 1070.889824][T10303] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1070.941193][T10303] usb 2-1: USB disconnect, device number 4 [ 1071.116907][T17870] md: recover of RAID array md0 [ 1071.116939][T17870] md: md0: recover done. [ 1071.286932][T17873] md: recover of RAID array md0 [ 1071.286986][T17873] md: md0: recover done. [ 1071.490886][T17862] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 1071.490911][T17862] device-mapper: ioctl: error adding target to table [ 1071.511347][T17877] md: recover of RAID array md0 [ 1071.511380][T17877] md: md0: recover done. [ 1071.610517][T17878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1071.732090][T17881] md: recover of RAID array md0 [ 1071.732124][T17881] md: md0: recover done. [ 1071.735945][T11366] Bluetooth: hci3: command tx timeout [ 1071.743237][T17878] md: could not open device unknown-block(1,0). [ 1071.866076][T17878] md: could not open device unknown-block(1,1). [ 1072.016606][T17887] md: recover of RAID array md0 [ 1072.016696][T17887] md: md0: recover done. [ 1072.402787][T11366] Bluetooth: hci5: command tx timeout [ 1072.494731][T17888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1072.588340][T17889] md: recover of RAID array md0 [ 1072.588374][T17889] md: md0: recover done. [ 1072.704862][T17888] md: could not open device unknown-block(1,0). [ 1072.815157][T17895] md: recover of RAID array md0 [ 1072.815189][T17895] md: md0: recover done. [ 1073.017172][T17901] md: recover of RAID array md0 [ 1073.017204][T17901] md: md0: recover done. [ 1073.058225][T17900] netlink: 'syz.0.2740': attribute type 3 has an invalid length. [ 1073.128408][T17900] netlink: 'syz.0.2740': attribute type 3 has an invalid length. [ 1073.133625][T17900] netlink: 'syz.0.2740': attribute type 1 has an invalid length. [ 1073.259164][T17902] md: recover of RAID array md0 [ 1073.259218][T17902] md: md0: recover done. [ 1073.455320][T17906] md: recover of RAID array md0 [ 1073.460752][T17906] md: md0: recover done. [ 1073.573010][T17904] bridge0: port 3(syz_tun) entered blocking state [ 1073.573099][T17904] bridge0: port 3(syz_tun) entered disabled state [ 1073.573248][T17904] syz_tun: entered allmulticast mode [ 1073.618186][T17904] syz_tun: entered promiscuous mode [ 1073.622313][T17904] bridge0: port 3(syz_tun) entered blocking state [ 1073.622418][T17904] bridge0: port 3(syz_tun) entered forwarding state [ 1073.685022][T17910] md: recover of RAID array md0 [ 1073.685158][T17910] md: md0: recover done. [ 1073.815078][T11366] Bluetooth: hci3: command tx timeout [ 1073.856034][T17913] md: recover of RAID array md0 [ 1073.856494][T17913] md: md0: recover done. [ 1074.072452][T17914] md: recover of RAID array md0 [ 1074.072487][T17914] md: md0: recover done. [ 1074.236735][T17921] md: recover of RAID array md0 [ 1074.236812][T17921] md: md0: recover done. [ 1074.376558][T17925] md: recover of RAID array md0 [ 1074.376635][T17925] md: md0: recover done. [ 1074.455688][T11366] Bluetooth: hci5: command tx timeout [ 1074.954147][T17930] md: recover of RAID array md0 [ 1074.954202][T17930] md: md0: recover done. [ 1075.148127][T17932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1075.166278][T17934] md: recover of RAID array md0 [ 1075.166309][T17934] md: md0: recover done. [ 1075.304941][T17932] md: could not open device unknown-block(1,0). [ 1075.365681][T17932] md: could not open device unknown-block(1,1). [ 1075.365984][T17938] md: recover of RAID array md0 [ 1075.366012][T17938] md: md0: recover done. [ 1075.438313][T17939] netlink: 'syz.0.2749': attribute type 11 has an invalid length. [ 1075.452764][T17937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.559153][T17944] md: recover of RAID array md0 [ 1075.559206][T17944] md: md0: recover done. [ 1075.790490][T17946] md: recover of RAID array md0 [ 1075.790524][T17946] md: md0: recover done. [ 1075.849643][T17936] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 1075.849667][T17936] device-mapper: ioctl: error adding target to table [ 1075.895294][T11366] Bluetooth: hci3: command tx timeout [ 1076.026801][T17949] loop1: detected capacity change from 0 to 256 [ 1076.081608][T17845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.081720][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.081868][T17845] bridge_slave_0: entered allmulticast mode [ 1076.114913][T17845] bridge_slave_0: entered promiscuous mode [ 1076.177045][T17952] md: recover of RAID array md0 [ 1076.177885][T17952] md: md0: recover done. [ 1076.227866][T11366] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1076.230516][T11366] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:202' [ 1076.230535][T11366] CPU: 0 UID: 0 PID: 11366 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1076.230557][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1076.230570][T11366] Workqueue: hci0 hci_rx_work [ 1076.230593][T11366] Call Trace: [ 1076.230601][T11366] [ 1076.230610][T11366] dump_stack_lvl+0xe8/0x150 [ 1076.230645][T11366] sysfs_create_dir_ns+0x271/0x2a0 [ 1076.230684][T11366] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1076.230717][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.230741][T11366] ? do_raw_spin_unlock+0xf5/0x200 [ 1076.230774][T11366] kobject_add_internal+0x622/0xcd0 [ 1076.230811][T11366] kobject_add+0x163/0x240 [ 1076.230838][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.230867][T11366] ? __pfx_kobject_add+0x10/0x10 [ 1076.230893][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.230917][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.230944][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.230966][T11366] ? get_device_parent+0x366/0x3a0 [ 1076.231000][T11366] device_add+0x3fa/0xb80 [ 1076.231023][T11366] hci_conn_add_sysfs+0xd5/0x210 [ 1076.231059][T11366] le_conn_complete_evt+0xfe3/0x16d0 [ 1076.231088][T11366] ? le_conn_complete_evt+0x1b1/0x16d0 [ 1076.231116][T11366] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1076.231143][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.231165][T11366] ? __mutex_unlock_slowpath+0x731/0x900 [ 1076.231194][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.231216][T11366] ? skb_pull_data+0xf0/0x200 [ 1076.231252][T11366] hci_le_conn_complete_evt+0x187/0x470 [ 1076.231284][T11366] hci_event_packet+0x67a/0xf10 [ 1076.231311][T11366] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1076.231335][T11366] ? __pfx_hci_event_packet+0x10/0x10 [ 1076.231360][T11366] ? audit_filter_rules+0x45f0/0x5d10 [ 1076.231389][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.231411][T11366] ? hci_send_to_monitor+0xe2/0x590 [ 1076.231466][T11366] hci_rx_work+0x3ee/0x1020 [ 1076.231494][T11366] ? process_scheduled_works+0x97a/0x1630 [ 1076.231521][T11366] process_scheduled_works+0xc3d/0x1630 [ 1076.231548][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.231599][T11366] ? __pfx_process_scheduled_works+0x10/0x10 [ 1076.231631][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.231653][T11366] ? assign_work+0x3cf/0x5d0 [ 1076.231692][T11366] worker_thread+0xa47/0xfb0 [ 1076.231722][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.231754][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.231776][T11366] ? __kthread_parkme+0x71/0x1f0 [ 1076.231814][T11366] kthread+0x38b/0x480 [ 1076.231834][T11366] ? __pfx_worker_thread+0x10/0x10 [ 1076.231860][T11366] ? __pfx_kthread+0x10/0x10 [ 1076.231881][T11366] ret_from_fork+0x514/0xb70 [ 1076.231903][T11366] ? __pfx_ret_from_fork+0x10/0x10 [ 1076.231922][T11366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.231944][T11366] ? __switch_to+0xc89/0x1420 [ 1076.231975][T11366] ? __pfx_kthread+0x10/0x10 [ 1076.231996][T11366] ret_from_fork_asm+0x1a/0x30 [ 1076.232042][T11366] [ 1076.232178][T11366] kobject: kobject_add_internal failed for hci0:202 with -EEXIST, don't try to register things with the same name in the same directory. [ 1076.232209][T11366] Bluetooth: hci0: failed to register connection device [ 1076.535162][T15900] Bluetooth: hci5: command tx timeout [ 1076.560838][T17845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.560929][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.561083][T17845] bridge_slave_1: entered allmulticast mode [ 1076.708706][T17845] bridge_slave_1: entered promiscuous mode [ 1076.741560][T17953] netlink: 'syz.9.2752': attribute type 3 has an invalid length. [ 1076.755253][T17953] netlink: 'syz.9.2752': attribute type 3 has an invalid length. [ 1076.773930][T17953] netlink: 'syz.9.2752': attribute type 1 has an invalid length. [ 1076.774107][T17955] md: recover of RAID array md0 [ 1076.774158][T17955] md: md0: recover done. [ 1076.936425][T17960] md: recover of RAID array md0 [ 1076.936456][T17960] md: md0: recover done. [ 1076.973110][T17959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1077.074048][T17845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.106786][T17965] md: recover of RAID array md0 [ 1077.106819][T17965] md: md0: recover done. [ 1077.154152][T17845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.276175][T17967] md: recover of RAID array md0 [ 1077.276235][T17967] md: md0: recover done. [ 1077.501730][T17971] md: recover of RAID array md0 [ 1077.501764][T17971] md: md0: recover done. [ 1077.677680][T17976] md: recover of RAID array md0 [ 1077.677719][T17976] md: md0: recover done. [ 1077.700393][T17845] team0: Port device team_slave_0 added [ 1077.727912][T17845] team0: Port device team_slave_1 added [ 1077.728100][T17853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.728207][T17853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.728342][T17853] bridge_slave_0: entered allmulticast mode [ 1077.771393][T17853] bridge_slave_0: entered promiscuous mode [ 1077.917899][T17980] md: recover of RAID array md0 [ 1077.917933][T17980] md: md0: recover done. [ 1078.578289][T11366] Bluetooth: hci3: command tx timeout [ 1078.578347][T11366] Bluetooth: hci0: command 0x0406 tx timeout [ 1078.614572][T15900] Bluetooth: hci5: command tx timeout [ 1078.681526][T17853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.681634][T17853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.681778][T17853] bridge_slave_1: entered allmulticast mode [ 1078.723710][T17853] bridge_slave_1: entered promiscuous mode [ 1078.879200][T17982] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1078.883371][T17984] md: recover of RAID array md0 [ 1078.883404][T17984] md: md0: recover done. [ 1078.941983][T17845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.942001][T17845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.942047][T17845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.072406][T17987] netlink: 'syz.9.2762': attribute type 11 has an invalid length. [ 1079.074372][T17985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.103602][T17989] md: recover of RAID array md0 [ 1079.103634][T17989] md: md0: recover done. [ 1079.159830][T17853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.162143][T17845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.162156][T17845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.162203][T17845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.275923][T17988] md: could not open device unknown-block(1,0). [ 1079.306173][T17853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.451541][T17992] md: recover of RAID array md0 [ 1079.451576][T17992] md: md0: recover done. [ 1079.611811][T17994] loop9: detected capacity change from 0 to 256 [ 1079.688273][T17995] md: recover of RAID array md0 [ 1079.688307][T17995] md: md0: recover done. [ 1079.819248][T17853] team0: Port device team_slave_0 added [ 1079.862091][T17853] team0: Port device team_slave_1 added [ 1079.968760][T17999] md: recover of RAID array md0 [ 1079.968794][T17999] md: md0: recover done. [ 1080.130191][T18000] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1080.183817][T17998] loop1: detected capacity change from 0 to 2048 [ 1080.193518][T18001] md: recover of RAID array md0 [ 1080.193549][T18001] md: md0: recover done. [ 1080.382128][T15900] Bluetooth: hci2: link tx timeout [ 1080.382790][T15900] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1080.406963][T18008] md: recover of RAID array md0 [ 1080.407068][T18008] md: md0: recover done. [ 1080.435222][T17998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.539760][T17845] hsr_slave_0: entered promiscuous mode [ 1080.540798][T17845] hsr_slave_1: entered promiscuous mode [ 1080.580712][T17853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.580749][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.580772][T17853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.618832][T11366] Bluetooth: hci0: command 0x0406 tx timeout [ 1080.727311][T18010] md: recover of RAID array md0 [ 1080.727371][T18010] md: md0: recover done. [ 1080.781083][T11431] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.831098][T17853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.831115][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.831162][T17853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.989529][T18013] md: recover of RAID array md0 [ 1080.989562][T18013] md: md0: recover done. [ 1081.228036][T18015] md: recover of RAID array md0 [ 1081.228094][T18015] md: md0: recover done. [ 1081.345637][T18016] se_dev->se_dev_ptr already set for storage object [ 1081.445312][T18023] md: recover of RAID array md0 [ 1081.445373][T18023] md: md0: recover done. [ 1081.539604][T18021] nvmet: disable ns before setting buffered_io value. [ 1081.565896][T18021] nvmet: the ns:1 is already enabled. [ 1081.600021][T18021] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1081.619432][T17853] hsr_slave_0: entered promiscuous mode [ 1081.632849][T17853] hsr_slave_1: entered promiscuous mode [ 1081.644871][T17853] debugfs: 'hsr0' already exists in 'hsr' [ 1081.644890][T17853] Cannot create hsr debugfs directory [ 1081.685939][T18030] md: recover of RAID array md0 [ 1081.685973][T18030] md: md0: recover done. [ 1081.802590][T18025] o2cb: Local heartbeat has not been started. [ 1081.802607][T18025] o2cb: Cluster check failed. Fix errors before retrying. [ 1081.802628][T18025] (syz.9.2771,18025,0):user_dlm_register:674 ERROR: status = -22 [ 1081.802649][T18025] (syz.9.2771,18025,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "hb0" [ 1081.934674][T18021] nvme_fabrics: missing parameter 'transport=%s' [ 1081.934691][T18021] nvme_fabrics: missing parameter 'nqn=%s' [ 1082.049742][T18031] md: recover of RAID array md0 [ 1082.049776][T18031] md: md0: recover done. [ 1082.236657][T18032] md: recover of RAID array md0 [ 1082.236718][T18032] md: md0: recover done. [ 1082.435312][T18036] md: recover of RAID array md0 [ 1082.436951][T18036] md: md0: recover done. [ 1082.440772][T18034] printk: console [ttyS0] disabled [ 1082.455664][T15936] Bluetooth: hci2: command 0x0406 tx timeout [ 1083.653114][T18034] printk: console [ttyS0] enabled [ 1083.730956][T18054] md: recover of RAID array md0 [ 1083.730990][T18054] md: md0: recover done. [ 1083.926086][T18048] nvme_fabrics: missing parameter 'transport=%s' [ 1083.926102][T18048] nvme_fabrics: missing parameter 'nqn=%s' [ 1084.081218][T18056] md: recover of RAID array md0 [ 1084.081239][T18056] md: md0: recover done. [ 1084.346420][T18058] md: recover of RAID array md0 [ 1084.346459][T18058] md: md0: recover done. [ 1084.520531][T18065] md: recover of RAID array md0 [ 1084.520568][T18065] md: md0: recover done. [ 1084.706555][T18068] md: recover of RAID array md0 [ 1084.706616][T18068] md: md0: recover done. [ 1084.775125][T15936] Bluetooth: hci2: command 0x0406 tx timeout [ 1084.965420][T18074] md: recover of RAID array md0 [ 1084.965441][T18074] md: md0: recover done. [ 1085.107483][T18064] bridge0: port 3(syz_tun) entered blocking state [ 1085.107594][T18064] bridge0: port 3(syz_tun) entered disabled state [ 1085.107768][T18064] syz_tun: entered allmulticast mode [ 1085.128314][T18076] md: recover of RAID array md0 [ 1085.140909][T18076] md: md0: recover done. [ 1085.171724][T18064] syz_tun: entered promiscuous mode [ 1085.172332][T18064] bridge0: port 3(syz_tun) entered blocking state [ 1085.172435][T18064] bridge0: port 3(syz_tun) entered forwarding state [ 1085.355367][T18078] md: recover of RAID array md0 [ 1085.355398][T18078] md: md0: recover done. [ 1085.660441][T18084] md: recover of RAID array md0 [ 1085.660477][T18084] md: md0: recover done. [ 1085.859979][T18091] md: recover of RAID array md0 [ 1085.860013][T18091] md: md0: recover done. [ 1085.864134][T15936] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1086.758440][T18097] md: recover of RAID array md0 [ 1086.758493][T18097] md: md0: recover done. [ 1086.855724][T15936] Bluetooth: hci2: command 0x0406 tx timeout [ 1086.938186][T18104] md: recover of RAID array md0 [ 1086.938240][T18104] md: md0: recover done. [ 1087.129482][T18106] md: recover of RAID array md0 [ 1087.129514][T18106] md: md0: recover done. [ 1087.287535][T18111] md: recover of RAID array md0 [ 1087.287569][T18111] md: md0: recover done. [ 1087.542539][T18115] md: recover of RAID array md0 [ 1087.542574][T18115] md: md0: recover done. [ 1087.838459][T18118] md: recover of RAID array md0 [ 1087.838494][T18118] md: md0: recover done. [ 1088.047075][T18121] md: recover of RAID array md0 [ 1088.047111][T18121] md: md0: recover done. [ 1088.226714][T18128] md: recover of RAID array md0 [ 1088.226748][T18128] md: md0: recover done. [ 1088.366451][T18132] md: recover of RAID array md0 [ 1088.366484][T18132] md: md0: recover done. [ 1088.546533][T18138] md: recover of RAID array md0 [ 1088.546568][T18138] md: md0: recover done. [ 1088.716102][T18139] md: recover of RAID array md0 [ 1088.716135][T18139] md: md0: recover done. [ 1089.024813][T18144] md: recover of RAID array md0 [ 1089.024852][T18144] md: md0: recover done. [ 1089.197164][T18145] printk: console [ttyS0] disabled [ 1089.717770][T18145] printk: console [ttyS0] enabled [ 1089.805650][T18160] md: recover of RAID array md0 [ 1089.805683][T18160] md: md0: recover done. [ 1089.879950][T18159] serial 00:02: in use; can't configure [ 1089.883220][T18159] serial 00:02: in use; can't configure [ 1089.891243][T10088] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1089.911775][T18159] serial 00:02: in use; can't configure [ 1089.929425][T18159] serial 00:02: in use; can't configure [ 1090.038275][T10088] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1090.039598][T18162] md: recover of RAID array md0 [ 1090.039628][T18162] md: md0: recover done. [ 1090.043335][T10088] usb 10-1: config index 0 descriptor too short (expected 65000, got 45) [ 1090.083182][T10088] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.083229][T10088] usb 10-1: Product: syz [ 1090.083243][T10088] usb 10-1: Manufacturer: syz [ 1090.083256][T10088] usb 10-1: SerialNumber: syz [ 1090.139475][T18159] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1090.257204][ T5626] lwtunnel_output(): recursion limit reached on datapath [ 1090.340772][T18165] md: recover of RAID array md0 [ 1090.341820][T18165] md: md0: recover done. [ 1090.501809][T18169] md: recover of RAID array md0 [ 1090.501841][T18169] md: md0: recover done. [ 1090.756121][T18173] md: recover of RAID array md0 [ 1090.756154][T18173] md: md0: recover done. [ 1090.849022][T10088] rtl8150 10-1:1.0: couldn't reset the device [ 1090.849306][T10088] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 1090.944082][T18170] o2cb: Local heartbeat has not been started. [ 1090.944098][T18170] o2cb: Cluster check failed. Fix errors before retrying. [ 1090.944118][T18170] (syz.2.2793,18170,0):user_dlm_register:674 ERROR: status = -22 [ 1090.944139][T18170] (syz.2.2793,18170,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "hb0" [ 1091.010640][T18178] md: recover of RAID array md0 [ 1091.010663][T18178] md: md0: recover done. [ 1091.073515][T10088] usb 10-1: USB disconnect, device number 4 [ 1091.145052][ T5751] lwtunnel_output(): recursion limit reached on datapath [ 1091.323089][T18181] md: recover of RAID array md0 [ 1091.323124][T18181] md: md0: recover done. [ 1091.533728][T17845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1091.567837][T18185] md: recover of RAID array md0 [ 1091.567871][T18185] md: md0: recover done. [ 1091.623206][T17845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1091.639878][T17845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1091.748820][T17845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1091.750245][T17845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1091.833744][T17845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1091.844253][T17845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1091.866592][T18189] md: recover of RAID array md0 [ 1091.866685][T18189] md: md0: recover done. [ 1091.890501][T17845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1092.096773][T18198] md: recover of RAID array md0 [ 1092.096866][T18198] md: md0: recover done. [ 1092.279373][T18199] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1092.335934][T18201] md: recover of RAID array md0 [ 1092.336336][T18201] md: md0: recover done. [ 1092.465140][T18199] md: could not open device unknown-block(1,0). [ 1092.569628][T18199] md: could not open device unknown-block(1,1). [ 1092.589795][T18206] md: recover of RAID array md0 [ 1092.589827][T18206] md: md0: recover done. [ 1092.801498][T18212] md: recover of RAID array md0 [ 1092.801531][T18212] md: md0: recover done. [ 1093.053984][T18215] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1093.069530][T18220] md: recover of RAID array md0 [ 1093.069559][T18220] md: md0: recover done. [ 1093.137997][T18214] o2cb: Local heartbeat has not been started. [ 1093.138011][T18214] o2cb: Cluster check failed. Fix errors before retrying. [ 1093.138050][T18214] (syz.1.2799,18214,0):user_dlm_register:674 ERROR: status = -22 [ 1093.138071][T18214] (syz.1.2799,18214,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "hb0" [ 1093.217789][T18215] md: couldn't update array info. -22 [ 1093.245279][T18215] md: loop0 has zero or unknown size, marking faulty! [ 1093.245334][T18215] md: md_import_device returned -22 [ 1093.286967][T18222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1093.372138][T18224] md: recover of RAID array md0 [ 1093.372167][T18224] md: md0: recover done. [ 1093.435277][T18222] md: couldn't update array info. -22 [ 1093.475303][T18226] md: loop0 has zero or unknown size, marking faulty! [ 1093.475377][T18226] md: md_import_device returned -22 [ 1093.504661][T18223] o2cb: Local heartbeat has not been started. [ 1093.504673][T18223] o2cb: Cluster check failed. Fix errors before retrying. [ 1093.504692][T18223] (syz.0.2801,18223,0):user_dlm_register:674 ERROR: status = -22 [ 1093.504712][T18223] (syz.0.2801,18223,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "hb0" [ 1093.614227][T18229] md: recover of RAID array md0 [ 1093.614259][T18229] md: md0: recover done. [ 1093.848828][T18230] md: recover of RAID array md0 [ 1093.848862][T18230] md: md0: recover done. [ 1094.088308][T18234] md: recover of RAID array md0 [ 1094.088345][T18234] md: md0: recover done. [ 1094.198271][T18233] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1094.297134][T18239] md: recover of RAID array md0 [ 1094.297167][T18239] md: md0: recover done. [ 1094.446733][T18233] md: could not open device unknown-block(1,0). [ 1094.566598][T18233] md: could not open device unknown-block(1,1). [ 1094.568388][T18242] md: recover of RAID array md0 [ 1094.568418][T18242] md: md0: recover done. [ 1094.828374][T18246] md: recover of RAID array md0 [ 1094.828409][T18246] md: md0: recover done. [ 1094.962669][T17845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.137292][T18251] md: recover of RAID array md0 [ 1095.137325][T18251] md: md0: recover done. [ 1095.331398][T18256] md: recover of RAID array md0 [ 1095.331432][T18256] md: md0: recover done. [ 1095.488474][T18257] printk: console [ttyS0] disabled [ 1095.518293][T18258] md: recover of RAID array md0 [ 1095.518321][T18258] md: md0: recover done. [ 1098.587407][T18310] printk: console [ttyS0] enabled [ 1098.673644][T18325] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1098.703631][T17853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.749315][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.749400][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.832342][T18331] md: recover of RAID array md0 [ 1098.832375][T18331] md: md0: recover done. [ 1098.858820][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.858911][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.896964][T18325] md: couldn't update array info. -22 [ 1098.917723][T18325] md: loop0 has zero or unknown size, marking faulty! [ 1098.917784][T18325] md: md_import_device returned -22 [ 1099.159427][T18317] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1099.229310][T18334] md: recover of RAID array md0 [ 1099.231140][T18334] md: md0: recover done. [ 1099.578335][T18338] md: recover of RAID array md0 [ 1099.578368][T18338] md: md0: recover done. [ 1099.900142][T18344] md: recover of RAID array md0 [ 1099.900241][T18344] md: md0: recover done. [ 1100.185547][T18353] md: recover of RAID array md0 [ 1100.186247][T18353] md: md0: recover done. [ 1100.496649][T18349] o2cb: Local heartbeat has not been started. [ 1100.496664][T18349] o2cb: Cluster check failed. Fix errors before retrying. [ 1100.496684][T18349] (syz.0.2820,18349,0):user_dlm_register:674 ERROR: status = -22 [ 1100.496731][T18349] (syz.0.2820,18349,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "hb0" [ 1100.559626][T18356] md: recover of RAID array md0 [ 1100.559654][T18356] md: md0: recover done. [ 1100.859273][T18364] md: recover of RAID array md0 [ 1100.859294][T18364] md: md0: recover done. [ 1100.980332][T18366] serial 00:02: in use; can't configure [ 1100.998407][T18366] serial 00:02: in use; can't configure [ 1101.012359][T18366] serial 00:02: in use; can't configure [ 1101.042729][T18366] serial 00:02: in use; can't configure [ 1101.073051][T18366] serial 00:03: in use; can't configure [ 1101.102812][T18366] serial 00:03: in use; can't configure [ 1101.115680][T18366] serial 00:03: in use; can't configure [ 1101.117594][T18371] md: recover of RAID array md0 [ 1101.117623][T18371] md: md0: recover done. [ 1101.168563][T18370] serial 00:02: in use; can't configure [ 1101.188299][T18370] serial 00:02: in use; can't configure [ 1101.192076][T18370] serial 00:02: in use; can't configure [ 1101.214622][T18370] serial 00:02: in use; can't configure [ 1101.278985][T18363] printk: console [ttyS0] disabled [ 1113.918322][T18571] printk: console [ttyS0] enabled [ 1113.942155][T18584] md: recover of RAID array md0 [ 1113.942176][T18584] md: md0: recover done. [ 1114.140807][T18587] md: recover of RAID array md0 [ 1114.142150][T18587] md: md0: recover done. [ 1114.333666][T18588] se_dev->se_dev_ptr already set for storage object [ 1114.368558][T18592] md: recover of RAID array md0 [ 1114.368586][T18592] md: md0: recover done. [ 1114.470743][T18562] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1114.525647][T18590] nvmet: disable ns before setting buffered_io value. [ 1114.532622][T18590] nvmet: the ns:1 is already enabled. [ 1114.610194][T18590] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1114.627408][T18595] md: recover of RAID array md0 [ 1114.627442][T18595] md: md0: recover done. [ 1114.927749][T18598] md: recover of RAID array md0 [ 1114.928545][T18598] md: md0: recover done. [ 1115.122194][T18590] nvme_fabrics: missing parameter 'transport=%s' [ 1115.122210][T18590] nvme_fabrics: missing parameter 'nqn=%s' [ 1115.262401][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.262452][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.295476][T18604] md: recover of RAID array md0 [ 1115.295509][T18604] md: md0: recover done. [ 1115.577646][T18602] md: could not open device unknown-block(1,0). [ 1115.581462][T18607] md: recover of RAID array md0 [ 1115.581495][T18607] md: md0: recover done. [ 1115.718629][T18602] md: could not open device unknown-block(1,1). [ 1115.855093][T18618] md: recover of RAID array md0 [ 1115.855178][T18618] md: md0: recover done. [ 1116.020875][T18619] printk: console [ttyS0] disabled [ 1117.196687][T18646] printk: console [ttyS0] enabled [ 1117.348923][T18657] md: recover of RAID array md0 [ 1117.348956][T18657] md: md0: recover done. [ 1117.607088][T18650] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1117.677398][T18661] md: recover of RAID array md0 [ 1117.678097][T18661] md: md0: recover done. [ 1117.877083][T18664] md: recover of RAID array md0 [ 1117.878964][T18664] md: md0: recover done. [ 1118.188678][T18666] md: recover of RAID array md0 [ 1118.188736][T18666] md: md0: recover done. [ 1118.391418][T18668] se_dev->se_dev_ptr already set for storage object [ 1118.435217][T18670] md: recover of RAID array md0 [ 1118.436063][T18670] md: md0: recover done. [ 1118.623584][T18663] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 1118.698316][T18676] md: recover of RAID array md0 [ 1118.698368][T18676] md: md0: recover done. [ 1118.740827][T18663] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 1118.889122][T18673] bridge0: port 3(syz_tun) entered blocking state [ 1118.889211][T18673] bridge0: port 3(syz_tun) entered disabled state [ 1118.889397][T18673] syz_tun: entered allmulticast mode [ 1118.921070][T18682] md: recover of RAID array md0 [ 1118.921103][T18682] md: md0: recover done. [ 1118.969734][T18673] syz_tun: entered promiscuous mode [ 1118.996926][T18673] bridge0: port 3(syz_tun) entered blocking state [ 1118.997016][T18673] bridge0: port 3(syz_tun) entered forwarding state [ 1119.076763][T18683] netlink: 'syz.5.2887': attribute type 11 has an invalid length. [ 1119.153675][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2887'. [ 1119.181328][T18679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.246396][T18684] md: recover of RAID array md0 [ 1119.247700][T18684] md: md0: recover done. [ 1119.509447][T18690] md: recover of RAID array md0 [ 1119.509478][T18690] md: md0: recover done. [ 1119.695212][T18686] md: could not open device unknown-block(1,0). [ 1119.745772][T18698] md: recover of RAID array md0 [ 1119.745855][T18698] md: md0: recover done. [ 1119.786126][T18686] md: could not open device unknown-block(1,1). [ 1119.966787][T18702] md: recover of RAID array md0 [ 1119.966820][T18702] md: md0: recover done. [ 1120.071677][T18701] printk: console [ttyS0] disabled [ 1120.831523][T18704] printk: console [ttyS0] enabled [ 1123.328461][T18732] md: recover of RAID array md0 [ 1123.328588][T18732] md: md0: recover done. [ 1123.688596][T18738] md: recover of RAID array md0 [ 1123.688629][T18738] md: md0: recover done. [ 1123.996886][T18744] md: recover of RAID array md0 [ 1123.997581][T18744] md: md0: recover done. [ 1124.002067][T18742] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1124.160831][T15900] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1124.208446][T18748] netlink: 'syz.5.2903': attribute type 11 has an invalid length. [ 1124.248378][T18752] md: recover of RAID array md0 [ 1124.248399][T18752] md: md0: recover done. [ 1124.250610][T18750] netlink: 'syz.7.2904': attribute type 11 has an invalid length. [ 1124.288892][T18746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.314341][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 1124.336640][T18742] md: could not open device unknown-block(1,0). [ 1124.353891][T18745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.445693][T18742] md: could not open device unknown-block(1,1). [ 1124.517160][T18759] md: recover of RAID array md0 [ 1124.518652][T18759] md: md0: recover done. [ 1124.766483][T18762] md: recover of RAID array md0 [ 1124.766517][T18762] md: md0: recover done. [ 1125.040539][T18770] md: recover of RAID array md0 [ 1125.040574][T18770] md: md0: recover done. [ 1125.064790][T18765] md: could not open device unknown-block(1,0). [ 1125.140586][T18767] nvmet: the ns:1 is already enabled. [ 1125.165940][T18765] md: could not open device unknown-block(1,1). [ 1125.233494][T18767] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1125.357476][T18779] md: recover of RAID array md0 [ 1125.357507][T18779] md: md0: recover done. [ 1125.661165][T18785] md: recover of RAID array md0 [ 1125.661187][T18785] md: md0: recover done. [ 1125.931944][T18792] md: recover of RAID array md0 [ 1125.931967][T18792] md: md0: recover done. [ 1125.953476][ T6021] nvmet: Created nvm controller 73 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:21e0a11c-9495-4ab3-b9a3-a29ab3776d12. [ 1126.003573][T18767] nvme nvme72: creating 1 I/O queues. [ 1126.033156][T18789] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1126.065176][T18767] nvme nvme72: new ctrl: "testsubsys" [ 1126.194693][T18789] md: couldn't update array info. -22 [ 1126.248897][T18789] md: loop0 has zero or unknown size, marking faulty! [ 1126.248978][T18789] md: md_import_device returned -22 [ 1126.252977][T18795] md: recover of RAID array md0 [ 1126.253000][T18795] md: md0: recover done. [ 1126.389246][T18794] printk: console [ttyS0] disabled [ 1127.106595][T18814] netlink: 'syz.7.2919': attribute type 11 has an invalid length. [ 1127.114694][T18813] md: loop0 has zero or unknown size, marking faulty! [ 1127.114752][T18813] md: md_import_device returned -22 [ 1127.115824][T18799] printk: console [ttyS0] enabled [ 1127.185611][T18812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1127.225603][T18817] md: recover of RAID array md0 [ 1127.225623][T18817] md: md0: recover done. [ 1127.529054][T18821] netlink: 'syz.5.2920': attribute type 11 has an invalid length. [ 1127.533402][T18810] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1127.571814][T18822] md: recover of RAID array md0 [ 1127.571834][T18822] md: md0: recover done. [ 1127.650295][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2920'. [ 1127.682574][T18820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1127.950970][T18827] md: recover of RAID array md0 [ 1127.950996][T18827] md: md0: recover done. [ 1128.235371][T18824] md: could not open device unknown-block(1,0). [ 1128.254183][T18840] md: recover of RAID array md0 [ 1128.254202][T18840] md: md0: recover done. [ 1128.296787][T18824] md: could not open device unknown-block(1,1). [ 1128.340757][T15900] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1128.510855][T18844] md: recover of RAID array md0 [ 1128.510883][T18844] md: md0: recover done. [ 1128.812357][T18846] md: recover of RAID array md0 [ 1128.812400][T18846] md: md0: recover done. [ 1129.122983][T18855] md: recover of RAID array md0 [ 1129.123032][T18855] md: md0: recover done. [ 1129.424564][T18864] md: recover of RAID array md0 [ 1129.424588][T18864] md: md0: recover done. [ 1129.468342][T18860] printk: console [ttyS0] disabled [ 1129.949625][T18876] md: recover of RAID array md0 [ 1129.949657][T18876] md: md0: recover done. [ 1129.976010][T10303] lwtunnel_output(): recursion limit reached on datapath [ 1129.993482][T18868] printk: console [ttyS0] enabled [ 1130.248441][T18878] md: recover of RAID array md0 [ 1130.248482][T18878] md: md0: recover done. [ 1130.547391][T18879] md: recover of RAID array md0 [ 1130.547445][T18879] md: md0: recover done. [ 1130.572597][T18870] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1130.880736][T18885] md: recover of RAID array md0 [ 1130.880772][T18885] md: md0: recover done. [ 1130.937944][T10088] lwtunnel_output(): recursion limit reached on datapath [ 1131.039375][T15900] Bluetooth: hci3: link tx timeout [ 1131.040088][T15900] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1131.215143][T18891] md: recover of RAID array md0 [ 1131.215170][T18891] md: md0: recover done. [ 1131.276803][T15900] Bluetooth: hci3: link tx timeout [ 1131.276822][T15900] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1131.411684][T18890] nvmet: the ns:1 is already enabled. [ 1131.435699][T18898] md: recover of RAID array md0 [ 1131.435733][T18898] md: md0: recover done. [ 1131.463818][T18890] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1131.475726][T15900] Bluetooth: hci3: link tx timeout [ 1131.475741][T15900] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1131.645872][T18906] md: recover of RAID array md0 [ 1131.645932][T18906] md: md0: recover done. [ 1131.916055][T18890] nvme_fabrics: missing parameter 'nqn=%s' [ 1132.010353][T18908] md: recover of RAID array md0 [ 1132.010407][T18908] md: md0: recover done. [ 1132.297051][T18919] md: recover of RAID array md0 [ 1132.297135][T18919] md: md0: recover done. [ 1132.437366][T18911] md: could not open device unknown-block(1,0). [ 1132.515601][T18923] md: recover of RAID array md0 [ 1132.515687][T18923] md: md0: recover done. [ 1132.546990][T15900] Bluetooth: hci3: link tx timeout [ 1132.547009][T15900] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1132.576595][T15900] Bluetooth: hci3: link tx timeout [ 1132.576613][T15900] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1132.617148][T18911] md: could not open device unknown-block(1,1). [ 1132.663591][T18922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1132.668449][T15900] Bluetooth: hci3: link tx timeout [ 1132.668465][T15900] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1132.815985][T18922] md: couldn't update array info. -22 [ 1132.846363][T18930] md: recover of RAID array md0 [ 1132.846424][T18930] md: md0: recover done. [ 1132.895368][T18922] md: loop0 has zero or unknown size, marking faulty! [ 1132.895449][T18922] md: md_import_device returned -22 [ 1133.022644][T15900] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1133.103797][T15900] Bluetooth: hci3: command 0x0406 tx timeout [ 1133.148065][T18937] md: recover of RAID array md0 [ 1133.148099][T18937] md: md0: recover done. [ 1133.369170][T18940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1133.416988][T18943] md: recover of RAID array md0 [ 1133.417062][T18943] md: md0: recover done. [ 1133.516136][T18940] md: couldn't update array info. -22 [ 1133.612518][T18940] md: loop0 has zero or unknown size, marking faulty! [ 1133.612578][T18940] md: md_import_device returned -22 [ 1133.645171][T18950] md: recover of RAID array md0 [ 1133.645204][T18950] md: md0: recover done. [ 1134.074288][T18952] md: recover of RAID array md0 [ 1134.074342][T18952] md: md0: recover done. [ 1134.146341][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1134.323299][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1134.324165][ T9] usb 10-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1134.343320][ T9] usb 10-1: config 4 has an invalid interface number: 51 but max is 0 [ 1134.343344][ T9] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.343362][ T9] usb 10-1: config 4 has no interface number 0 [ 1134.343393][ T9] usb 10-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1134.343436][ T9] usb 10-1: config 4 interface 51 has no altsetting 0 [ 1134.427973][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.427998][ T9] usb 10-1: Product: syz [ 1134.428012][ T9] usb 10-1: Manufacturer: syz [ 1134.428048][ T9] usb 10-1: SerialNumber: syz [ 1134.480316][ T9] cdc_eem 10-1:4.51: probe with driver cdc_eem failed with error -22 [ 1134.567916][T18957] md: recover of RAID array md0 [ 1134.569701][T18957] md: md0: recover done. [ 1134.669019][T18949] loop9: detected capacity change from 0 to 256 [ 1134.670698][T18949] FAT-fs (loop9): bogus logical sector size 65529 [ 1134.670716][T18949] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1134.834353][T18960] se_dev->se_dev_ptr already set for storage object [ 1134.858404][T18959] nvmet: the ns:1 is already enabled. [ 1134.875413][T18964] md: recover of RAID array md0 [ 1134.877520][T18964] md: md0: recover done. [ 1134.948877][T18959] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1135.161903][T18973] md: recover of RAID array md0 [ 1135.161959][T18973] md: md0: recover done. [ 1135.393056][T18499] usb 10-1: USB disconnect, device number 6 [ 1135.573667][T18979] md: recover of RAID array md0 [ 1135.574226][T18979] md: md0: recover done. [ 1135.733604][ T41] nvmet: connect request for invalid subsystem test! [ 1135.751305][T18959] nvme nvme73: Connect Invalid Data Parameter, subsysnqn "test" [ 1135.902134][T18983] md: recover of RAID array md0 [ 1135.902166][T18983] md: md0: recover done. [ 1136.197053][T18989] md: recover of RAID array md0 [ 1136.197466][T18989] md: md0: recover done. [ 1136.445306][T18987] md: could not open device unknown-block(1,0). [ 1136.448277][T18997] md: recover of RAID array md0 [ 1136.448422][T18997] md: md0: recover done. [ 1136.578697][T18987] md: could not open device unknown-block(1,1). [ 1136.802592][T19006] md: recover of RAID array md0 [ 1136.802649][T19006] md: md0: recover done. [ 1137.027431][T19012] md: recover of RAID array md0 [ 1137.027466][T19012] md: md0: recover done. [ 1137.198928][T15936] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1137.263829][T19015] md: recover of RAID array md0 [ 1137.263861][T19015] md: md0: recover done. [ 1137.581331][T19019] md: recover of RAID array md0 [ 1137.581385][T19019] md: md0: recover done. [ 1137.776254][T19026] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1137.776511][T19031] md: recover of RAID array md0 [ 1137.776541][T19031] md: md0: recover done. [ 1137.975300][T19026] md: couldn't update array info. -22 [ 1138.030972][T19032] md: loop0 has zero or unknown size, marking faulty! [ 1138.031036][T19032] md: md_import_device returned -22 [ 1138.087380][T19033] md: recover of RAID array md0 [ 1138.087415][T19033] md: md0: recover done. [ 1138.434301][T19042] md: recover of RAID array md0 [ 1138.434352][T19042] md: md0: recover done. [ 1140.904585][T19049] md: recover of RAID array md0 [ 1140.904624][T19049] md: md0: recover done. [ 1141.250263][T19054] md: recover of RAID array md0 [ 1141.250299][T19054] md: md0: recover done. [ 1141.507399][T19060] md: recover of RAID array md0 [ 1141.507437][T19060] md: md0: recover done. [ 1141.619140][T19058] nvmet: the ns:1 is already enabled. [ 1141.699418][T19058] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1141.750960][T19066] md: recover of RAID array md0 [ 1141.750996][T19066] md: md0: recover done. [ 1141.922357][T19073] netlink: 'syz.1.2982': attribute type 11 has an invalid length. [ 1142.016190][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2982'. [ 1142.016654][T19075] md: recover of RAID array md0 [ 1142.016684][T19075] md: md0: recover done. [ 1142.028770][T19070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1142.346072][ T6002] nvmet: Created nvm controller 74 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:21e0a11c-9495-4ab3-b9a3-a29ab3776d12. [ 1142.371098][T19078] md: recover of RAID array md0 [ 1142.371132][T19078] md: md0: recover done. [ 1142.388432][T19058] nvme nvme73: creating 1 I/O queues. [ 1142.482462][T19058] nvme nvme73: new ctrl: "testsubsys" [ 1142.740790][T19085] md: recover of RAID array md0 [ 1142.740812][T19085] md: md0: recover done. [ 1143.007165][T19091] md: recover of RAID array md0 [ 1143.007223][T19091] md: md0: recover done. [ 1143.187032][T19099] md: recover of RAID array md0 [ 1143.187087][T19099] md: md0: recover done. [ 1143.366303][T19102] md: recover of RAID array md0 [ 1143.366337][T19102] md: md0: recover done. [ 1143.560044][T19107] md: recover of RAID array md0 [ 1143.560099][T19107] md: md0: recover done. [ 1143.740727][T19114] md: recover of RAID array md0 [ 1143.740779][T19114] md: md0: recover done. [ 1143.791445][T19112] futex_wake_op: syz.9.2992 tries to shift op by 144; fix this program [ 1143.939753][T19115] md: recover of RAID array md0 [ 1143.941751][T19115] md: md0: recover done. [ 1144.217845][T19119] md: recover of RAID array md0 [ 1144.217877][T19119] md: md0: recover done. [ 1144.425585][T19125] md: recover of RAID array md0 [ 1144.425618][T19125] md: md0: recover done. [ 1144.666764][T19131] md: recover of RAID array md0 [ 1144.666802][T19131] md: md0: recover done. [ 1145.011137][T19133] md: recover of RAID array md0 [ 1145.011174][T19133] md: md0: recover done. [ 1145.132152][T19135] netlink: 'syz.1.2997': attribute type 11 has an invalid length. [ 1145.201753][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 1145.220614][T19132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.265208][T19145] md: recover of RAID array md0 [ 1145.265636][T19145] md: md0: recover done. [ 1145.319426][T19138] printk: console [ttyS0] disabled [ 1177.423415][T19727] md: recover of RAID array md0 [ 1177.423436][T19727] md: md0: recover done. [ 1177.429529][T19705] printk: console [ttyS0] enabled [ 1177.749517][T19732] md: recover of RAID array md0 [ 1177.749557][T19732] md: md0: recover done. [ 1177.839387][T19712] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1178.086398][T19735] printk: console [ttyS0] disabled [ 1178.106576][T19739] md: recover of RAID array md0 [ 1178.106608][T19739] md: md0: recover done. [ 1183.460307][T19826] printk: console [ttyS0] enabled [ 1183.538184][T19840] md: recover of RAID array md0 [ 1183.538217][T19840] md: md0: recover done. [ 1183.879293][T19832] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1183.932365][T19849] md: recover of RAID array md0 [ 1183.933430][T19849] md: md0: recover done. [ 1183.962275][T19843] serial 00:03: in use; can't configure [ 1183.987615][T19843] serial 00:03: in use; can't configure [ 1184.132809][T19838] printk: console [ttyS0] disabled [ 1184.540196][T19862] md: recover of RAID array md0 [ 1184.540284][T19862] md: md0: recover done. [ 1184.543143][T19843] printk: console [ttyS0] enabled [ 1184.787176][T19867] md: recover of RAID array md0 [ 1184.789342][T19867] md: md0: recover done. [ 1185.071903][T19870] md: recover of RAID array md0 [ 1185.071957][T19870] md: md0: recover done. [ 1185.347367][T19874] md: recover of RAID array md0 [ 1185.347399][T19874] md: md0: recover done. [ 1185.589279][T19886] md: recover of RAID array md0 [ 1185.589346][T19886] md: md0: recover done. [ 1185.796463][T19893] md: recover of RAID array md0 [ 1185.796495][T19893] md: md0: recover done. [ 1186.066190][T19898] md: recover of RAID array md0 [ 1186.066225][T19898] md: md0: recover done. [ 1186.307050][T18499] lwtunnel_output(): recursion limit reached on datapath [ 1186.361518][T19903] md: recover of RAID array md0 [ 1186.361575][T19903] md: md0: recover done. [ 1186.653558][T19906] md: recover of RAID array md0 [ 1186.655567][T19906] md: md0: recover done. [ 1186.921435][T19912] md: recover of RAID array md0 [ 1186.921470][T19912] md: md0: recover done. [ 1187.192756][T19920] md: recover of RAID array md0 [ 1187.192782][T19920] md: md0: recover done. [ 1187.312983][ T5626] lwtunnel_output(): recursion limit reached on datapath [ 1187.519406][T19924] md: recover of RAID array md0 [ 1187.519448][T19924] md: md0: recover done. [ 1187.827856][T19930] md: recover of RAID array md0 [ 1187.827878][T19930] md: md0: recover done. [ 1187.931681][T19928] printk: console [ttyS0] disabled [ 1188.502431][T19938] printk: console [ttyS0] enabled [ 1188.637576][T19951] serial 00:02: in use; can't configure [ 1188.639881][T19951] serial 00:02: in use; can't configure [ 1188.674648][T19951] serial 00:02: in use; can't configure [ 1188.676644][T19951] serial 00:02: in use; can't configure [ 1188.804216][T19944] printk: console [ttyS0] disabled [ 1188.819141][T19954] md: recover of RAID array md0 [ 1188.819162][T19954] md: md0: recover done. [ 1189.248695][T19928] printk: console [ttyS0] enabled [ 1189.397650][T19951] printk: console [ttyS0] disabled [ 1189.418673][T19967] md: recover of RAID array md0 [ 1189.418718][T19967] md: md0: recover done. [ 1189.601314][T19951] printk: console [ttyS0] enabled [ 1189.725974][T19966] md: could not open device unknown-block(1,0). [ 1189.809181][T19971] md: recover of RAID array md0 [ 1189.809209][T19971] md: md0: recover done. [ 1189.946877][T19966] md: could not open device unknown-block(1,1). [ 1190.072689][T19957] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1190.164703][T19979] md: recover of RAID array md0 [ 1190.164726][T19979] md: md0: recover done. [ 1190.446685][T19982] md: recover of RAID array md0 [ 1190.446730][T19982] md: md0: recover done. [ 1190.876991][T10055] md_update_sb: can't update sb for read-only array md0 [ 1190.910803][T19981] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1190.911199][T19981] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1190.911217][T19981] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 1190.911256][T19981] UDF-fs: Scanning with blocksize 512 failed [ 1191.255909][T19981] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1191.256063][T19981] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1191.256081][T19981] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 1191.256093][T19981] UDF-fs: Scanning with blocksize 1024 failed [ 1191.262210][T19996] printk: console [ttyS0] disabled [ 1191.957454][T19998] printk: console [ttyS0] enabled [ 1192.228119][T19999] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1192.855753][T20024] overlayfs: failed to clone upperpath [ 1192.896984][T10055] md_update_sb: can't update sb for read-only array md0 [ 1192.935387][T10055] md_update_sb: can't update sb for read-only array md0 [ 1192.975485][T10055] md_update_sb: can't update sb for read-only array md0 [ 1193.009746][T20025] md: could not open device unknown-block(1,0). [ 1193.153437][T20032] md: could not open device unknown-block(1,0). [ 1193.153766][T20030] md: could not open device unknown-block(1,1). [ 1193.275872][T20029] md: could not open device unknown-block(1,1). [ 1193.276278][T20035] md: recover of RAID array md0 [ 1193.276307][T20035] md: md0: recover done. [ 1193.452800][T15936] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1193.475853][T20040] md: recover of RAID array md0 [ 1193.475966][T20040] md: md0: recover done. [ 1193.695721][T20045] md: recover of RAID array md0 [ 1193.695773][T20045] md: md0: recover done. [ 1193.895464][T20049] md: recover of RAID array md0 [ 1193.895527][T20049] md: md0: recover done. [ 1194.120276][T20057] md: recover of RAID array md0 [ 1194.120332][T20057] md: md0: recover done. [ 1194.139009][T15936] Bluetooth: hci5: command 0x0406 tx timeout [ 1194.408436][T20062] md: recover of RAID array md0 [ 1194.408468][T20062] md: md0: recover done. [ 1194.658917][T20066] netlink: 'syz.7.3216': attribute type 11 has an invalid length. [ 1194.663894][T20066] netlink: 'syz.7.3216': attribute type 11 has an invalid length. [ 1194.674950][T20069] md: recover of RAID array md0 [ 1194.674981][T20069] md: md0: recover done. [ 1194.724090][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3216'. [ 1194.745903][T15900] Bluetooth: Frame is too long (len 18, expected len 4) [ 1194.767304][T20063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1194.872158][T20068] printk: console [ttyS0] disabled [ 1195.701086][T20068] printk: console [ttyS0] enabled [ 1195.716931][T20092] md: recover of RAID array md0 [ 1195.716966][T20092] md: md0: recover done. [ 1195.829959][T20085] o2cb: Local heartbeat has not been started. [ 1195.829975][T20085] o2cb: Cluster check failed. Fix errors before retrying. [ 1195.830017][T20085] (syz.7.3221,20085,0):user_dlm_register:674 ERROR: status = -22 [ 1195.830038][T20085] (syz.7.3221,20085,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "hb0" [ 1196.015629][T20099] md: recover of RAID array md0 [ 1196.015685][T20099] md: md0: recover done. [ 1196.092733][T20073] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1196.287132][T20102] serial 00:02: in use; can't configure [ 1196.309857][T20104] md: recover of RAID array md0 [ 1196.309994][T20102] serial 00:02: in use; can't configure [ 1196.310058][T20104] md: md0: recover done. [ 1196.349376][T20102] serial 00:02: in use; can't configure [ 1196.353838][T20102] serial 00:02: in use; can't configure [ 1196.386767][T20097] printk: console [ttyS0] disabled [ 1197.477498][T20108] printk: console [ttyS0] enabled [ 1197.744308][T20132] md: recover of RAID array md0 [ 1197.746903][T20132] md: md0: recover done. [ 1197.908546][T20131] printk: console [ttyS0] disabled [ 1206.691369][T20274] printk: console [ttyS0] enabled [ 1206.985235][T20297] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1207.026346][T20281] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1207.955310][T20317] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1207.958032][T20317] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1207.958074][T20317] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1207.958086][T20317] UDF-fs: Scanning with blocksize 512 failed [ 1208.023568][T20317] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1208.023718][T20317] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1208.023735][T20317] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1208.023752][T20317] UDF-fs: Scanning with blocksize 1024 failed [ 1208.089266][T20317] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1208.089394][T20317] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1208.089412][T20317] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1208.089424][T20317] UDF-fs: Scanning with blocksize 2048 failed [ 1208.091544][T20317] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1208.091630][T20317] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1208.091647][T20317] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1208.168868][T20317] UDF-fs: Scanning with blocksize 4096 failed [ 1208.168882][T20317] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1208.212558][T20319] printk: console [ttyS0] disabled [ 1209.343447][T20327] printk: console [ttyS0] enabled [ 1209.975394][ T32] INFO: task syz.3.2669:17591 blocked for more than 143 seconds. [ 1209.975437][ T32] Not tainted syzkaller #0 [ 1209.975447][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1209.975457][ T32] task:syz.3.2669 state:D stack:27432 pid:17591 tgid:17589 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 1209.975516][ T32] Call Trace: [ 1209.975523][ T32] [ 1209.975536][ T32] __schedule+0x17db/0x58f0 [ 1209.975609][ T32] ? __pfx___schedule+0x10/0x10 [ 1209.975640][ T32] ? schedule+0x90/0x2b0 [ 1209.975666][ T32] schedule+0x164/0x2b0 [ 1209.975691][ T32] schedule_preempt_disabled+0x13/0x30 [ 1209.975732][ T32] __mutex_lock+0x7c1/0x1550 [ 1209.975768][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1209.975797][ T32] ? write_versions+0x95/0xe30 [ 1209.975827][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1209.975884][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1209.975912][ T32] write_versions+0x95/0xe30 [ 1209.975945][ T32] ? __pfx_write_versions+0x10/0x10 [ 1209.975970][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1209.976021][ T32] ? _copy_from_user+0x94/0xb0 [ 1209.976047][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1209.976069][ T32] ? simple_transaction_get+0x12d/0x160 [ 1209.976101][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1209.976130][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1209.976177][ T32] vfs_write+0x296/0xba0 [ 1209.976215][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1209.976247][ T32] ? __fget_files+0x2a/0x420 [ 1209.976278][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1209.976319][ T32] ? __fget_files+0x3a2/0x420 [ 1209.976346][ T32] ? __fget_files+0x2a/0x420 [ 1209.976376][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1209.976403][ T32] ksys_write+0x150/0x270 [ 1209.976435][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1209.976494][ T32] do_syscall_64+0x166/0x520 [ 1209.976519][ T32] ? trace_irq_disable+0x3b/0x140 [ 1209.976539][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.976565][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.976585][ T32] RIP: 0033:0x7f2adb79e159 [ 1209.976621][ T32] RSP: 002b:00007f2adc5b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1209.976641][ T32] RAX: ffffffffffffffda RBX: 00007f2adba25fa0 RCX: 00007f2adb79e159 [ 1209.976657][ T32] RDX: 0000000000000013 RSI: 0000200000000240 RDI: 0000000000000003 [ 1209.976670][ T32] RBP: 00007f2adb83506b R08: 0000000000000000 R09: 0000000000000000 [ 1209.976683][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.976695][ T32] R13: 00007f2adba26038 R14: 00007f2adba25fa0 R15: 00007ffd793b7168 [ 1209.976726][ T32] [ 1209.976735][ T32] INFO: task syz.3.2669:17596 blocked for more than 143 seconds. [ 1209.976773][ T32] Not tainted syzkaller #0 [ 1209.976783][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1209.976792][ T32] task:syz.3.2669 state:D stack:27432 pid:17596 tgid:17589 ppid:5623 task_flags:0x400040 flags:0x00080002 [ 1209.976849][ T32] Call Trace: [ 1209.976856][ T32] [ 1209.976869][ T32] __schedule+0x17db/0x58f0 [ 1209.976922][ T32] ? kernel_text_address+0xa5/0xe0 [ 1209.976946][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1210.053990][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1210.054023][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1210.054076][ T32] ? __pfx___schedule+0x10/0x10 [ 1210.054110][ T32] ? schedule+0x90/0x2b0 [ 1210.054135][ T32] schedule+0x164/0x2b0 [ 1210.054161][ T32] schedule_preempt_disabled+0x13/0x30 [ 1210.054183][ T32] __mutex_lock+0x7c1/0x1550 [ 1210.054225][ T32] ? kasan_save_track+0x3e/0x80 [ 1210.054251][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1210.054280][ T32] ? write_ports+0xb5/0xd10 [ 1210.054308][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1210.054430][ T32] write_ports+0xb5/0xd10 [ 1210.054462][ T32] ? __pfx_write_ports+0x10/0x10 [ 1210.054489][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1210.054521][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1210.054572][ T32] ? _copy_from_user+0x94/0xb0 [ 1210.054599][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1210.054621][ T32] ? simple_transaction_get+0x12d/0x160 [ 1210.054652][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1210.054681][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1210.054727][ T32] vfs_write+0x296/0xba0 [ 1210.054773][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1210.054805][ T32] ? __fget_files+0x2a/0x420 [ 1210.054835][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1210.054877][ T32] ? __fget_files+0x3a2/0x420 [ 1210.054904][ T32] ? __fget_files+0x2a/0x420 [ 1210.054934][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1210.054961][ T32] ksys_write+0x150/0x270 [ 1210.054993][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1210.055065][ T32] do_syscall_64+0x166/0x520 [ 1210.055091][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.055116][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.055137][ T32] RIP: 0033:0x7f2adb79e159 [ 1210.055154][ T32] RSP: 002b:00007f2adc597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1210.055196][ T32] RAX: ffffffffffffffda RBX: 00007f2adba26090 RCX: 00007f2adb79e159 [ 1210.055211][ T32] RDX: 0000000000000009 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1210.055224][ T32] RBP: 00007f2adb83506b R08: 0000000000000000 R09: 0000000000000000 [ 1210.055237][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.055250][ T32] R13: 00007f2adba26128 R14: 00007f2adba26090 R15: 00007ffd793b7168 [ 1210.055281][ T32] [ 1210.055311][ T32] [ 1210.055311][ T32] Showing all locks held in the system: [ 1210.055351][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1210.055366][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1210.055448][ T32] locks held by kworker/u8:10/5907: 2, last CPU#0: [ 1210.055462][ T32] #0: ffff88801c2f3940 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.160506][ T32] #1: ffffc90004d9fc40 ((work_completion)(&dev->power.work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.196102][ T32] locks held by kworker/u8:13/6000: 3, last CPU#0: [ 1210.196118][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.196173][ T32] #1: ffffc90005307c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.196245][ T32] #2: ffff88803df10800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1210.196294][ T32] locks held by kworker/u8:14/6001: 3, last CPU#0: [ 1210.196308][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.196361][ T32] #1: ffffc90005317c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.196436][ T32] #2: ffff8880535e6258 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1210.196500][ T32] locks held by kworker/u8:15/6002: 3, last CPU#0: [ 1210.196532][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.196586][ T32] #1: ffffc90005327c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.196641][ T32] #2: ffff88807b8cf258 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1210.196724][ T32] locks held by kworker/u8:20/6111: 3, last CPU#0: [ 1210.196737][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.196815][ T32] #1: ffffc90005727c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.196870][ T32] #2: ffff88802b953258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1210.196953][ T32] locks held by syz-executor/11431: 4, last CPU#0: [ 1210.196967][ T32] #0: ffffffff8ee363f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1210.197020][ T32] #1: ffff88807c9469b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1210.197107][ T32] #2: ffff88802ac9d038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1210.197169][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1210.197247][ T32] locks held by syz.8.2664/17570: 3, on CPU#0: [ 1210.197261][ T32] #0: ffff888033ee3270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1210.197316][ T32] #1: ffff888077e12460 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1210.197396][ T32] #2: ffffffff8f09f5c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1210.197450][ T32] locks held by syz.3.2669/17591: 3, on CPU#0: [ 1210.197463][ T32] #0: ffff88807d0057b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1210.197534][ T32] #1: ffff8880331ea460 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1210.396041][ T32] #2: ffffffff8f09f5c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1210.396131][ T32] locks held by syz.3.2669/17596: 3, on CPU#0: [ 1210.396146][ T32] #0: ffff888035793270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1210.396202][ T32] #1: ffff8880331ea460 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1210.396283][ T32] #2: ffffffff8f09f5c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1210.396337][ T32] locks held by syz-executor/17845: 4, last CPU#0: [ 1210.396351][ T32] #0: ffffffff8ee363f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1210.396423][ T32] #1: ffff88807c9436b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1210.396479][ T32] #2: ffff88802ac9dcf8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1210.396558][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1210.396616][ T32] locks held by kworker/u8:8/19323: 3, last CPU#0: [ 1210.396630][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.396702][ T32] #1: ffffc90005967c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1210.396761][ T32] #2: ffff88803e1e0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1210.396829][ T32] locks held by syz.9.3279/20303: 1, last CPU#0: [ 1210.396843][ T32] #0: ffff88801b089d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1210.396893][ T32] locks held by syz.9.3279/20310: 1, last CPU#0: [ 1210.396907][ T32] #0: ffff88801b089d38 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 1210.396975][ T32] locks held by pr/ttyS0/20342: 1, last CPU#0: [ 1210.396988][ T32] #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1210.397039][ T32] locks held by sed/20349: 2, last CPU#0: [ 1210.397084][ T32] #0: ffff8880318bc378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1210.397141][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1210.397195][ T32] locks held by syz.7.3293/20351: 2, last CPU#0: [ 1210.397228][ T32] #0: ffff88803de08588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1210.397284][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1210.397336][ T32] locks held by syz-executor/20353: 2, last CPU#0: [ 1210.397369][ T32] #0: ffff888079a72460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1210.397421][ T32] #1: ffff88807b3d1aa8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 1210.473466][ T32] [ 1210.473476][ T32] ============================================= [ 1210.473476][ T32] [ 1210.473485][ T32] NMI backtrace for cpu 0 [ 1210.473498][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1210.473518][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1210.473530][ T32] Call Trace: [ 1210.473539][ T32] [ 1210.473548][ T32] dump_stack_lvl+0xe8/0x150 [ 1210.473585][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1210.473606][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1210.473639][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1210.473662][ T32] sys_info+0x135/0x170 [ 1210.473689][ T32] watchdog+0xfd7/0x1030 [ 1210.473717][ T32] ? watchdog+0x1c7/0x1030 [ 1210.473742][ T32] kthread+0x38b/0x480 [ 1210.473767][ T32] ? __pfx_watchdog+0x10/0x10 [ 1210.473785][ T32] ? __pfx_kthread+0x10/0x10 [ 1210.473805][ T32] ret_from_fork+0x514/0xb70 [ 1210.473827][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1210.473845][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1210.473868][ T32] ? __switch_to+0xc89/0x1420 [ 1210.473898][ T32] ? __pfx_kthread+0x10/0x10 [ 1210.473918][ T32] ret_from_fork_asm+0x1a/0x30 [ 1210.473961][ T32] [ 1210.578703][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1211.325354][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1211.334448][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1211.344485][ T32] Call Trace: [ 1211.347750][ T32] [ 1211.350665][ T32] vpanic+0x56d/0xa60 [ 1211.354643][ T32] ? __pfx___schedule+0x10/0x10 [ 1211.359479][ T32] ? __pfx_vpanic+0x10/0x10 [ 1211.363972][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1211.369602][ T32] panic+0xc5/0xd0 [ 1211.373317][ T32] ? __pfx_panic+0x10/0x10 [ 1211.377741][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1211.383193][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1211.388552][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1211.394691][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1211.400828][ T32] watchdog+0x1030/0x1030 [ 1211.405148][ T32] ? watchdog+0x1c7/0x1030 [ 1211.409552][ T32] kthread+0x38b/0x480 [ 1211.413602][ T32] ? __pfx_watchdog+0x10/0x10 [ 1211.418257][ T32] ? __pfx_kthread+0x10/0x10 [ 1211.422828][ T32] ret_from_fork+0x514/0xb70 [ 1211.427402][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1211.432492][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1211.438107][ T32] ? __switch_to+0xc89/0x1420 [ 1211.442775][ T32] ? __pfx_kthread+0x10/0x10 [ 1211.447346][ T32] ret_from_fork_asm+0x1a/0x30 [ 1211.452116][ T32] [ 1211.455155][ T32] Kernel Offset: disabled [ 1211.459457][ T32] Rebooting in 86400 seconds..