last executing test programs: 2.932616335s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 2.789290355s ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 2.696599196s ago: executing program 1 (id=6): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.609059889s ago: executing program 0 (id=7): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, 0x0) 2.477662928s ago: executing program 1 (id=8): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00003de000/0x4000)=nil, 0x4000, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYBLOB="7912b8834863b4f6a69921ae35999cb49a2049aca06bc82119d5aa96ce80be5b746bd3299afab4d49b45882bae9b61616d19e600bf732cb06886e26adc0c68a296436bf349aeb97560a2c45dc33719cc9e7740e5cccd44f97268213c9a91bce44af74f61e6107830e91da9578e79ae51"], 0x70}, 0x1, 0x0, 0x0, 0x40815}, 0x20000045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000440)=ANY=[@ANYBLOB="8effffff01ffffffffff00"/20], 0x14}}, 0x1000) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 2.113714829s ago: executing program 3 (id=11): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, 0x0) 2.023997163s ago: executing program 3 (id=12): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="6c0000002c0001060200000000000000000000000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c0055801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) 2.023783953s ago: executing program 3 (id=13): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$mtd(&(0x7f00000001c0), 0x2, 0x111100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) 1.625638645s ago: executing program 2 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x84}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x4800) 649.982803ms ago: executing program 3 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 503.593193ms ago: executing program 2 (id=16): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x101001, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) 476.280969ms ago: executing program 1 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "c0adf9730c497f2f7b0a755258cb90e5f42576cc0386f975710600ef795aaa53", "39161cfd481d4fc5b8e54eca21107ba28fa5ddad802edfc40d887da4200f32df", "b98233bc132ed02bcfb97ff25677c672d0292a76ea9a000082d5b10800000036", "d98364d0de265a7dd90ad758220a2a74039fbea229a67a57b0f83a37a9f94a12", "252a6f06f54fea82a61592674a0591ed583900", "8d5739ad9197de8e51c057bb", 0x0, 0x7ff, 0x5, 0x9, 0x2}}) 462.814753ms ago: executing program 2 (id=18): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="92", 0x1}], 0x1) 227.836138ms ago: executing program 1 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) 179.716749ms ago: executing program 1 (id=20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x7}, 0x8) 110.259967ms ago: executing program 3 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x704}, 0x1, 0x0, 0x0, 0x810}, 0x24044010) 56.968009ms ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 0s ago: executing program 3 (id=23): syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x0, 0x1, 0x1}, 0x20) close(0x3) ioctl(r0, 0xc4c85513, &(0x7f0000000200)) r1 = socket$igmp(0x2, 0x3, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 62.312924][ T5593] cgroup: Unknown subsys name 'net' [ 62.420073][ T5593] cgroup: Unknown subsys name 'cpuset' [ 62.429410][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.767643][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.836487][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.844592][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.845060][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.846197][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.847188][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.907895][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.908963][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.909602][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.910522][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.911084][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.967449][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.970006][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.973084][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.974007][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.974575][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.061111][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.064211][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.064697][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.065683][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.066577][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.340517][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.340672][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.341025][ T5610] bridge_slave_0: entered allmulticast mode [ 67.342902][ T5610] bridge_slave_0: entered promiscuous mode [ 67.392425][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.392516][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.392588][ T5610] bridge_slave_1: entered allmulticast mode [ 67.393524][ T5610] bridge_slave_1: entered promiscuous mode [ 67.420330][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.420430][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.420545][ T5603] bridge_slave_0: entered allmulticast mode [ 67.422602][ T5603] bridge_slave_0: entered promiscuous mode [ 67.470913][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.471111][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.471218][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.471372][ T5603] bridge_slave_1: entered allmulticast mode [ 67.472776][ T5603] bridge_slave_1: entered promiscuous mode [ 67.492889][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.492981][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.493119][ T5607] bridge_slave_0: entered allmulticast mode [ 67.494938][ T5607] bridge_slave_0: entered promiscuous mode [ 67.497884][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.497974][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.498548][ T5607] bridge_slave_1: entered allmulticast mode [ 67.500292][ T5607] bridge_slave_1: entered promiscuous mode [ 67.501755][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.501844][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.501944][ T5616] bridge_slave_0: entered allmulticast mode [ 67.503849][ T5616] bridge_slave_0: entered promiscuous mode [ 67.509294][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.599847][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.600004][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.600118][ T5616] bridge_slave_1: entered allmulticast mode [ 67.601712][ T5616] bridge_slave_1: entered promiscuous mode [ 67.606269][ T5610] team0: Port device team_slave_0 added [ 67.624163][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.629120][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.644550][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.648777][ T5610] team0: Port device team_slave_1 added [ 67.683835][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.701731][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.703599][ T5603] team0: Port device team_slave_0 added [ 67.717747][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.717759][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.717779][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.720818][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.720829][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.720849][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.724516][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.740847][ T5603] team0: Port device team_slave_1 added [ 67.756711][ T5607] team0: Port device team_slave_0 added [ 67.825821][ T5607] team0: Port device team_slave_1 added [ 67.832601][ T5616] team0: Port device team_slave_0 added [ 67.834809][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.834820][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.834840][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.840994][ T5616] team0: Port device team_slave_1 added [ 67.855781][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.855793][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.855813][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.923649][ T54] Bluetooth: hci1: command tx timeout [ 67.923794][ T54] Bluetooth: hci0: command tx timeout [ 67.948315][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.948327][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.948346][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.949570][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.949582][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.949610][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.950597][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.950607][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.950626][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.959199][ T5610] hsr_slave_0: entered promiscuous mode [ 67.960186][ T5610] hsr_slave_1: entered promiscuous mode [ 67.984281][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.984294][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.984314][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.993490][ T5603] hsr_slave_0: entered promiscuous mode [ 67.994402][ T5603] hsr_slave_1: entered promiscuous mode [ 67.995138][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 67.995220][ T5603] Cannot create hsr debugfs directory [ 68.001648][ T5605] Bluetooth: hci2: command tx timeout [ 68.078163][ T5605] Bluetooth: hci3: command tx timeout [ 68.259480][ T5607] hsr_slave_0: entered promiscuous mode [ 68.260051][ T5607] hsr_slave_1: entered promiscuous mode [ 68.260635][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 68.260652][ T5607] Cannot create hsr debugfs directory [ 68.303891][ T5616] hsr_slave_0: entered promiscuous mode [ 68.304515][ T5616] hsr_slave_1: entered promiscuous mode [ 68.304900][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 68.304915][ T5616] Cannot create hsr debugfs directory [ 68.647991][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.656676][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.672191][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.675184][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.675817][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.694463][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.698425][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.708057][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.766934][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.778255][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.778896][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.782005][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.782737][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.786570][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.803362][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.812784][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.892048][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.895898][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.896859][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.908755][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.920214][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.926847][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.944394][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.949124][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.018903][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.021743][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.029589][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.038047][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.040451][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.045435][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.070970][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.073408][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.096975][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.156349][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.168834][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.185073][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.185492][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.188711][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.188800][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.239759][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.262406][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.262490][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.292444][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.292564][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.344164][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.387640][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.411150][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.442143][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.442225][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.473870][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.473964][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.483323][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.506854][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.506957][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.540323][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.540440][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.998150][ T5605] Bluetooth: hci0: command tx timeout [ 69.998181][ T5605] Bluetooth: hci1: command tx timeout [ 70.077806][ T54] Bluetooth: hci2: command tx timeout [ 70.160109][ T54] Bluetooth: hci3: command tx timeout [ 70.248135][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.382501][ T5603] veth0_vlan: entered promiscuous mode [ 70.394902][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.418822][ T5603] veth1_vlan: entered promiscuous mode [ 70.433078][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.525466][ T5610] veth0_vlan: entered promiscuous mode [ 70.539958][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.562049][ T5603] veth0_macvtap: entered promiscuous mode [ 70.564149][ T5607] veth0_vlan: entered promiscuous mode [ 70.564867][ T5610] veth1_vlan: entered promiscuous mode [ 70.582745][ T5603] veth1_macvtap: entered promiscuous mode [ 70.596815][ T5607] veth1_vlan: entered promiscuous mode [ 70.624254][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.646997][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.676107][ T5610] veth0_macvtap: entered promiscuous mode [ 70.694738][ T5610] veth1_macvtap: entered promiscuous mode [ 70.710877][ T5616] veth0_vlan: entered promiscuous mode [ 70.731986][ T5607] veth0_macvtap: entered promiscuous mode [ 70.765580][ T5607] veth1_macvtap: entered promiscuous mode [ 70.775419][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.775788][ T5616] veth1_vlan: entered promiscuous mode [ 70.809971][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.860473][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.860499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.870683][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.898239][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.898703][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.898974][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.899210][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.901201][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.916755][ T5616] veth0_macvtap: entered promiscuous mode [ 70.960395][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.963167][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.963191][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.963209][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.016997][ T5616] veth1_macvtap: entered promiscuous mode [ 71.022907][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.027233][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.027285][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.027331][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.028614][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.028629][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.131537][ T5603] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.135295][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.168682][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.168697][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.201023][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.261957][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.262020][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.262051][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.262082][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.327001][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.327018][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.365582][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365646][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.393042][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.393059][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.519023][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.519042][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.620275][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.620292][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.674469][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.674501][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.789282][ T32] audit: type=1326 audit(1790485778.154:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cb99e159 code=0x7ffc0000 [ 71.789329][ T32] audit: type=1326 audit(1790485778.154:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cb99e159 code=0x7ffc0000 [ 71.789364][ T32] audit: type=1326 audit(1790485778.154:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31cb99e159 code=0x7ffc0000 [ 71.789399][ T32] audit: type=1326 audit(1790485778.154:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cb99e159 code=0x7ffc0000 [ 71.789432][ T32] audit: type=1326 audit(1790485778.154:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cb99e159 code=0x7ffc0000 [ 71.789466][ T32] audit: type=1326 audit(1790485778.154:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f31cb99e159 code=0x7ffc0000 [ 71.877528][ T32] audit: type=1326 audit(1790485778.254:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cb99e159 code=0x7ffc0000 [ 71.881038][ T32] audit: type=1326 audit(1790485778.254:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cb99e159 code=0x7ffc0000 [ 71.943276][ T5754] null_blk: nullb1: using native zone append [ 71.947717][ T5760] nvmet: adding nsid 1 to subsystem testsubsys [ 71.966585][ T5760] nvmet: failed to open block device /dev/nullb1: (-2) [ 72.077974][ T54] Bluetooth: hci1: command tx timeout [ 72.078004][ T54] Bluetooth: hci0: command tx timeout [ 72.157464][ T5605] Bluetooth: hci2: command tx timeout [ 72.211963][ T5754] null_blk: disk nullb1 created [ 72.231788][ T162] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:adb332a1-cafa-4903-87ba-2e8677bd7964. [ 72.252498][ T5605] Bluetooth: hci3: command tx timeout [ 72.289817][ T5760] nvme nvme0: creating 2 I/O queues. [ 72.309782][ T5760] nvme nvme0: new ctrl: "testsubsys" [ 72.328457][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.491135][ T9] usb 1-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 72.510223][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.510247][ T9] usb 1-1: Product: syz [ 72.510259][ T9] usb 1-1: Manufacturer: syz [ 72.510270][ T9] usb 1-1: SerialNumber: syz [ 72.541715][ T9] usb 1-1: config 0 descriptor?? [ 72.630430][ T9] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 002 [ 74.092938][ T9] (null): error -EIO: failure setting delay to 10us [ 74.093026][ T9] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 74.138581][ T9] usb 1-1: USB disconnect, device number 2 [ 74.168503][ T54] Bluetooth: hci1: command tx timeout [ 74.168548][ T5605] Bluetooth: hci0: command tx timeout [ 74.248331][ T5605] Bluetooth: hci2: command tx timeout [ 74.269098][ T5806] Zero length message leads to an empty skb [ 74.318693][ T5605] Bluetooth: hci3: command tx timeout [ 74.417818][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.444186][ T5813] netlink: 192 bytes leftover after parsing attributes in process `syz.3.21'. [ 74.462510][ T13] nvme nvme0: rescanning namespaces. [ 74.463651][ T5812] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 74.545996][ T12] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:adb332a1-cafa-4903-87ba-2e8677bd7964. [ 74.549344][ T5812] nvme nvme1: creating 2 I/O queues. [ 74.567194][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 74.568355][ T27] usb 3-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 74.569551][ T27] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 74.569571][ T27] usb 3-1: config 0 has no interface number 0 [ 74.569605][ T27] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 74.569625][ T27] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 74.569645][ T27] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.569666][ T27] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.569699][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.580275][ T27] usb 3-1: config 0 descriptor?? [ 74.616951][ T5812] nvme nvme1: new ctrl: "testsubsys" [ 74.629740][ T27] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 74.745193][ T162] [ 74.747570][ T162] ====================================================== [ 74.754585][ T162] WARNING: possible circular locking dependency detected [ 74.761612][ T162] syzkaller #0 Not tainted [ 74.766027][ T162] ------------------------------------------------------ [ 74.773036][ T162] kworker/u8:6/162 is trying to acquire lock: [ 74.779083][ T162] ffff88802c866450 (&disk->zone_revalidate_mutex){+.+.}-{4:4}, at: blk_revalidate_disk_zones+0x1c5/0x1650 [ 74.790390][ T162] [ 74.790390][ T162] but task is already holding lock: [ 74.797737][ T162] ffff888029e59c50 (&q->q_usage_counter(io)#75){++++}-{0:0}, at: nvme_update_ns_info+0x3ac/0x1200 [ 74.808341][ T162] [ 74.808341][ T162] which lock already depends on the new lock. [ 74.808341][ T162] [ 74.818720][ T162] [ 74.818720][ T162] the existing dependency chain (in reverse order) is: [ 74.827711][ T162] [ 74.827711][ T162] -> #3 (&q->q_usage_counter(io)#75){++++}-{0:0}: [ 74.836295][ T162] blk_alloc_queue+0x544/0x690 [ 74.841565][ T162] __blk_alloc_disk+0xe3/0x1d0 [ 74.846830][ T162] nvme_mpath_alloc_disk+0x5c2/0x8b0 [ 74.852627][ T162] nvme_scan_ns+0x2e22/0x46c0 [ 74.857809][ T162] async_run_entry_fn+0x9d/0x430 [ 74.863252][ T162] process_scheduled_works+0xc3d/0x1630 [ 74.869300][ T162] worker_thread+0xa47/0xfb0 [ 74.874396][ T162] kthread+0x38b/0x480 [ 74.878967][ T162] ret_from_fork+0x514/0xb70 [ 74.884067][ T162] ret_from_fork_asm+0x1a/0x30 [ 74.889337][ T162] [ 74.889337][ T162] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 74.896529][ T162] fs_reclaim_acquire+0x71/0x100 [ 74.901972][ T162] __kmalloc_cache_node_noprof+0x66/0x620 [ 74.908196][ T162] init_rescuer+0x167/0x530 [ 74.913204][ T162] workqueue_init+0x214/0x680 [ 74.918382][ T162] kernel_init_freeable+0x26b/0x3e0 [ 74.924085][ T162] kernel_init+0x22/0x1d0 [ 74.928920][ T162] ret_from_fork+0x514/0xb70 [ 74.934017][ T162] ret_from_fork_asm+0x1a/0x30 [ 74.939284][ T162] [ 74.939284][ T162] -> #1 (wq_pool_mutex){+.+.}-{4:4}: [ 74.946733][ T162] __mutex_lock+0x197/0x15a0 [ 74.951823][ T162] __alloc_workqueue+0xe8d/0x21d0 [ 74.957357][ T162] alloc_workqueue_noprof+0xe3/0x210 [ 74.963155][ T162] blk_revalidate_disk_zones+0x8d1/0x1650 [ 74.969382][ T162] null_add_dev+0x12b8/0x1d70 [ 74.974561][ T162] nullb_device_power_store+0x240/0x380 [ 74.980605][ T162] configfs_write_iter+0x337/0x430 [ 74.986220][ T162] vfs_write+0x612/0xba0 [ 74.990967][ T162] ksys_write+0x150/0x270 [ 74.995800][ T162] do_syscall_64+0x166/0x520 [ 75.000891][ T162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.007287][ T162] [ 75.007287][ T162] -> #0 (&disk->zone_revalidate_mutex){+.+.}-{4:4}: [ 75.016039][ T162] __lock_acquire+0x164c/0x2de0 [ 75.021394][ T162] lock_acquire+0x115/0x350 [ 75.026400][ T162] __mutex_lock+0x197/0x15a0 [ 75.031491][ T162] blk_revalidate_disk_zones+0x1c5/0x1650 [ 75.037711][ T162] nvme_mpath_revalidate_zones+0x106/0x1c0 [ 75.044026][ T162] nvme_update_ns_info+0x984/0x1200 [ 75.049730][ T162] nvme_scan_ns+0x34c1/0x46c0 [ 75.054911][ T162] async_run_entry_fn+0x9d/0x430 [ 75.060363][ T162] process_scheduled_works+0xc3d/0x1630 [ 75.066413][ T162] worker_thread+0xa47/0xfb0 [ 75.071505][ T162] kthread+0x38b/0x480 [ 75.076074][ T162] ret_from_fork+0x514/0xb70 [ 75.081170][ T162] ret_from_fork_asm+0x1a/0x30 [ 75.086437][ T162] [ 75.086437][ T162] other info that might help us debug this: [ 75.086437][ T162] [ 75.096644][ T162] Chain exists of: [ 75.096644][ T162] &disk->zone_revalidate_mutex --> fs_reclaim --> &q->q_usage_counter(io)#75 [ 75.096644][ T162] [ 75.111330][ T162] Possible unsafe locking scenario: [ 75.111330][ T162] [ 75.118764][ T162] CPU0 CPU1 [ 75.124108][ T162] ---- ---- [ 75.129454][ T162] lock(&q->q_usage_counter(io)#75); [ 75.134812][ T162] lock(fs_reclaim); [ 75.141298][ T162] lock(&q->q_usage_counter(io)#75); [ 75.149176][ T162] lock(&disk->zone_revalidate_mutex); [ 75.154701][ T162] [ 75.154701][ T162] *** DEADLOCK *** [ 75.154701][ T162] [ 75.162819][ T162] locks held by kworker/u8:6/162: 4, last CPU#0: [ 75.169129][ T162] #0: ffff88801c29b948 ((wq_completion)async){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 75.179985][ T162] #1: ffffc90002f1fc40 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 75.191792][ T162] #2: ffff888029e59c50 (&q->q_usage_counter(io)#75){++++}-{0:0}, at: nvme_update_ns_info+0x3ac/0x1200 [ 75.202835][ T162] #3: ffff888029e59c88 (&q->q_usage_counter(queue)#58){+.+.}-{0:0}, at: nvme_update_ns_info+0x3ac/0x1200 [ 75.214136][ T162] [ 75.214136][ T162] stack backtrace: [ 75.220027][ T162] CPU: 0 UID: 0 PID: 162 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 75.229380][ T162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.239416][ T162] Workqueue: async async_run_entry_fn [ 75.244793][ T162] Call Trace: [ 75.248074][ T162] [ 75.250990][ T162] dump_stack_lvl+0xe8/0x150 [ 75.255565][ T162] print_circular_bug+0x2e2/0x300 [ 75.260576][ T162] check_noncircular+0x12f/0x150 [ 75.265501][ T162] __lock_acquire+0x164c/0x2de0 [ 75.270342][ T162] lock_acquire+0x115/0x350 [ 75.274830][ T162] ? blk_revalidate_disk_zones+0x1c5/0x1650 [ 75.280715][ T162] __mutex_lock+0x197/0x15a0 [ 75.285310][ T162] ? blk_revalidate_disk_zones+0x1c5/0x1650 [ 75.291196][ T162] ? blk_revalidate_disk_zones+0x1c5/0x1650 [ 75.297080][ T162] ? __pfx___mutex_lock+0x10/0x10 [ 75.302087][ T162] ? trace_sched_exit_tp+0x3a/0x130 [ 75.307274][ T162] ? __schedule+0x1b5d/0x5c60 [ 75.311949][ T162] blk_revalidate_disk_zones+0x1c5/0x1650 [ 75.317653][ T162] ? __pfx___resched_curr+0x10/0x10 [ 75.322842][ T162] ? __pfx_blk_revalidate_disk_zones+0x10/0x10 [ 75.328977][ T162] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 75.335026][ T162] ? irqentry_exit+0x218/0x910 [ 75.339773][ T162] ? lockdep_hardirqs_on+0x7b/0x110 [ 75.344962][ T162] ? irqentry_exit+0x218/0x910 [ 75.349707][ T162] ? trace_irq_disable+0x3b/0x140 [ 75.354716][ T162] ? __pfx_blk_revalidate_zone_cb+0x10/0x10 [ 75.360594][ T162] ? queue_work_on+0x162/0x1d0 [ 75.365348][ T162] nvme_mpath_revalidate_zones+0x106/0x1c0 [ 75.371148][ T162] nvme_update_ns_info+0x984/0x1200 [ 75.376339][ T162] ? __pfx_nvme_update_ns_info+0x10/0x10 [ 75.381961][ T162] ? __pfx_number+0x10/0x10 [ 75.386454][ T162] ? vsnprintf+0xe42/0xef0 [ 75.390864][ T162] ? __cancel_work+0x17f/0x230 [ 75.395616][ T162] ? lockdep_hardirqs_on+0x7b/0x110 [ 75.400802][ T162] ? __cancel_work+0x1dd/0x230 [ 75.405562][ T162] nvme_scan_ns+0x34c1/0x46c0 [ 75.410234][ T162] ? trace_hrtimer_start+0x82/0x200 [ 75.415414][ T162] ? __pfx_nvme_scan_ns+0x10/0x10 [ 75.420425][ T162] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 75.426306][ T162] ? __dequeue_entity+0xcc7/0x1330 [ 75.431408][ T162] ? rcu_is_watching+0x16/0xb0 [ 75.436158][ T162] ? __dequeue_task+0x216e/0x2960 [ 75.441183][ T162] ? __lock_acquire+0x747/0x2de0 [ 75.446113][ T162] ? register_lock_class+0x31/0x2e0 [ 75.451294][ T162] ? __lock_acquire+0x747/0x2de0 [ 75.456223][ T162] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 75.462361][ T162] ? lockdep_hardirqs_on+0x7b/0x110 [ 75.467549][ T162] ? __pfx_nvme_scan_ns_async+0x10/0x10 [ 75.473085][ T162] ? __pfx_nvme_scan_ns_async+0x10/0x10 [ 75.478614][ T162] async_run_entry_fn+0x9d/0x430 [ 75.483538][ T162] ? process_scheduled_works+0x97a/0x1630 [ 75.489244][ T162] process_scheduled_works+0xc3d/0x1630 [ 75.494785][ T162] ? __pfx_process_scheduled_works+0x10/0x10 [ 75.500753][ T162] ? assign_work+0x3cf/0x5d0 [ 75.505332][ T162] worker_thread+0xa47/0xfb0 [ 75.509921][ T162] kthread+0x38b/0x480 [ 75.513985][ T162] ? __pfx_worker_thread+0x10/0x10 [ 75.519082][ T162] ? __pfx_kthread+0x10/0x10 [ 75.523657][ T162] ret_from_fork+0x514/0xb70 [ 75.528234][ T162] ? __pfx_ret_from_fork+0x10/0x10 [ 75.533332][ T162] ? __switch_to+0xc78/0x1410 [ 75.537996][ T162] ? __pfx_kthread+0x10/0x10 [ 75.542568][ T162] ret_from_fork_asm+0x1a/0x30 [ 75.547324][ T162] [ 75.558818][ T1220] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.581099][ T5820] block device autoloading is deprecated and will be removed. [ 75.707532][ T1220] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 75.708361][ T1220] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 75.708373][ T1220] usb 4-1: config 1 has no interface number 0 [ 75.709921][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.709962][ T1220] usb 4-1: Product: syz [ 75.709969][ T1220] usb 4-1: Manufacturer: syz [ 75.709976][ T1220] usb 4-1: SerialNumber: syz [ 75.716553][ T1220] usb 4-1: 3:1 : does not exist [ 75.716563][ T1220] usb 4-1: 3:2 : does not exist [ 75.919313][ T1220] usb 4-1: USB disconnect, device number 2 [ 77.123459][ T5746] usb 3-1: USB disconnect, device number 2 [ 77.124784][ T5746] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 81.601678][ T46] cfg80211: failed to load regulatory.db