last executing test programs: 4m23.207116814s ago: executing program 32 (id=1217): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x60000, 0x8, 0x3eae, 0xa, 0x0, [{0x77, 0x81, 0x4, '\x00', 0xc}, {0x9, 0x0, 0x7, '\x00', 0x9}, {0x7, 0x1, 0xc, '\x00', 0xd8}, {0x95, 0x6, 0x3, '\x00', 0xff}, {0xc4, 0xa, 0x1, '\x00', 0x4}, {0x4f, 0x4, 0x1, '\x00', 0x8}, {0xfb, 0xf5, 0x75, '\x00', 0x2}, {0x7, 0x10, 0xfe, '\x00', 0x2}, {0x12, 0x4, 0xf, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x9}, {0x9, 0xd, 0x5, '\x00', 0x6}, {0x3, 0x29, 0x4, '\x00', 0x2}, {0xa, 0x53, 0x5, '\x00', 0x19}, {0x4, 0xfe, 0xfe, '\x00', 0x6}, {0x5, 0xfd, 0x4, '\x00', 0x5}, {0x3b, 0xc, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0x7}, {0x3, 0x9, 0x28, '\x00', 0x1}, {0x7c, 0x5, 0x3d, '\x00', 0x5}, {0x0, 0x6, 0xfd, '\x00', 0x9}, {0x8f, 0x8, 0x7, '\x00', 0x9}, {0xa9, 0x10, 0xe, '\x00', 0x4}, {0x46, 0x4, 0x1, '\x00', 0x8}]}}) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) unshare(0x6a040000) 4m20.677254691s ago: executing program 33 (id=1223): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0x3ff, 0x0, 0x18, 0x2000002, {0xfffffffc}, {0xffffffff, 0xfffffffd, 0x1}, {0x9, 0xffff0000}, {0x6}, 0x1, 0x3f0, 0x0, 0x80d613, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x4000000, 0x2000000, 0x2000, 0x0, 0x100, 0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0xffff, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 3m30.136679771s ago: executing program 1 (id=1309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000001000000181100006cfe8834653d491b579406df376a8afba5d1c22aeaf9b82e03b07afecdd5bc73bcf7411f62", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r5, &(0x7f0000000000)=0x8, r5, 0x0, 0x4, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x18006, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x2616) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = msgget$private(0x0, 0x508) msgrcv(r7, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) fchdir(r6) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x6e, 0x0, &(0x7f0000001140)="63eced8e46654db8de048706d086154c7fcc2d96ef4b0dace687bb977341cfc348b7edf9ae081d2b8867ae5e2e0c062d813a1543a45b198aff43f5036ab9975ad6230c07a571c413b0ba4ed1cfd13065fa09878ffc31767886ce1b3fd8820ea1d50551d8c428f942a3cb54d3a8b0", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m28.728454641s ago: executing program 1 (id=1310): get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) 3m28.418247741s ago: executing program 1 (id=1312): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000580)=[{0xa, 0x4a00, 0x0, 0x0}], 0x1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 3m28.177666746s ago: executing program 1 (id=1315): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) 3m25.96297182s ago: executing program 1 (id=1317): syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c002000090780000080a"], 0x0) 3m25.231384774s ago: executing program 1 (id=1318): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0x3ff, 0x0, 0x18, 0x2000002, {0xfffffffc}, {0xffffffff, 0xfffffffd, 0x1}, {0x9, 0xffff0000}, {0x6}, 0x1, 0x3f0, 0x0, 0x80d613, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x4000000, 0x2000000, 0x2000, 0x0, 0x100, 0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) unshare(0x6a040000) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0xffff, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 3m8.822941379s ago: executing program 34 (id=1318): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0x3ff, 0x0, 0x18, 0x2000002, {0xfffffffc}, {0xffffffff, 0xfffffffd, 0x1}, {0x9, 0xffff0000}, {0x6}, 0x1, 0x3f0, 0x0, 0x80d613, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x4000000, 0x2000000, 0x2000, 0x0, 0x100, 0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) unshare(0x6a040000) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0xffff, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 2m32.557844854s ago: executing program 3 (id=1393): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) 2m32.308085311s ago: executing program 3 (id=1394): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1\x00', 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000900)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000a00)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x84, 0x40, @remote, @local, {[], "4e234e230000000000000000c100001400000001c001000c0000000100000000"}}}}}, 0x0) 2m31.332125537s ago: executing program 3 (id=1395): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @loopback}, 0x10) mount$nfs(&(0x7f0000000040)='127.0.0.1:/export\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) (async) recvfrom$inet(r0, &(0x7f0000000500)=""/100, 0x64, 0x0, &(0x7f0000000600)={0x2, 0x0, @empty}, 0x10) 2m30.195984075s ago: executing program 3 (id=1399): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setattr(0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000140001000000", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce000000000001080008"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7261cdca4bf6f760}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0xa94, 0x1008, 0x80000003, 0x8, 0x0, 0x3, 0xf1, 0x80008, 0x80ffa, 0x4000002, 0x0, 0x7, 0xfffffffe, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x5, 0x7, 0x20000010, 0x55, 0x10008, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x1f, 0xd, 0x200, &(0x7f00000001c0)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded701699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1846b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800000000000017000000000000000000000000000000000002000000000000000000008000"}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x0) execve(0x0, 0x0, 0x0) 2m29.106252562s ago: executing program 3 (id=1401): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) 2m29.004277203s ago: executing program 3 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -4\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 2m13.038266268s ago: executing program 35 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -4\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 2m10.137220317s ago: executing program 2 (id=1425): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setattr(0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000140001000000", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce000000000001080008"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7261cdca4bf6f760}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x10, 0x803, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0xa94, 0x1008, 0x80000003, 0x8, 0x0, 0x3, 0xf1, 0x80008, 0x80ffa, 0x4000002, 0x0, 0x7, 0xfffffffe, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x5, 0x7, 0x20000010, 0x55, 0x10008, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x1f, 0xd, 0x200, &(0x7f00000001c0)="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"}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x0) execve(0x0, 0x0, 0x0) 2m9.133940994s ago: executing program 2 (id=1426): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, 0x0) 2m8.916490395s ago: executing program 2 (id=1427): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20004000) 2m8.837019001s ago: executing program 2 (id=1428): socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 2m8.421455057s ago: executing program 2 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x2, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ffff0040950b901700010102030109022700010100a0320904000003ffff0000070581020002000705020200020007058303100008"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000250)={0x0, 0x1dcd6500}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x18, {0x1}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, 0x2}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x28}}, 0x0) 2m6.330962582s ago: executing program 2 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='./rec\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1m51.008641887s ago: executing program 36 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='./rec\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1m38.898234677s ago: executing program 5 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) 1m38.513608919s ago: executing program 5 (id=1445): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r3, &(0x7f0000000100)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 1m37.69446943s ago: executing program 5 (id=1447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000100)={0x95b, 0x7, 0x0, 0x3}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}]}, 0x30}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) socket$netlink(0x10, 0x3, 0x14) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) 1m34.720637992s ago: executing program 5 (id=1449): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 1m32.893476504s ago: executing program 5 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x202c00, 0x30) 1m29.431871273s ago: executing program 5 (id=1459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000060)='2049\n\x00', 0x5) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000120)={0x2, 0x4e21, @loopback}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\x00', 0x1) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m17.964366054s ago: executing program 8 (id=1509): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {@in6=@local, 0x4d2, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0x60, "00112233445566778899aabbccddeeff00112233"}}]}, 0x150}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @remote, @local, {[], "3b040000000004d20000000100112233445566778899aabb"}}}}}, 0x0) 1m17.949661309s ago: executing program 8 (id=1510): socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 1m17.873732891s ago: executing program 8 (id=1511): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371"}}}}}, 0x0) 1m17.807327032s ago: executing program 8 (id=1512): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x4) write(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) capget(0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) 1m17.595190618s ago: executing program 8 (id=1515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) 1m17.228452214s ago: executing program 8 (id=1518): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9) 1m14.122786643s ago: executing program 37 (id=1459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000060)='2049\n\x00', 0x5) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000120)={0x2, 0x4e21, @loopback}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\x00', 0x1) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m6.474465024s ago: executing program 7 (id=1577): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) accept(r2, 0x0, 0x0) r4 = socket(0x2, 0x3, 0x84) setsockopt(r4, 0x0, 0x3, &(0x7f0000000600)="01000000", 0x4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84) 1m6.043743545s ago: executing program 6 (id=1580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1m6.021761463s ago: executing program 7 (id=1581): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 1m5.53396603s ago: executing program 7 (id=1582): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @initr0, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1m5.343641099s ago: executing program 7 (id=1584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000100)={0x95b, 0x7, 0x0, 0x3}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}]}, 0x30}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) socket$netlink(0x10, 0x3, 0x14) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) 1m5.052816028s ago: executing program 6 (id=1585): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d893010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000580)=[{0xa, 0x4a00, 0x0, 0x0}], 0x1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 1m3.46794181s ago: executing program 6 (id=1586): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newsa={0x16c, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, '\x00'/20}}, @encap={0x1c, 0x4, {0x7, 0x1f90, 0x1f90, @in=@loopback}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newpolicy={0xfc, 0x13, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}]}]}, 0xfc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) accept(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000900)='testpayload', 0xb, 0x0, 0x0, 0x0) 1m2.901451439s ago: executing program 7 (id=1587): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 1m2.664391124s ago: executing program 6 (id=1588): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000090)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000d0)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000190)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001d0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000210)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000250)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r2, &(0x7f0000000290)='1', 0x1) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) listen(r3, 0x5) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) accept(r3, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) sendto$inet(r5, &(0x7f0000000600)="4e214e220000000000000000800000140000000a00"/32, 0x20, 0x0, &(0x7f0000000700)={0x2, 0x4e22, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 1m2.050586754s ago: executing program 6 (id=1590): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) 1m1.863799959s ago: executing program 38 (id=1518): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9) 1m0.511660596s ago: executing program 6 (id=1592): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x801, 0x0, @empty}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='tcp 2049\x00', 0x9) 1m0.131317237s ago: executing program 7 (id=1594): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 45.117308235s ago: executing program 39 (id=1592): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x801, 0x0, @empty}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='tcp 2049\x00', 0x9) 44.952438518s ago: executing program 40 (id=1594): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 40.997150279s ago: executing program 9 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1388, @empty}, 0x10) listen(r1, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x7}, 0x8) connect$inet(r2, &(0x7f0000000480)={0x2, 0x1388, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000004c0)=0x1, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="01234567890123456789", 0x14}], 0x1}, 0x8000) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000640), 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000680), 0x4) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 40.296211861s ago: executing program 9 (id=1636): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/100, 0x64}, 0x40) 39.903783798s ago: executing program 9 (id=1639): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1, 0x400, 0x3, 0x9a, 0x9531, 0xffffffffffffffff, 0xc, 0x9, 0xae, 0x6, 0x60, 0x9, 0x3, 0x3, 0x5], 0x25000, 0x20000}) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0xff], 'ip_vti0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x20004000) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {0x0}, {0x0}], 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x1000000004, 0x800000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0xffff, 0x7, 0xc0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x13e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r5 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000001300)=0x0) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) io_cancel(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 38.862455257s ago: executing program 9 (id=1641): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x4) write(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) 37.788150534s ago: executing program 9 (id=1644): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x1f90, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r2) close(r1) 36.928247043s ago: executing program 9 (id=1645): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000008c0)='nfsd 127.0.0.1 2000000000 domain\n\x00', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000009c0)='udp 2049\n\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='1\n\x00', 0x2) (async) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f0000000a80)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000200)=""/1000, 0x3e8) read(r3, &(0x7f0000000300)=""/1000, 0x3e8) read(r1, &(0x7f0000000400)=""/1000, 0x3e8) 21.820340252s ago: executing program 41 (id=1645): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000008c0)='nfsd 127.0.0.1 2000000000 domain\n\x00', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000009c0)='udp 2049\n\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='1\n\x00', 0x2) (async) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f0000000a80)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000200)=""/1000, 0x3e8) read(r3, &(0x7f0000000300)=""/1000, 0x3e8) read(r1, &(0x7f0000000400)=""/1000, 0x3e8) 3.86678263s ago: executing program 4 (id=1677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'veth1\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@null, 0x0, 'veth1\x00'}) bind$x25(r2, &(0x7f0000000500), 0x12) connect$x25(r2, &(0x7f0000000600), 0x12) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 2.808204774s ago: executing program 4 (id=1682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000120)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback}}}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500003c0000000040293da27f0000017f0000016000000000083a40fe800000000000000000000000000001fe8000000000000000000000000000028000000000000000"], 0x3c) 1.928181337s ago: executing program 4 (id=1683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n\x00', 0x2) 1.724242117s ago: executing program 4 (id=1685): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x4) write(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) 1.271694849s ago: executing program 0 (id=1686): socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 1.118368159s ago: executing program 0 (id=1687): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='xprtsec\x00', 0x0, 0x0) 916.460339ms ago: executing program 0 (id=1688): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) 796.23062ms ago: executing program 0 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) 614.105805ms ago: executing program 4 (id=1690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) 391.710504ms ago: executing program 4 (id=1691): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1, 0x400, 0x3, 0x9a, 0x9531, 0xffffffffffffffff, 0xc, 0x9, 0xae, 0x6, 0x60, 0x9, 0x3, 0x3, 0x5], 0x25000, 0x20000}) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0xff], 'ip_vti0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x20004000) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {0x0}, {0x0}], 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x1000000004, 0x800000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0xffff, 0x7, 0xc0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x13e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r4 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000001300)=0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) io_cancel(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 193.394645ms ago: executing program 0 (id=1692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n\x00', 0x2) 0s ago: executing program 0 (id=1693): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kernel console output (not intermixed with test programs): T5583] usb 2-1: config 0 descriptor?? [ 465.356268][ T5974] usb 3-1: device descriptor read/64, error -71 [ 465.596252][ T5974] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 465.678861][ T5583] appletouch 2-1:0.85: Geyser mode initialized. [ 465.681781][ T5583] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input13 [ 465.726179][ T5974] usb 3-1: device descriptor read/64, error -71 [ 465.840591][ T5974] usb usb3-port1: attempt power cycle [ 465.888050][ T822] usb 2-1: USB disconnect, device number 9 [ 465.984743][ T822] appletouch 2-1:0.85: input: appletouch disconnected [ 466.232380][ T5974] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 466.414630][ T5974] usb 3-1: device descriptor read/8, error -71 [ 466.766219][ T5974] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 466.790954][ T5974] usb 3-1: device descriptor read/8, error -71 [ 466.900586][ T5974] usb usb3-port1: unable to enumerate USB device [ 467.467878][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.469011][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.527565][ T9262] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 467.590694][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 467.590737][ T9264] bridge: RTM_NEWNEIGH with invalid ether address [ 468.376056][ T9273] capability: warning: `syz.0.1162' uses deprecated v2 capabilities in a way that may be insecure [ 469.207624][ T166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.266166][ T5974] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 469.396261][ T5974] usb 5-1: device descriptor read/64, error -71 [ 469.958546][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.016150][ T5974] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 470.035204][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.146187][ T5974] usb 5-1: device descriptor read/64, error -71 [ 470.256463][ T5974] usb usb5-port1: attempt power cycle [ 470.345840][ T9295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.357434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.362229][ T9295] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 470.596145][ T5974] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 472.711543][ T5974] usb 5-1: device descriptor read/8, error -71 [ 472.775297][ T9315] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1178'. [ 476.363096][ T9336] nfs4: Unknown parameter 'noresvp' [ 476.661254][ T9331] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 477.136206][ T199] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 477.266190][ T199] usb 3-1: device descriptor read/64, error -71 [ 477.506161][ T199] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 477.636334][ T199] usb 3-1: device descriptor read/64, error -71 [ 477.755059][ T199] usb usb3-port1: attempt power cycle [ 477.936828][ T9367] nfs4: Unknown parameter 'noresvp' [ 478.128277][ T199] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 478.132651][ T9372] sctp: [Deprecated]: syz.1.1198 (pid 9372) Use of int in max_burst socket option deprecated. [ 478.132651][ T9372] Use struct sctp_assoc_value instead [ 478.146877][ T199] usb 3-1: device descriptor read/8, error -71 [ 481.601536][ T199] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 481.874543][ T199] usb 3-1: device descriptor read/8, error -71 [ 481.978373][ T199] usb usb3-port1: unable to enumerate USB device [ 487.422545][ T199] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 487.576241][ T199] usb 2-1: device descriptor read/64, error -71 [ 488.787922][ T199] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 488.916237][ T199] usb 2-1: device descriptor read/64, error -71 [ 489.036537][ T199] usb usb2-port1: attempt power cycle [ 491.822943][ T9442] nfs4: Unknown parameter 'noresvpor' [ 496.008135][ T9466] syzkaller0: entered promiscuous mode [ 496.008163][ T9466] syzkaller0: entered allmulticast mode [ 496.046133][ T199] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 496.176220][ T5894] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 496.196097][ T199] usb 4-1: Using ep0 maxpacket: 32 [ 496.198883][ T199] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.198913][ T199] usb 4-1: config 0 has no interface number 0 [ 496.202197][ T199] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 496.202225][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.202248][ T199] usb 4-1: Product: syz [ 496.202264][ T199] usb 4-1: Manufacturer: syz [ 496.202280][ T199] usb 4-1: SerialNumber: syz [ 496.346118][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 496.350926][ T5894] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 496.350967][ T5894] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 496.351004][ T5894] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 496.351028][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.465722][ T199] usb 4-1: config 0 descriptor?? [ 496.529511][ T199] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 496.529598][ T199] usb 4-1: selecting invalid altsetting 1 [ 496.529615][ T199] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 496.582267][ T199] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 496.583064][ T199] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 496.583229][ T199] usb 4-1: media controller created [ 496.645653][ T199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.725276][ T5894] usb 3-1: USB disconnect, device number 24 [ 497.965379][ T9462] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 498.019050][ T199] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 498.019113][ T199] zl10353_read_register: readreg error (reg=127, ret==-71) [ 498.051699][ T199] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 498.170506][ T199] usb 4-1: USB disconnect, device number 17 [ 498.773950][ T9476] nfs4: Unknown parameter 'noresvpor' [ 501.928055][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.928132][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.216137][ T5731] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 505.390419][ T5731] usb 3-1: Using ep0 maxpacket: 32 [ 505.397585][ T5731] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 505.397611][ T5731] usb 3-1: config 0 has no interface number 0 [ 505.425201][ T5731] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 505.425229][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.425249][ T5731] usb 3-1: Product: syz [ 505.425264][ T5731] usb 3-1: Manufacturer: syz [ 505.425279][ T5731] usb 3-1: SerialNumber: syz [ 505.499570][ T5731] usb 3-1: config 0 descriptor?? [ 505.551335][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 505.613669][ T5731] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 505.613699][ T5731] usb 3-1: selecting invalid altsetting 1 [ 505.613715][ T5731] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 505.684931][ T5731] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 505.697997][ T5731] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 505.698054][ T5731] usb 3-1: media controller created [ 505.834080][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.884330][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 505.894950][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.935824][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 505.953071][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 506.828754][ T9511] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 506.846872][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 506.847384][ T5731] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 506.847447][ T5731] zl10353_read_register: readreg error (reg=127, ret==-32) [ 506.850305][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 506.978723][ T5731] usb 3-1: USB disconnect, device number 25 [ 507.578773][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 507.664170][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 507.676274][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 507.694943][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 507.695748][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 508.426805][ T5615] Bluetooth: hci5: command tx timeout [ 510.673648][ T5615] Bluetooth: hci6: command tx timeout [ 510.674250][ T5615] Bluetooth: hci5: command tx timeout [ 511.796584][ T9516] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.796735][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.796947][ T9516] bridge_slave_0: entered allmulticast mode [ 511.800150][ T9516] bridge_slave_0: entered promiscuous mode [ 511.850199][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.850324][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.850936][ T9516] bridge_slave_1: entered allmulticast mode [ 511.879576][ T9516] bridge_slave_1: entered promiscuous mode [ 512.017287][ T9516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.041514][ T9516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.238475][ T9516] team0: Port device team_slave_0 added [ 512.268545][ T9516] team0: Port device team_slave_1 added [ 512.747237][ T5617] Bluetooth: hci5: command tx timeout [ 512.747272][ T5617] Bluetooth: hci6: command tx timeout [ 514.827444][ T5615] Bluetooth: hci6: command tx timeout [ 514.827480][ T5615] Bluetooth: hci5: command tx timeout [ 515.159002][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.159021][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.159054][ T9516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.218809][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.218914][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.218945][ T9516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.385896][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.396776][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.396977][ T9530] bridge_slave_0: entered allmulticast mode [ 515.425498][ T9530] bridge_slave_0: entered promiscuous mode [ 515.458633][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.458771][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.458939][ T9530] bridge_slave_1: entered allmulticast mode [ 515.463081][ T9530] bridge_slave_1: entered promiscuous mode [ 515.556793][ T9516] hsr_slave_0: entered promiscuous mode [ 515.558881][ T9516] hsr_slave_1: entered promiscuous mode [ 515.559930][ T9516] debugfs: 'hsr0' already exists in 'hsr' [ 515.559954][ T9516] Cannot create hsr debugfs directory [ 515.682165][ T9530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.711180][ T9530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.841261][ T9530] team0: Port device team_slave_0 added [ 515.865251][ T9530] team0: Port device team_slave_1 added [ 515.973081][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.973099][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.973128][ T9530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.047718][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.047736][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.047768][ T9530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.907076][ T5617] Bluetooth: hci6: command tx timeout [ 521.780198][ T9530] hsr_slave_0: entered promiscuous mode [ 521.783248][ T9530] hsr_slave_1: entered promiscuous mode [ 521.805173][ T9530] debugfs: 'hsr0' already exists in 'hsr' [ 521.805198][ T9530] Cannot create hsr debugfs directory [ 535.476548][ T1516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.746262][ T5583] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 538.473019][ T9662] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 538.473153][ T9662] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 538.473175][ T9662] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 539.649411][ T5583] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 541.802252][ T1516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.151633][ T9665] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 544.747522][ T5583] usb 3-1: unable to read config index 0 descriptor/start: -110 [ 544.747566][ T5583] usb 3-1: can't read configurations, error -110 [ 544.926280][ T5583] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 545.056539][ T5583] usb 3-1: device descriptor read/64, error -32 [ 545.578674][ T5583] usb usb3-port1: attempt power cycle [ 546.016133][ T5583] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 546.036475][ T5583] usb 3-1: device descriptor read/8, error -32 [ 546.356110][ T5583] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 546.406509][ T5583] usb 3-1: device descriptor read/8, error -32 [ 546.621175][ T5583] usb usb3-port1: unable to enumerate USB device [ 546.864105][ T1516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.904805][ T9673] tipc: Started in network mode [ 546.904841][ T9673] tipc: Node identity ac14140f, cluster identity 4711 [ 546.905212][ T9673] tipc: New replicast peer: 172.30.0.2 [ 546.905472][ T9673] tipc: Enabled bearer , priority 10 [ 547.271005][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 547.429881][ T9516] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 548.556595][ T9516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.656508][ T1516] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.807234][ T822] tipc: Node number set to 2886997007 [ 549.878458][ T9516] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 549.928695][ T9516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.003050][ T9516] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 550.212926][ T9516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.229304][ T9516] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 550.338541][ T9516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.306370][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 555.366380][ T9530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 556.374703][ T9530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.938419][ T9530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 557.272052][ T9530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.363500][ T9530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 558.650353][ T9530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.758670][ T9530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 559.157283][ T9530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.839111][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.839177][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.326821][ T1516] bridge_slave_1: left allmulticast mode [ 564.326997][ T1516] bridge_slave_1: left promiscuous mode [ 564.330399][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.523828][ T9821] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1321'. [ 565.748413][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.814082][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.825383][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.837625][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.839851][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 566.909587][ T1516] bridge_slave_0: left allmulticast mode [ 566.909627][ T1516] bridge_slave_0: left promiscuous mode [ 566.909907][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.784616][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 567.839076][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 567.875511][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 567.890703][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 567.904951][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 567.951640][ T5615] Bluetooth: hci1: command tx timeout [ 568.657620][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.698663][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.732720][ T1516] bond0 (unregistering): Released all slaves [ 568.894588][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 570.026785][ T5617] Bluetooth: hci1: command tx timeout [ 570.106616][ T5617] Bluetooth: hci4: command tx timeout [ 572.106401][ T5617] Bluetooth: hci1: command tx timeout [ 572.186143][ T5617] Bluetooth: hci4: command tx timeout [ 573.086298][ T5731] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 573.239547][ T5731] usb 3-1: Using ep0 maxpacket: 32 [ 573.241983][ T5731] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 573.242008][ T5731] usb 3-1: config 0 has no interface number 0 [ 573.242052][ T5731] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.242098][ T5731] usb 3-1: config 0 interface 85 has no altsetting 0 [ 573.257946][ T5731] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 573.257976][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.257998][ T5731] usb 3-1: Product: syz [ 573.258015][ T5731] usb 3-1: Manufacturer: syz [ 573.258032][ T5731] usb 3-1: SerialNumber: syz [ 573.401119][ T5731] usb 3-1: config 0 descriptor?? [ 574.024574][ T5731] appletouch 3-1:0.85: Geyser mode initialized. [ 574.083880][ T5731] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input14 [ 574.186735][ T5617] Bluetooth: hci1: command tx timeout [ 574.277039][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 574.278808][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 574.285034][ T5617] Bluetooth: hci4: command tx timeout [ 574.329445][ T5731] usb 3-1: USB disconnect, device number 30 [ 574.329538][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 574.409421][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 576.314628][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 576.346044][ T5617] Bluetooth: hci4: command tx timeout [ 576.665184][ T38] audit: type=1326 audit(1785175627.029:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4aafde99 code=0x7ffc0000 [ 576.665241][ T38] audit: type=1326 audit(1785175627.029:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4aafde99 code=0x7ffc0000 [ 576.745098][ T38] audit: type=1326 audit(1785175627.109:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c4aafde99 code=0x7ffc0000 [ 576.745151][ T38] audit: type=1326 audit(1785175627.109:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4aafde99 code=0x7ffc0000 [ 576.745217][ T38] audit: type=1326 audit(1785175627.109:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4aafde99 code=0x7ffc0000 [ 576.750603][ T38] audit: type=1326 audit(1785175627.109:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c4aafde99 code=0x7ffc0000 [ 576.750655][ T38] audit: type=1326 audit(1785175627.119:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4aafde99 code=0x7ffc0000 [ 576.888047][ T38] audit: type=1326 audit(1785175627.239:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c4aabe6ce code=0x7ffc0000 [ 576.891769][ T38] audit: type=1326 audit(1785175627.259:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c4aafdb2b code=0x7ffc0000 [ 576.896746][ T38] audit: type=1326 audit(1785175627.269:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9926 comm="syz.2.1336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c4aafdb2b code=0x7ffc0000 [ 577.644444][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.644557][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.644717][ T9834] bridge_slave_0: entered allmulticast mode [ 577.678098][ T9834] bridge_slave_0: entered promiscuous mode [ 577.684369][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.684541][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.684727][ T9820] bridge_slave_0: entered allmulticast mode [ 577.719072][ T9820] bridge_slave_0: entered promiscuous mode [ 577.762697][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.762827][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.763013][ T9834] bridge_slave_1: entered allmulticast mode [ 577.803325][ T9834] bridge_slave_1: entered promiscuous mode [ 577.813042][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.813161][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.813344][ T9820] bridge_slave_1: entered allmulticast mode [ 577.843079][ T9820] bridge_slave_1: entered promiscuous mode [ 578.102364][ T9834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.142326][ T9820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.162449][ T9834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.181765][ T9820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.449018][ T5615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 579.527662][ T5615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 579.532140][ T5615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 579.543462][ T5615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 579.552368][ T5615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 580.231150][ T5731] appletouch 3-1:0.85: input: appletouch disconnected [ 581.300030][ T9834] team0: Port device team_slave_0 added [ 581.432851][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 581.650206][ T5615] Bluetooth: hci7: command tx timeout [ 583.022089][ T9820] team0: Port device team_slave_0 added [ 583.055684][ T9834] team0: Port device team_slave_1 added [ 583.757486][ T5615] Bluetooth: hci7: command tx timeout [ 585.321731][ T9984] netlink: 'syz.2.1345': attribute type 2 has an invalid length. [ 585.672102][ T9820] team0: Port device team_slave_1 added [ 585.787360][ T5615] Bluetooth: hci7: command tx timeout [ 586.697665][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.697685][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.697717][ T9834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.870743][ T5615] Bluetooth: hci7: command tx timeout [ 588.466950][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1353'. [ 588.542835][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.542852][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.542880][ T9820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.545299][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.545312][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.545341][ T9834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.556122][ T5731] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 588.670523][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.670539][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.670566][ T9820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.716133][ T5731] usb 3-1: device descriptor read/64, error -71 [ 588.966964][ T5731] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 589.096241][ T5731] usb 3-1: device descriptor read/64, error -71 [ 589.177978][T10013] tipc: New replicast peer: 127.0.0.1 [ 589.199778][T10013] tipc: Enabled bearer , priority 10 [ 589.207584][ T5731] usb usb3-port1: attempt power cycle [ 589.592582][ T5731] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 589.609874][ T5731] usb 3-1: device descriptor read/8, error -71 [ 589.763234][ T9820] hsr_slave_0: entered promiscuous mode [ 589.776585][ T9820] hsr_slave_1: entered promiscuous mode [ 589.779344][ T9820] debugfs: 'hsr0' already exists in 'hsr' [ 589.779370][ T9820] Cannot create hsr debugfs directory [ 589.839312][ T9834] hsr_slave_0: entered promiscuous mode [ 589.845133][ T9834] hsr_slave_1: entered promiscuous mode [ 589.860214][ T9834] debugfs: 'hsr0' already exists in 'hsr' [ 589.860239][ T9834] Cannot create hsr debugfs directory [ 589.879390][ T5731] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 589.978597][ T5731] usb 3-1: device descriptor read/8, error -71 [ 590.088118][ T5731] usb usb3-port1: unable to enumerate USB device [ 591.258729][ T1516] hsr_slave_0: left promiscuous mode [ 591.316026][ T1516] hsr_slave_1: left promiscuous mode [ 591.317327][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.317451][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.577559][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.577591][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.103472][ T1516] veth1_macvtap: left promiscuous mode [ 593.103826][ T1516] veth0_macvtap: left promiscuous mode [ 593.104110][ T1516] veth1_vlan: left promiscuous mode [ 593.104398][ T1516] veth0_vlan: left promiscuous mode [ 594.126241][ T5731] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 594.306122][ T5731] usb 4-1: device descriptor read/64, error -71 [ 594.546316][ T5731] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 594.677832][ T5731] usb 4-1: device descriptor read/64, error -71 [ 594.800795][ T5731] usb usb4-port1: attempt power cycle [ 595.086786][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 595.136208][ T5731] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 595.152059][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 595.162666][ T5731] usb 4-1: device descriptor read/8, error -71 [ 595.416317][ T5731] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 595.438067][ T5731] usb 4-1: device descriptor read/8, error -71 [ 595.550941][ T5731] usb usb4-port1: unable to enumerate USB device [ 597.636143][ T5974] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 597.685832][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.693623][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.693782][ T9948] bridge_slave_0: entered allmulticast mode [ 597.695757][ T9948] bridge_slave_0: entered promiscuous mode [ 597.719033][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.719237][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.719426][ T9948] bridge_slave_1: entered allmulticast mode [ 597.721826][ T9948] bridge_slave_1: entered promiscuous mode [ 597.766125][ T5974] usb 4-1: device descriptor read/64, error -71 [ 597.793877][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.809136][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.006174][ T5974] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 598.029275][ T9948] team0: Port device team_slave_0 added [ 598.032397][ T9948] team0: Port device team_slave_1 added [ 598.137044][ T5974] usb 4-1: device descriptor read/64, error -71 [ 598.247929][ T5974] usb usb4-port1: attempt power cycle [ 598.287834][ T1516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.377734][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.377748][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.377767][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.589543][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.589556][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.589576][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.596193][ T5974] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 598.636789][ T5974] usb 4-1: device descriptor read/8, error -71 [ 598.849995][ T1516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.886113][ T5974] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 598.908086][ T5974] usb 4-1: device descriptor read/8, error -71 [ 598.911013][ T9948] hsr_slave_0: entered promiscuous mode [ 598.912043][ T9948] hsr_slave_1: entered promiscuous mode [ 598.912865][ T9948] debugfs: 'hsr0' already exists in 'hsr' [ 598.912880][ T9948] Cannot create hsr debugfs directory [ 599.016492][ T5974] usb usb4-port1: unable to enumerate USB device [ 599.279257][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'. [ 599.280979][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 599.579183][ T1516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.301456][ T1516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.354850][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 612.592741][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 612.730303][T10136] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1386'. [ 614.194750][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 614.195063][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 614.782920][ T1516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.160399][ T1516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.620471][ T1516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.683363][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 615.715019][ T9820] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 615.800058][ T9820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.811268][ T9820] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 615.882426][ T9820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.025217][ T1516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.083519][ T9820] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 616.120652][ T9820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.260938][ T9820] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 616.301290][ T9820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.302570][ T5873] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.819779][ T9820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.144339][ T9820] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.304590][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 617.333560][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 617.439491][ T829] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.439702][ T829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.674082][ T2212] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.674206][ T2212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.756517][ T1516] bridge_slave_1: left allmulticast mode [ 618.756550][ T1516] bridge_slave_1: left promiscuous mode [ 618.756785][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.951182][ T1516] bridge_slave_0: left allmulticast mode [ 618.951212][ T1516] bridge_slave_0: left promiscuous mode [ 618.951401][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.097044][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 619.256104][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 619.258546][ T31] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 619.258568][ T31] usb 3-1: config 0 has no interface number 0 [ 619.258610][ T31] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.258648][ T31] usb 3-1: config 0 interface 85 has no altsetting 0 [ 619.260889][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 619.260915][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.260933][ T31] usb 3-1: Product: syz [ 619.260950][ T31] usb 3-1: Manufacturer: syz [ 619.260965][ T31] usb 3-1: SerialNumber: syz [ 619.277347][ T31] usb 3-1: config 0 descriptor?? [ 619.406259][ T1516] bridge_slave_1: left allmulticast mode [ 619.406296][ T1516] bridge_slave_1: left promiscuous mode [ 619.406988][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.517793][ T1516] bridge_slave_0: left allmulticast mode [ 619.517839][ T1516] bridge_slave_0: left promiscuous mode [ 619.518103][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.746260][ T1516] bridge_slave_1: left allmulticast mode [ 619.746296][ T1516] bridge_slave_1: left promiscuous mode [ 619.746514][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.857757][ T1516] bridge_slave_0: left allmulticast mode [ 619.857796][ T1516] bridge_slave_0: left promiscuous mode [ 619.858079][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.949677][ T31] appletouch 3-1:0.85: Geyser mode initialized. [ 619.951835][ T31] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input15 [ 620.152407][ T31] usb 3-1: USB disconnect, device number 35 [ 620.241664][ T31] appletouch 3-1:0.85: input: appletouch disconnected [ 621.209611][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.287397][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.309366][ T1516] bond0 (unregistering): Released all slaves [ 621.678475][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.807660][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.867789][ T1516] bond0 (unregistering): Released all slaves [ 622.329035][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.406630][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.467777][ T1516] bond0 (unregistering): Released all slaves [ 623.020914][ T1516] bond0 (unregistering): Released all slaves [ 623.084584][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 623.112440][ T9834] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 623.251345][ T9834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.280360][ T9834] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 623.345501][ T9834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.399383][ T9834] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 623.474560][ T9834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.491972][ T1516] tipc: Disabling bearer [ 623.505391][ T1516] tipc: Left network mode [ 623.509345][ T9834] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 623.565180][ T9834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.029127][ T9948] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 624.060694][ T9948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.102974][ T1516] tipc: Disabling bearer [ 624.103126][ T1516] tipc: Left network mode [ 624.103174][ T9948] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 624.181169][ T9948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 624.184481][ T9948] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 624.235244][ T9948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 624.299951][ T9948] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 624.304968][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.305026][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.341413][ T9948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 626.218212][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.261984][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.289607][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.330473][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.331240][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.396092][ T199] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 626.520617][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 626.589837][ T9834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.676174][ T199] usb 3-1: Using ep0 maxpacket: 32 [ 626.679045][ T199] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 626.679066][ T199] usb 3-1: config 0 has no interface number 0 [ 626.679102][ T199] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.679127][ T199] usb 3-1: config 0 interface 85 has no altsetting 0 [ 626.681097][ T199] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 626.681121][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.681139][ T199] usb 3-1: Product: syz [ 626.681153][ T199] usb 3-1: Manufacturer: syz [ 626.681166][ T199] usb 3-1: SerialNumber: syz [ 626.694113][ T199] usb 3-1: config 0 descriptor?? [ 627.276927][ T9834] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.348794][ T199] appletouch 3-1:0.85: Geyser mode initialized. [ 627.354846][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.359245][ T199] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input16 [ 627.383818][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.470324][ T9948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.550646][ T5583] usb 3-1: USB disconnect, device number 36 [ 627.550764][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 627.693434][ T5583] appletouch 3-1:0.85: input: appletouch disconnected [ 627.973141][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 627.975833][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 627.994732][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 628.010830][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 628.011460][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 628.432209][ T5615] Bluetooth: hci0: command tx timeout [ 628.448491][ T9948] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.469571][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.469789][ T5865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.758445][T10365] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 628.758485][T10365] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 628.758511][T10365] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 628.771649][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.818388][ T5865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.994307][T10361] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 629.721856][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 629.876093][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 630.186162][ T5615] Bluetooth: hci1: command tx timeout [ 630.436163][ T1516] hsr_slave_0: left promiscuous mode [ 630.478365][ T1516] hsr_slave_1: left promiscuous mode [ 630.479585][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.479602][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.506172][ T5615] Bluetooth: hci0: command tx timeout [ 630.527031][ T1516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.527061][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.686224][ T1516] hsr_slave_0: left promiscuous mode [ 630.706176][ T1516] hsr_slave_1: left promiscuous mode [ 630.707009][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.748084][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.906287][ T1516] hsr_slave_0: left promiscuous mode [ 630.946687][ T1516] hsr_slave_1: left promiscuous mode [ 631.338020][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.686969][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.877799][ T1516] hsr_slave_0: left promiscuous mode [ 631.917229][ T1516] hsr_slave_1: left promiscuous mode [ 632.042219][ T1516] veth1_macvtap: left promiscuous mode [ 632.042301][ T1516] veth0_macvtap: left promiscuous mode [ 632.042455][ T1516] veth1_vlan: left promiscuous mode [ 632.042561][ T1516] veth0_vlan: left promiscuous mode [ 632.260510][ T1516] veth1_macvtap: left promiscuous mode [ 632.260642][ T1516] veth0_macvtap: left promiscuous mode [ 632.277510][ T5615] Bluetooth: hci1: command tx timeout [ 632.320345][ T1516] veth1_vlan: left promiscuous mode [ 632.354903][ T1516] veth0_vlan: left promiscuous mode [ 632.595165][T10397] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 632.595244][T10397] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 632.595423][T10397] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 632.657672][ T5615] Bluetooth: hci0: command tx timeout [ 633.867610][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 633.926663][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 634.346229][ T5617] Bluetooth: hci1: command tx timeout [ 634.537331][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 634.598962][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 634.666094][ T5617] Bluetooth: hci0: command tx timeout [ 634.952625][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 634.999404][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 635.033318][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 635.044508][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 635.045681][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 635.388682][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 635.436576][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 636.436391][ T5617] Bluetooth: hci1: command tx timeout [ 637.170369][ T5617] Bluetooth: hci4: command tx timeout [ 638.690555][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 638.953311][T10331] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.953459][T10331] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.953649][T10331] bridge_slave_0: entered allmulticast mode [ 638.990405][T10331] bridge_slave_0: entered promiscuous mode [ 639.058524][T10331] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.058730][T10331] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.058956][T10331] bridge_slave_1: entered allmulticast mode [ 639.061972][T10331] bridge_slave_1: entered promiscuous mode [ 639.226107][ T5617] Bluetooth: hci4: command tx timeout [ 639.231679][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 639.274391][T10331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.337604][T10331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.344749][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.467358][T10351] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.500498][T10351] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.500771][T10351] bridge_slave_0: entered allmulticast mode [ 639.524761][T10351] bridge_slave_0: entered promiscuous mode [ 639.610868][T10351] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.610977][T10351] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.611141][T10351] bridge_slave_1: entered allmulticast mode [ 639.643663][T10351] bridge_slave_1: entered promiscuous mode [ 639.676239][T10331] team0: Port device team_slave_0 added [ 639.736041][ T5583] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 639.801538][T10331] team0: Port device team_slave_1 added [ 639.861162][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.901782][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.904033][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.905581][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.907806][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 639.942757][ T5583] usb 3-1: not running at top speed; connect to a high speed hub [ 639.980184][ T5583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 639.980214][ T5583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 640.034677][ T5583] usb 3-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 640.034701][ T5583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.034720][ T5583] usb 3-1: Product: syz [ 640.034733][ T5583] usb 3-1: Manufacturer: syz [ 640.034747][ T5583] usb 3-1: SerialNumber: syz [ 640.120949][T10468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 640.121110][T10468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 640.461215][T10351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.760049][T10351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.761152][T10331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.761165][T10331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.761193][T10331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.866652][ T5583] ax88179_178a 3-1:1.0: probe with driver ax88179_178a failed with error -71 [ 640.896977][T10331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.896994][T10331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.897024][T10331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.960602][ T5583] usb 3-1: USB disconnect, device number 37 [ 641.306352][ T5617] Bluetooth: hci4: command tx timeout [ 641.441527][T10351] team0: Port device team_slave_0 added [ 641.471369][T10351] team0: Port device team_slave_1 added [ 641.716213][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 641.810169][T10331] hsr_slave_0: entered promiscuous mode [ 641.819338][T10331] hsr_slave_1: entered promiscuous mode [ 641.820935][T10331] debugfs: 'hsr0' already exists in 'hsr' [ 641.820987][T10331] Cannot create hsr debugfs directory [ 641.855679][T10351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.855690][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.855710][T10351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.921646][T10351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.921659][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.921680][T10351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.266120][ T5617] Bluetooth: hci5: command tx timeout [ 642.419449][T10351] hsr_slave_0: entered promiscuous mode [ 642.420354][T10351] hsr_slave_1: entered promiscuous mode [ 642.421011][T10351] debugfs: 'hsr0' already exists in 'hsr' [ 642.421027][T10351] Cannot create hsr debugfs directory [ 642.436710][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.437178][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.437673][T10402] bridge_slave_0: entered allmulticast mode [ 642.443716][T10402] bridge_slave_0: entered promiscuous mode [ 642.504273][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.504383][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.504548][T10402] bridge_slave_1: entered allmulticast mode [ 642.554181][T10402] bridge_slave_1: entered promiscuous mode [ 642.731176][T10402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.799167][T10402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.060771][T10402] team0: Port device team_slave_0 added [ 643.090808][T10402] team0: Port device team_slave_1 added [ 643.386335][ T5617] Bluetooth: hci4: command tx timeout [ 643.754426][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 643.770960][T10402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.770975][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.770997][T10402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.846051][T10402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.846068][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.846098][T10402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.151826][ T1516] IPVS: stop unused estimator thread 0... [ 644.305164][T10402] hsr_slave_0: entered promiscuous mode [ 644.312816][T10402] hsr_slave_1: entered promiscuous mode [ 644.313574][T10402] debugfs: 'hsr0' already exists in 'hsr' [ 644.313590][T10402] Cannot create hsr debugfs directory [ 644.346117][ T5617] Bluetooth: hci5: command tx timeout [ 645.291823][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 645.677044][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.677122][T10469] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.677289][T10469] bridge_slave_0: entered allmulticast mode [ 645.679183][T10469] bridge_slave_0: entered promiscuous mode [ 645.739083][T10469] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.739280][T10469] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.739421][T10469] bridge_slave_1: entered allmulticast mode [ 645.741176][T10469] bridge_slave_1: entered promiscuous mode [ 646.029108][T10469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.055010][T10469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.426190][ T5617] Bluetooth: hci5: command tx timeout [ 646.621210][T10469] team0: Port device team_slave_0 added [ 646.638219][T10469] team0: Port device team_slave_1 added [ 646.857548][T10469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.857565][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.857589][T10469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.864328][T10469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.864342][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.864368][T10469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.255262][T10469] hsr_slave_0: entered promiscuous mode [ 647.259225][T10469] hsr_slave_1: entered promiscuous mode [ 647.261520][T10469] debugfs: 'hsr0' already exists in 'hsr' [ 647.261585][T10469] Cannot create hsr debugfs directory [ 648.056229][ T1516] bridge_slave_1: left allmulticast mode [ 648.056262][ T1516] bridge_slave_1: left promiscuous mode [ 648.056487][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.208368][ T1516] bridge_slave_0: left allmulticast mode [ 648.208415][ T1516] bridge_slave_0: left promiscuous mode [ 648.208661][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.476245][ T1516] bridge_slave_1: left allmulticast mode [ 648.476270][ T1516] bridge_slave_1: left promiscuous mode [ 648.476437][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.506137][ T5617] Bluetooth: hci5: command tx timeout [ 648.588116][ T1516] bridge_slave_0: left allmulticast mode [ 648.588142][ T1516] bridge_slave_0: left promiscuous mode [ 648.588310][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.836280][ T1516] bridge_slave_1: left allmulticast mode [ 648.836312][ T1516] bridge_slave_1: left promiscuous mode [ 648.836520][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.957045][ T1516] bridge_slave_0: left allmulticast mode [ 648.957068][ T1516] bridge_slave_0: left promiscuous mode [ 648.957223][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.816814][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.897111][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.918101][ T1516] bond0 (unregistering): Released all slaves [ 650.408380][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.486548][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.548938][ T1516] bond0 (unregistering): Released all slaves [ 651.056625][ T1516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.116630][ T1516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.158219][ T1516] bond0 (unregistering): Released all slaves [ 651.189451][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 651.633190][T10331] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 651.727732][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.751067][T10331] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 651.861308][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.043198][T10331] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 652.070805][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.071921][T10331] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 652.175873][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 652.336313][ T1516] hsr_slave_0: left promiscuous mode [ 652.376119][ T1516] hsr_slave_1: left promiscuous mode [ 652.377867][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.398665][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.596087][ T1516] hsr_slave_0: left promiscuous mode [ 652.616126][ T1516] hsr_slave_1: left promiscuous mode [ 652.616803][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.656817][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.796100][ T1516] hsr_slave_0: left promiscuous mode [ 652.816090][ T1516] hsr_slave_1: left promiscuous mode [ 652.816738][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.856953][ T1516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.427360][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 653.467499][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 653.957009][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 654.007387][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 654.466811][ T1516] team0 (unregistering): Port device team_slave_1 removed [ 654.516665][ T1516] team0 (unregistering): Port device team_slave_0 removed [ 654.819356][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 655.203879][T10331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.222338][T10331] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.248145][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.248341][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.281674][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.281778][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.474970][T10351] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 656.523907][T10351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.534294][T10351] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 656.575659][T10351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.590348][T10351] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 656.683274][T10351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.694482][T10351] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 656.763125][T10351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 657.253131][T10331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.275443][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 657.291532][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 657.334143][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 657.365665][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 657.374988][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 657.883947][T10402] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 657.961616][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.996073][T10402] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 658.100300][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.130428][T10402] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 658.186009][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.246749][T10402] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 658.290159][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.685093][T10469] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 658.725096][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.760742][T10469] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 658.789584][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.795882][T10469] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 658.840876][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.859667][T10469] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 658.905152][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.915566][T10331] veth0_vlan: entered promiscuous mode [ 658.991215][T10351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.021835][T10331] veth1_vlan: entered promiscuous mode [ 659.178026][T10351] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.229346][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.229533][ T9616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.308924][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.309030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.374274][T10331] veth0_macvtap: entered promiscuous mode [ 659.442629][T10402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.473673][T10331] veth1_macvtap: entered promiscuous mode [ 659.505614][T10643] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.505789][T10643] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.520493][T10643] bridge_slave_0: entered allmulticast mode [ 659.522369][T10643] bridge_slave_0: entered promiscuous mode [ 659.546923][ T5617] Bluetooth: hci6: command tx timeout [ 659.569265][T10643] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.569401][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.569578][T10643] bridge_slave_1: entered allmulticast mode [ 659.572348][T10643] bridge_slave_1: entered promiscuous mode [ 659.687324][T10643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.725764][T10643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.788200][T10402] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.814236][T10331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.831994][T10643] team0: Port device team_slave_0 added [ 659.844519][T10643] team0: Port device team_slave_1 added [ 659.895495][T10331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.979627][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.979756][ T9616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.023496][T10643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.023533][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.023563][T10643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.074953][T10469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.098929][T10643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.098940][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.098959][T10643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.103032][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.105203][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.105326][ T1516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.206557][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.215535][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.253040][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.602469][T10643] hsr_slave_0: entered promiscuous mode [ 660.603724][T10643] hsr_slave_1: entered promiscuous mode [ 660.604585][T10643] debugfs: 'hsr0' already exists in 'hsr' [ 660.604607][T10643] Cannot create hsr debugfs directory [ 660.628647][T10469] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.011626][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.013585][ T9616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.330929][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.331074][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.440299][ T9617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.440321][ T9617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.628520][ T5617] Bluetooth: hci6: command tx timeout [ 661.875199][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.875222][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.164579][T10351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.103021][T10643] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 663.164087][T10643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 663.729991][ T5617] Bluetooth: hci6: command tx timeout [ 663.773276][T10643] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 663.934006][T10643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 663.950654][T10643] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 664.000281][T10643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.005549][T10643] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 664.129411][T10643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.451514][T10402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.667122][T10469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.709814][T10351] veth0_vlan: entered promiscuous mode [ 664.923122][T10351] veth1_vlan: entered promiscuous mode [ 665.500631][T10643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.503744][T10351] veth0_macvtap: entered promiscuous mode [ 665.617973][T10351] veth1_macvtap: entered promiscuous mode [ 665.748197][T10643] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.788503][ T5617] Bluetooth: hci6: command tx timeout [ 665.830005][ T829] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.830190][ T829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.872027][T10351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.872549][T10402] veth0_vlan: entered promiscuous mode [ 665.901502][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.905784][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.934896][T10351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.066580][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.072808][T10402] veth1_vlan: entered promiscuous mode [ 666.098431][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.119625][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.141182][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.153226][T10469] veth0_vlan: entered promiscuous mode [ 666.246135][ T5717] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 666.396344][ T5717] usb 6-1: Using ep0 maxpacket: 32 [ 666.403528][ T5717] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 666.403558][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.403580][ T5717] usb 6-1: Product: syz [ 666.403595][ T5717] usb 6-1: Manufacturer: syz [ 666.403611][ T5717] usb 6-1: SerialNumber: syz [ 666.476192][ T5717] usb 6-1: config 0 descriptor?? [ 666.513070][T10469] veth1_vlan: entered promiscuous mode [ 666.716261][ T822] usb 6-1: USB disconnect, device number 2 [ 666.918377][T10402] veth0_macvtap: entered promiscuous mode [ 666.957176][ T9614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.957196][ T9614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.009465][T10402] veth1_macvtap: entered promiscuous mode [ 667.190592][T10469] veth0_macvtap: entered promiscuous mode [ 667.292979][T10752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.293000][T10752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.334096][T10469] veth1_macvtap: entered promiscuous mode [ 667.383166][T10402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.418329][T10402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.497776][ T829] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.517521][T10469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.519225][ T829] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.525190][ T829] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.559791][ T829] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.579386][T10469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.675475][T10752] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.742941][T10752] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.828390][T10752] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.833767][ T829] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.916757][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.916777][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.050241][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1444'. [ 669.506271][ T829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.506307][ T829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.183698][T10643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.202866][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.202885][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.929151][ T829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.929171][ T829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.541326][ T5717] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 674.044107][T10910] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 674.196025][ T5717] usb 7-1: Using ep0 maxpacket: 32 [ 674.203023][ T5717] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 674.203052][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.203072][ T5717] usb 7-1: Product: syz [ 674.203086][ T5717] usb 7-1: Manufacturer: syz [ 674.203100][ T5717] usb 7-1: SerialNumber: syz [ 674.408741][T10909] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 674.408769][T10909] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 674.408781][T10909] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 674.464088][ T5717] usb 7-1: config 0 descriptor?? [ 674.679243][ T37] usb 7-1: USB disconnect, device number 2 [ 674.910763][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1337'. [ 675.172962][ T5617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 675.173000][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 675.173030][ T5617] Tainted: [L]=SOFTLOCKUP [ 675.173036][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 675.173049][ T5617] Workqueue: hci0 hci_rx_work [ 675.173170][ T5617] Call Trace: [ 675.173180][ T5617] [ 675.173190][ T5617] dump_stack_lvl+0xe8/0x150 [ 675.173227][ T5617] sysfs_create_dir_ns+0x271/0x2a0 [ 675.173254][ T5617] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 675.173278][ T5617] ? rt_spin_unlock+0x163/0x200 [ 675.173311][ T5617] kobject_add_internal+0x62c/0xce0 [ 675.173345][ T5617] kobject_add+0x163/0x240 [ 675.173368][ T5617] ? rt_spin_unlock+0x157/0x200 [ 675.173400][ T5617] ? __pfx_kobject_add+0x10/0x10 [ 675.173434][ T5617] ? get_device_parent+0x370/0x3a0 [ 675.173570][ T5617] device_add+0x3fa/0xb80 [ 675.173601][ T5617] hci_conn_add_sysfs+0xd5/0x210 [ 675.173684][ T5617] le_conn_complete_evt+0xfef/0x1580 [ 675.173770][ T5617] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 675.173802][ T5617] ? lockdep_hardirqs_on+0x7a/0x110 [ 675.173828][ T5617] ? rt_mutex_slowunlock+0x219/0x460 [ 675.173859][ T5617] ? skb_pull_data+0xf0/0x200 [ 675.173934][ T5617] hci_le_enh_conn_complete_evt+0x189/0x490 [ 675.173962][ T5617] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 675.173993][ T5617] hci_event_packet+0x67a/0xf10 [ 675.174064][ T5617] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 675.174093][ T5617] ? __pfx_hci_event_packet+0x10/0x10 [ 675.174118][ T5617] ? rt_spin_unlock+0x157/0x200 [ 675.174167][ T5617] ? hci_send_to_monitor+0xe2/0x590 [ 675.174199][ T5617] hci_rx_work+0x3ee/0x1020 [ 675.174227][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 675.174252][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 675.174298][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 675.174328][ T5617] ? assign_work+0x3cf/0x5d0 [ 675.174355][ T5617] worker_thread+0xa47/0xfb0 [ 675.174402][ T5617] kthread+0x388/0x470 [ 675.174434][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 675.174456][ T5617] ? __pfx_kthread+0x10/0x10 [ 675.174487][ T5617] ret_from_fork+0x514/0xb70 [ 675.174525][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 675.174564][ T5617] ? __switch_to+0xc89/0x1420 [ 675.174591][ T5617] ? __pfx_kthread+0x10/0x10 [ 675.174619][ T5617] ret_from_fork_asm+0x1a/0x30 [ 675.174651][ T5617] [ 675.179122][ T5617] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 675.179171][ T5617] Bluetooth: hci0: failed to register connection device [ 675.691214][T10643] veth0_vlan: entered promiscuous mode [ 675.911616][T10643] veth1_vlan: entered promiscuous mode [ 676.070359][T10922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 676.071263][T10922] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 676.207386][T10643] veth0_macvtap: entered promiscuous mode [ 676.233894][T10643] veth1_macvtap: entered promiscuous mode [ 676.273935][T10922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 676.282004][T10922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 676.282730][T10922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 676.449369][T10643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.489712][T10643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.560831][ T9614] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.561557][ T9614] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.562829][ T9614] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.604178][ T9614] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.766475][T10922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 677.039065][T10922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 677.205325][T10922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.205461][T10922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 677.604452][T10922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 677.665338][T10922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 677.665453][T10922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 677.801710][T10922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 677.859763][T10922] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 677.859922][T10922] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 677.944944][T10922] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 678.019667][T10922] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 678.020823][T10922] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 678.107912][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 678.121092][T10922] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 678.346408][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 678.346459][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 678.640098][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.640120][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.305635][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 679.706381][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 679.715974][ T2183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.716000][ T2183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.866508][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 680.280475][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 680.280532][ T5615] Bluetooth: hci6: command 0x0c1a tx timeout [ 680.426957][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 680.776112][ T5583] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 680.926104][ T5583] usb 7-1: Using ep0 maxpacket: 32 [ 681.012285][ T5583] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 681.012315][ T5583] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.012334][ T5583] usb 7-1: Product: syz [ 681.012347][ T5583] usb 7-1: Manufacturer: syz [ 681.012361][ T5583] usb 7-1: SerialNumber: syz [ 681.095893][ T5583] usb 7-1: config 0 descriptor?? [ 681.123397][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1460'. [ 681.166356][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1462'. [ 681.324394][ T31] usb 7-1: USB disconnect, device number 3 [ 681.410707][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 681.786398][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 681.933214][T10984] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 681.933501][T10984] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 681.933614][T10984] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 681.946332][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 681.949511][T10986] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 682.023836][ T9532] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 682.346418][ T5615] Bluetooth: hci6: command 0x0c1a tx timeout [ 682.522366][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 682.736054][ T9532] usb 9-1: Using ep0 maxpacket: 8 [ 682.737856][ T9532] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 682.737882][ T9532] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 682.737905][ T9532] usb 9-1: config 179 has no interface number 0 [ 682.737951][ T9532] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 682.737968][ T9532] usb 9-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 682.737998][ T9532] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 682.738015][ T9532] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.977317][ T199] usb 9-1: USB disconnect, device number 2 [ 683.470460][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 684.364531][ T5617] Bluetooth: hci5: command 0x0c1a tx timeout [ 684.364581][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 684.438043][ T5617] Bluetooth: hci6: command 0x0c1a tx timeout [ 684.596413][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 684.850708][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1472'. [ 685.297040][T11023] netlink: 288 bytes leftover after parsing attributes in process `syz.8.1476'. [ 685.324146][T11023] netlink: 288 bytes leftover after parsing attributes in process `syz.8.1476'. [ 685.710674][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.710750][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.129220][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1487'. [ 687.951534][ T9532] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 688.116035][ T9532] usb 7-1: Using ep0 maxpacket: 32 [ 688.118802][ T9532] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 688.118831][ T9532] usb 7-1: config 0 has no interface number 0 [ 688.118879][ T9532] usb 7-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 688.118909][ T9532] usb 7-1: config 0 interface 85 has no altsetting 0 [ 688.122460][ T9532] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 688.122490][ T9532] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.122511][ T9532] usb 7-1: Product: syz [ 688.122528][ T9532] usb 7-1: Manufacturer: syz [ 688.122544][ T9532] usb 7-1: SerialNumber: syz [ 688.356251][ T9532] usb 7-1: config 0 descriptor?? [ 688.389631][ T9532] appletouch 7-1:0.85: Could not find int-in endpoint [ 688.389677][ T9532] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 688.411947][ T9532] usbhid 7-1:0.85: couldn't find an input interrupt endpoint [ 688.672122][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1498'. [ 689.859770][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1510'. [ 690.032413][T11114] key id 000004d2 not found [ 690.737848][ T9532] usb 7-1: USB disconnect, device number 4 [ 690.867636][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1521'. [ 692.370708][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1537'. [ 692.522384][T11178] key id 00000000 not found [ 694.030838][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 694.098189][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 694.141592][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 694.159189][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 694.159892][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 694.196266][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1548'. [ 695.146032][ T5732] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 695.316064][ T5732] usb 10-1: Using ep0 maxpacket: 32 [ 695.318068][ T5732] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.318094][ T5732] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 695.320384][ T5732] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 695.320410][ T5732] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.320430][ T5732] usb 10-1: Product: syz [ 695.320445][ T5732] usb 10-1: Manufacturer: syz [ 695.320459][ T5732] usb 10-1: SerialNumber: syz [ 695.392078][ T5732] usb 10-1: config 0 descriptor?? [ 695.604035][ T37] usb 10-1: USB disconnect, device number 2 [ 695.799046][T11195] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.799199][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.799335][T11195] bridge_slave_0: entered allmulticast mode [ 695.801566][T11195] bridge_slave_0: entered promiscuous mode [ 695.804780][T11195] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.805028][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.805204][T11195] bridge_slave_1: entered allmulticast mode [ 695.832694][T11195] bridge_slave_1: entered promiscuous mode [ 696.045148][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1557'. [ 696.045201][T11242] openvswitch: netlink: Key 2 has unexpected len 12 expected 4 [ 696.072494][T11195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.091354][T11195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.327881][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1558'. [ 696.346051][ T5615] Bluetooth: hci7: command tx timeout [ 696.364889][T11195] team0: Port device team_slave_0 added [ 696.375506][T11195] team0: Port device team_slave_1 added [ 696.595293][T11195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.595310][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.595335][T11195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.615576][T11195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.615635][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.615682][T11195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.031487][T11195] hsr_slave_0: entered promiscuous mode [ 697.032404][T11195] hsr_slave_1: entered promiscuous mode [ 697.033006][T11195] debugfs: 'hsr0' already exists in 'hsr' [ 697.033022][T11195] Cannot create hsr debugfs directory [ 697.079067][ T199] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 697.237711][ T199] usb 8-1: Using ep0 maxpacket: 8 [ 697.253169][ T199] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 697.253193][ T199] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 697.253213][ T199] usb 8-1: config 179 has no interface number 0 [ 697.253256][ T199] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 697.253279][ T199] usb 8-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 697.253382][ T199] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 697.253407][ T199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.741409][ T37] usb 8-1: USB disconnect, device number 2 [ 697.823334][T10924] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 697.976056][T10924] usb 10-1: Using ep0 maxpacket: 32 [ 697.978516][T10924] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 697.978538][T10924] usb 10-1: config 0 has no interface number 0 [ 697.978571][T10924] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.978594][T10924] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 697.978614][T10924] usb 10-1: config 0 interface 85 has no altsetting 0 [ 697.996821][T10924] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 697.996897][T10924] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.997016][T10924] usb 10-1: Product: syz [ 697.997058][T10924] usb 10-1: Manufacturer: syz [ 697.997098][T10924] usb 10-1: SerialNumber: syz [ 698.076851][T10924] usb 10-1: config 0 descriptor?? [ 698.436083][ T5615] Bluetooth: hci7: command tx timeout [ 698.532314][T10924] appletouch 10-1:0.85: Geyser mode initialized. [ 698.547735][T10924] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input17 [ 698.730772][ T199] usb 10-1: USB disconnect, device number 3 [ 698.978943][ T199] appletouch 10-1:0.85: input: appletouch disconnected [ 699.458386][ T5732] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 699.481068][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1569'. [ 699.612584][ T5732] usb 7-1: Using ep0 maxpacket: 32 [ 699.615167][ T5732] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.615190][ T5732] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 699.645238][ T5732] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 699.645264][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.645283][ T5732] usb 7-1: Product: syz [ 699.645297][ T5732] usb 7-1: Manufacturer: syz [ 699.645311][ T5732] usb 7-1: SerialNumber: syz [ 699.729730][ T5732] usb 7-1: config 0 descriptor?? [ 699.945405][ T5732] usb 7-1: USB disconnect, device number 5 [ 700.176042][ T37] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 700.326009][ T37] usb 8-1: Using ep0 maxpacket: 32 [ 700.330625][ T37] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.330647][ T37] usb 8-1: config 0 has no interface number 0 [ 700.332984][ T37] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 700.333013][ T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.333032][ T37] usb 8-1: Product: syz [ 700.333045][ T37] usb 8-1: Manufacturer: syz [ 700.333060][ T37] usb 8-1: SerialNumber: syz [ 700.355596][ T37] usb 8-1: config 0 descriptor?? [ 700.403170][ T37] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 700.403195][ T37] usb 8-1: selecting invalid altsetting 1 [ 700.403210][ T37] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 700.520637][ T5615] Bluetooth: hci7: command tx timeout [ 700.625759][ T37] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 700.626284][ T37] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 700.626333][ T37] usb 8-1: media controller created [ 700.764327][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.871936][ T37] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 700.871979][ T37] zl10353_read_register: readreg error (reg=127, ret==-71) [ 700.874547][ T37] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 701.191605][ T37] usb 8-1: USB disconnect, device number 3 [ 701.981264][T11195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 702.018664][T11195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 702.156743][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1581'. [ 702.157222][T11195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 702.302686][T11195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.314034][T11195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 702.392593][T11195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 702.395325][T11195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 702.481984][T11195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 702.596192][ T5615] Bluetooth: hci7: command tx timeout [ 703.137821][ T5732] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 703.306086][ T5732] usb 7-1: Using ep0 maxpacket: 32 [ 703.310892][ T5732] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 703.310920][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.310940][ T5732] usb 7-1: Product: syz [ 703.310956][ T5732] usb 7-1: Manufacturer: syz [ 703.310971][ T5732] usb 7-1: SerialNumber: syz [ 703.365666][ T5732] usb 7-1: config 0 descriptor?? [ 703.621495][ T9] usb 7-1: USB disconnect, device number 6 [ 705.228557][T11195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.300189][T11195] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.316052][T10924] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 705.362908][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.363989][ T9617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.418842][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.421438][ T9614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.486067][T10924] usb 8-1: Using ep0 maxpacket: 32 [ 705.488706][T10924] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 705.488731][T10924] usb 8-1: config 0 has no interface number 0 [ 705.492150][T10924] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 705.492169][T10924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.492182][T10924] usb 8-1: Product: syz [ 705.492192][T10924] usb 8-1: Manufacturer: syz [ 705.492202][T10924] usb 8-1: SerialNumber: syz [ 705.604994][T10924] usb 8-1: config 0 descriptor?? [ 705.793945][T10924] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 705.793967][T10924] usb 8-1: selecting invalid altsetting 1 [ 705.793979][T10924] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 705.990028][T10924] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 705.990447][T10924] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 705.990508][T10924] usb 8-1: media controller created [ 707.384510][T10924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.579403][T10924] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 707.579453][T10924] zl10353_read_register: readreg error (reg=127, ret==-71) [ 707.579877][T10924] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 707.862719][T10924] usb 8-1: USB disconnect, device number 4 [ 708.058524][ T5617] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 708.064368][ T5617] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 708.098957][ T5617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 708.103465][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 708.143520][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 708.182928][T11437] lo speed is unknown, defaulting to 1000 [ 708.340706][T11437] lo speed is unknown, defaulting to 1000 [ 708.344517][T11437] lo speed is unknown, defaulting to 1000 [ 708.427109][ T37] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 708.603802][ T37] usb 10-1: Using ep0 maxpacket: 32 [ 708.646624][ T37] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 708.646654][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.646683][ T37] usb 10-1: Product: syz [ 708.646697][ T37] usb 10-1: Manufacturer: syz [ 708.646710][ T37] usb 10-1: SerialNumber: syz [ 708.780179][ T37] usb 10-1: config 0 descriptor?? [ 709.082285][ T199] usb 10-1: USB disconnect, device number 4 [ 709.337888][T11195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.143338][T11437] infiniband syz0: set active [ 710.143358][T11437] infiniband syz0: added lo [ 710.216277][ T37] lo speed is unknown, defaulting to 1000 [ 710.260102][T11437] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 710.273015][T11437] infiniband syz0: Couldn't open port 1 [ 710.273813][T11437] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 710.273849][T11437] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 710.273914][T11437] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 710.347424][ T5615] Bluetooth: hci8: command tx timeout [ 710.677959][T11195] veth0_vlan: entered promiscuous mode [ 710.733865][T11195] veth1_vlan: entered promiscuous mode [ 710.829197][T11502] netlink: 'syz.9.1597': attribute type 1 has an invalid length. [ 710.834351][T11502] netlink: 'syz.9.1597': attribute type 1 has an invalid length. [ 710.836243][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1597'. [ 710.876260][T11502] netlink: 'syz.9.1597': attribute type 1 has an invalid length. [ 710.876283][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1597'. [ 711.234971][T11437] RDS/IB: syz0: added [ 711.265117][T11437] smc: adding ib device syz0 with port count 1 [ 711.265399][T11437] smc: ib device syz0 port 1 has no pnetid [ 711.806053][ T37] lo speed is unknown, defaulting to 1000 [ 711.916377][T11438] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.916507][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.916753][T11438] bridge_slave_0: entered allmulticast mode [ 711.924810][T11438] bridge_slave_0: entered promiscuous mode [ 711.986016][T11438] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.986135][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.986427][T11438] bridge_slave_1: entered allmulticast mode [ 711.988906][T11437] lo speed is unknown, defaulting to 1000 [ 712.030491][T11438] bridge_slave_1: entered promiscuous mode [ 712.260698][T11438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.426084][ T5615] Bluetooth: hci8: command tx timeout [ 712.496734][T11438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.401942][T11195] veth0_macvtap: entered promiscuous mode [ 713.513256][T11438] team0: Port device team_slave_0 added [ 713.527433][T11438] team0: Port device team_slave_1 added [ 713.529855][T11195] veth1_macvtap: entered promiscuous mode [ 713.691342][T11438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.691357][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.691376][T11438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.706213][T11438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.706230][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.706261][T11438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.008509][T11437] lo speed is unknown, defaulting to 1000 [ 714.091149][T11195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.132565][T11438] hsr_slave_0: entered promiscuous mode [ 714.142694][T11438] hsr_slave_1: entered promiscuous mode [ 714.143656][T11438] debugfs: 'hsr0' already exists in 'hsr' [ 714.143678][T11438] Cannot create hsr debugfs directory [ 714.291615][T11195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.466266][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 714.507520][ T5615] Bluetooth: hci8: command tx timeout [ 714.563150][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.591280][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.592628][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.593680][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.651394][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 714.669349][ T9] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 714.669376][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.669394][ T9] usb 10-1: Product: syz [ 714.669414][ T9] usb 10-1: Manufacturer: syz [ 714.669428][ T9] usb 10-1: SerialNumber: syz [ 714.712597][ T9] usb 10-1: config 0 descriptor?? [ 714.938031][ T9] usb 10-1: USB disconnect, device number 5 [ 715.193740][T11437] lo speed is unknown, defaulting to 1000 [ 716.155090][ T2183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.155112][ T2183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.598141][ T5615] Bluetooth: hci8: command tx timeout [ 716.958296][T11437] lo speed is unknown, defaulting to 1000 [ 716.965761][ T1516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.965781][ T1516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.231293][T11612] FAULT_INJECTION: forcing a failure. [ 718.231293][T11612] name fail_futex, interval 1, probability 0, space 0, times 1 [ 718.231329][T11612] CPU: 1 UID: 0 PID: 11612 Comm: syz.9.1609 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 718.231356][T11612] Tainted: [L]=SOFTLOCKUP [ 718.231363][T11612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 718.231375][T11612] Call Trace: [ 718.231383][T11612] [ 718.231391][T11612] dump_stack_lvl+0xe8/0x150 [ 718.231433][T11612] should_fail_ex+0x467/0x600 [ 718.231468][T11612] __se_sys_futex+0x180/0x450 [ 718.231500][T11612] ? __pfx___se_sys_futex+0x10/0x10 [ 718.231524][T11612] ? rcu_is_watching+0x15/0xb0 [ 718.231554][T11612] ? __x64_sys_futex+0x21/0xf0 [ 718.231579][T11612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.231600][T11612] do_syscall_64+0x174/0x580 [ 718.231624][T11612] ? trace_irq_disable+0x3b/0x140 [ 718.231643][T11612] ? clear_bhb_loop+0x40/0x90 [ 718.231667][T11612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.231702][T11612] RIP: 0033:0x7f0fce82de99 [ 718.231724][T11612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.231741][T11612] RSP: 002b:00007fffba8718d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 718.231761][T11612] RAX: ffffffffffffffda RBX: 00000000000af429 RCX: 00007f0fce82de99 [ 718.231776][T11612] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0fceab5fac [ 718.231788][T11612] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 718.231800][T11612] R10: 00007fffba8719e0 R11: 0000000000000246 R12: 00007fffba871a00 [ 718.231812][T11612] R13: 00007f0fceab5fac R14: 00000000000af45b R15: 00007fffba8719e0 [ 718.231842][T11612] [ 718.286419][T11612] FAULT_INJECTION: forcing a failure. [ 718.286419][T11612] name failslab, interval 1, probability 0, space 0, times 1 [ 718.286504][T11612] CPU: 0 UID: 0 PID: 11612 Comm: syz.9.1609 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 718.286567][T11612] Tainted: [L]=SOFTLOCKUP [ 718.286586][T11612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 718.286619][T11612] Call Trace: [ 718.286636][T11612] [ 718.286655][T11612] dump_stack_lvl+0xe8/0x150 [ 718.286736][T11612] should_fail_ex+0x467/0x600 [ 718.286821][T11612] should_failslab+0xa8/0x100 [ 718.286883][T11612] kmem_cache_alloc_noprof+0xa4/0x650 [ 718.286944][T11612] ? vm_area_dup+0x28/0x670 [ 718.286997][T11612] ? vm_area_dup+0x28/0x670 [ 718.287070][T11612] vm_area_dup+0x28/0x670 [ 718.287123][T11612] ? __split_vma+0x1ce/0xa40 [ 718.287194][T11612] __split_vma+0x1e4/0xa40 [ 718.287307][T11612] ? mas_ascend+0x2f9/0x8b0 [ 718.287401][T11612] ? __pfx___split_vma+0x10/0x10 [ 718.287533][T11612] vma_modify+0x8b7/0x1ec0 [ 718.287666][T11612] vma_modify_flags+0x24b/0x330 [ 718.287775][T11612] ? __pfx_vma_modify_flags+0x10/0x10 [ 718.287883][T11612] ? rcu_is_watching+0x15/0xb0 [ 718.287961][T11612] ? percpu_counter_add_batch+0xec/0x1d0 [ 718.288057][T11612] ? __vm_enough_memory+0x11a/0x380 [ 718.288150][T11612] mprotect_fixup+0x624/0xb10 [ 718.288243][T11612] ? __pfx_mprotect_fixup+0x10/0x10 [ 718.288316][T11612] ? mas_next_slot+0xc94/0xd70 [ 718.288475][T11612] do_mprotect_pkey+0x9d3/0xcd0 [ 718.288554][T11612] ? lockdep_hardirqs_on+0x7a/0x110 [ 718.288645][T11612] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 718.288745][T11612] ? vm_mmap_pgoff+0x35d/0x4e0 [ 718.288848][T11612] ? __pfx___se_sys_futex+0x10/0x10 [ 718.288923][T11612] ? rcu_is_watching+0x15/0xb0 [ 718.288998][T11612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.289062][T11612] __x64_sys_mprotect+0x80/0x90 [ 718.289137][T11612] do_syscall_64+0x174/0x580 [ 718.289188][T11612] ? trace_irq_disable+0x3b/0x140 [ 718.289254][T11612] ? clear_bhb_loop+0x40/0x90 [ 718.289312][T11612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.289369][T11612] RIP: 0033:0x7f0fce82dc97 [ 718.289390][T11612] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.289408][T11612] RSP: 002b:00007fffba871718 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 718.289483][T11612] RAX: ffffffffffffffda RBX: 00007f0fcca446c0 RCX: 00007f0fce82dc97 [ 718.289540][T11612] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0fcca25000 [ 718.289601][T11612] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 718.289640][T11612] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffba871870 [ 718.289678][T11612] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 718.289753][T11612] [ 718.905216][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 718.928101][T11437] lo speed is unknown, defaulting to 1000 [ 719.728152][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1613'. [ 719.728339][T11437] lo speed is unknown, defaulting to 1000 [ 720.469300][T11437] lo speed is unknown, defaulting to 1000 [ 722.534008][T11437] lo speed is unknown, defaulting to 1000 [ 723.199833][T11438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 723.268877][T11438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.284405][T11438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 723.351624][ T5617] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 723.389101][ T5617] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 723.409347][ T5617] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 723.412607][ T5617] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 723.413265][ T5617] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 723.559205][T11438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.565857][T11438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 723.721653][ T5617] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 723.744465][ T5617] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 723.798881][ T5617] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 723.806243][ T5617] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 723.829812][ T5617] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 723.965306][T11438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.010943][T11438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 724.249247][T11438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.263644][T11437] lo speed is unknown, defaulting to 1000 [ 724.461760][T11719] netlink: 'syz.4.1627': attribute type 2 has an invalid length. [ 725.161495][T11719] : entered promiscuous mode [ 725.491341][T11438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.631204][ T5615] Bluetooth: hci9: command tx timeout [ 725.667297][T11438] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.713040][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.713456][ T9616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.800415][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.800587][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.027711][ T5615] Bluetooth: hci10: command tx timeout [ 726.308625][T11697] lo speed is unknown, defaulting to 1000 [ 727.706246][ T5615] Bluetooth: hci9: command tx timeout [ 728.116052][ T5615] Bluetooth: hci10: command tx timeout [ 728.293795][T10752] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.412888][T11690] lo speed is unknown, defaulting to 1000 [ 729.020766][T10752] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.110603][T11811] tipc: Started in network mode [ 729.110624][T11811] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 729.141643][T11813] tipc: New replicast peer: 127.0.0.1 [ 729.142139][T11813] tipc: Enabled bearer , priority 10 [ 729.144310][T11438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.530607][T10752] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.796302][ T5615] Bluetooth: hci9: command tx timeout [ 730.093346][T10752] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.186444][ T5617] Bluetooth: hci10: command tx timeout [ 730.455606][ T37] tipc: Node number set to 3210880763 [ 731.868414][ T5617] Bluetooth: hci9: command tx timeout [ 732.173754][T11438] veth0_vlan: entered promiscuous mode [ 732.267296][ T5617] Bluetooth: hci10: command tx timeout [ 732.694915][T11697] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.695099][T11697] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.695279][T11697] bridge_slave_0: entered allmulticast mode [ 732.718011][T11697] bridge_slave_0: entered promiscuous mode [ 732.846664][T10752] bridge_slave_1: left allmulticast mode [ 732.846695][T10752] bridge_slave_1: left promiscuous mode [ 732.864857][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.017231][T10752] bridge_slave_0: left allmulticast mode [ 733.017277][T10752] bridge_slave_0: left promiscuous mode [ 733.017455][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.887933][T10752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.971666][T10752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.989161][T10752] bond0 (unregistering): Released all slaves [ 734.041057][T11438] veth1_vlan: entered promiscuous mode [ 734.044101][T11697] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.044198][T11697] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.044345][T11697] bridge_slave_1: entered allmulticast mode [ 734.071995][T11697] bridge_slave_1: entered promiscuous mode [ 734.345759][T11697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.438153][T11697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.813060][T11690] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.813140][T11690] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.813345][T11690] bridge_slave_0: entered allmulticast mode [ 734.824622][T11690] bridge_slave_0: entered promiscuous mode [ 734.873085][T11690] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.873383][T11690] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.873609][T11690] bridge_slave_1: entered allmulticast mode [ 734.897697][T11690] bridge_slave_1: entered promiscuous mode [ 735.028149][ T13] rpcbind: server 127.0.0.1 not responding, timed out [ 735.060801][T11697] team0: Port device team_slave_0 added [ 735.096249][T11697] team0: Port device team_slave_1 added [ 735.114489][T11690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.177567][T11690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.919473][T11697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.919492][T11697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.919520][T11697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.050375][T11697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.050392][T11697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.050421][T11697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.136803][T11690] team0: Port device team_slave_0 added [ 736.197773][T11690] team0: Port device team_slave_1 added [ 736.279974][T11438] veth0_macvtap: entered promiscuous mode [ 736.473287][T11690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.473304][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.473331][T11690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.643109][T11690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.643121][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.643138][T11690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.644042][T11438] veth1_macvtap: entered promiscuous mode [ 736.794988][T11697] hsr_slave_0: entered promiscuous mode [ 736.807906][T11697] hsr_slave_1: entered promiscuous mode [ 736.810616][T11697] debugfs: 'hsr0' already exists in 'hsr' [ 736.810640][T11697] Cannot create hsr debugfs directory [ 737.016065][T10752] hsr_slave_0: left promiscuous mode [ 737.043206][T10752] hsr_slave_1: left promiscuous mode [ 737.055730][T10752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.055748][T10752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.089718][T10752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.089904][T10752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.250222][T10752] veth1_macvtap: left promiscuous mode [ 737.250314][T10752] veth0_macvtap: left promiscuous mode [ 737.250482][T10752] veth1_vlan: left promiscuous mode [ 737.250605][T10752] veth0_vlan: left promiscuous mode [ 738.163522][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 738.536763][T10752] team0 (unregistering): Port device team_slave_1 removed [ 738.577632][T10752] team0 (unregistering): Port device team_slave_0 removed [ 738.775109][ T9616] smc: removing ib device syz0 [ 738.910576][ T37] lo speed is unknown, defaulting to 1000 [ 738.910609][ T37] syz0: Port: 1 Link DOWN [ 739.087731][ T9616] smbdirect: ib_dev[syz0] removed [ 739.332443][T11690] hsr_slave_0: entered promiscuous mode [ 739.334630][T11690] hsr_slave_1: entered promiscuous mode [ 739.336390][T11690] debugfs: 'hsr0' already exists in 'hsr' [ 739.336413][T11690] Cannot create hsr debugfs directory [ 739.467358][ C1] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated [ 739.709047][T11438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.372396][T11438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.004735][ T1421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.074193][ T1421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.145038][ T1421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.200968][ T1421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.676797][T11697] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.163522][T11697] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.016314][T11697] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.192170][T11697] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.355161][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 745.362668][ T1421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.362686][ T1421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.561545][ T9617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.563169][ T9617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.641795][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 746.688848][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 746.726846][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 746.762408][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 746.776450][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 747.164979][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.165039][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.383079][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 747.567681][T12034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'. [ 747.568256][T12036] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1667'. [ 748.846065][ T5617] Bluetooth: hci5: command tx timeout [ 750.149119][T12060] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1669'. [ 750.906231][ T5617] Bluetooth: hci5: command tx timeout [ 752.999494][ T5617] Bluetooth: hci5: command tx timeout [ 755.066062][ T5617] Bluetooth: hci5: command tx timeout [ 760.904605][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 762.736067][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 762.886098][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 762.892637][ T31] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 762.892661][ T31] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 762.892680][ T31] usb 5-1: config 179 has no interface number 0 [ 762.892723][ T31] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 762.892761][ T31] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 762.892788][ T31] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 762.892840][ T31] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 762.892862][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.028930][T12087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 763.266754][ T37] usb 5-1: USB disconnect, device number 23 [ 763.304078][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 763.861946][T11697] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 763.940003][T11697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.011838][T11697] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 764.082754][T11697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.138826][T11697] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 764.173889][T11697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.244242][T11697] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 764.280629][T11697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.347127][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.348627][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.348928][T12019] bridge_slave_0: entered allmulticast mode [ 764.385539][T12019] bridge_slave_0: entered promiscuous mode [ 764.475116][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.475226][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.475409][T12019] bridge_slave_1: entered allmulticast mode [ 764.484947][T12019] bridge_slave_1: entered promiscuous mode [ 764.534821][T12129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1678'. [ 764.534842][T12129] openvswitch: netlink: Flow actions attr not present in new flow. [ 764.789032][T12019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.834222][T12019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.095010][T12019] team0: Port device team_slave_0 added [ 765.104301][T11690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 765.130849][T11690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 765.168048][T12019] team0: Port device team_slave_1 added [ 765.168178][T11690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 765.210890][T11690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 765.276884][T11690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 765.313286][T11690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 765.598780][T11690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 765.659000][T11690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 765.663808][T12019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.663828][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.663857][T12019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.731585][T12019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.731600][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.731631][T12019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.193958][T12019] hsr_slave_0: entered promiscuous mode [ 766.208530][T12019] hsr_slave_1: entered promiscuous mode [ 766.211636][T12019] debugfs: 'hsr0' already exists in 'hsr' [ 766.211662][T12019] Cannot create hsr debugfs directory [ 767.155216][T11697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.578211][T11697] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.615175][T11690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.638678][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.638801][ T9617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.266552][ T39] INFO: task syz.3.1403:10267 blocked for more than 143 seconds. [ 768.266579][ T39] Tainted: G L syzkaller #0 [ 768.266590][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 768.266599][ T39] task:syz.3.1403 state:D stack:28424 pid:10267 tgid:10263 ppid:5602 task_flags:0x400040 flags:0x00080002 [ 768.266666][ T39] Call Trace: [ 768.266673][ T39] [ 768.266685][ T39] __schedule+0x16dc/0x5500 [ 768.266737][ T39] ? __pfx___schedule+0x10/0x10 [ 768.266759][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 768.266805][ T39] rt_mutex_schedule+0x76/0xf0 [ 768.266829][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 768.266870][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 768.266906][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 768.266941][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 768.266975][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 768.267018][ T39] ? write_threads+0x3a0/0x5a0 [ 768.267053][ T39] ? write_threads+0x3a0/0x5a0 [ 768.267107][ T39] ? write_threads+0x3a0/0x5a0 [ 768.267137][ T39] mutex_lock_nested+0x168/0x1d0 [ 768.267177][ T39] write_threads+0x3a0/0x5a0 [ 768.267209][ T39] ? __might_fault+0xaf/0x130 [ 768.267235][ T39] ? __pfx_write_threads+0x10/0x10 [ 768.267305][ T39] ? _copy_from_user+0x94/0xb0 [ 768.267305][ T39] ? _copy_from_user+0x94/0xb0 [ 768.267335][ T39] ? simple_transaction_get+0x130/0x170 [ 768.267365][ T39] nfsctl_transaction_write+0x112/0x160 [ 768.267400][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 768.267435][ T39] vfs_write+0x29f/0xbb0 [ 768.267583][ T39] ? __pfx_vfs_write+0x10/0x10 [ 768.267617][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 768.267646][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 768.267672][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 768.267700][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 768.267734][ T39] ? fdget_pos+0x252/0x320 [ 768.267768][ T39] ksys_write+0x156/0x270 [ 768.267800][ T39] ? __pfx_ksys_write+0x10/0x10 [ 768.267839][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.267866][ T39] do_syscall_64+0x174/0x580 [ 768.267894][ T39] ? trace_irq_disable+0x3b/0x140 [ 768.267917][ T39] ? clear_bhb_loop+0x40/0x90 [ 768.267946][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.267968][ T39] RIP: 0033:0x7f4f6debde99 [ 768.267988][ T39] RSP: 002b:00007f4f6c0f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.268011][ T39] RAX: ffffffffffffffda RBX: 00007f4f6e146090 RCX: 00007f4f6debde99 [ 768.268028][ T39] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 768.271455][ T39] RBP: 00007f4f6df53eaf R08: 0000000000000000 R09: 0000000000000000 [ 768.271477][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.271492][ T39] R13: 00007f4f6e146128 R14: 00007f4f6e146090 R15: 00007ffd6197e888 [ 768.271537][ T39] [ 768.271630][ T39] [ 768.271630][ T39] Showing all locks held in the system: [ 768.271644][ T39] 3 locks held by kworker/u8:1/13: [ 768.271658][ T39] #0: ffff888031be0938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 768.271727][ T39] #1: ffffc90000127c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 768.271787][ T39] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 768.271913][ T39] 1 lock held by khungtaskd/39: [ 768.272053][ T39] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 768.272113][ T39] 4 locks held by kworker/u8:7/166: [ 768.272126][ T39] 3 locks held by kworker/0:2/199: [ 768.272138][ T39] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 768.272191][ T39] #1: ffffc90003b97c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 768.272245][ T39] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 768.272321][ T39] 2 locks held by getty/5349: [ 768.272332][ T39] #0: ffff888034c260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 768.272387][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 768.272451][ T39] 3 locks held by syz.3.1403/10264: [ 768.272463][ T39] #0: ffff888035f24728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.272513][ T39] #1: ffff888066362500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.272577][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 768.272638][ T39] 3 locks held by syz.3.1403/10267: [ 768.272649][ T39] #0: ffff88803c8e4128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.272700][ T39] #1: ffff888066362500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.272759][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 768.272817][ T39] 3 locks held by syz.2.1430/10497: [ 768.272828][ T39] #0: ffff888035989528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.272878][ T39] #1: ffff88803881a500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.272934][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 768.272994][ T39] 3 locks held by syz.2.1430/10499: [ 768.273006][ T39] #0: ffff888034dca128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.273057][ T39] #1: ffff88803881a500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.275864][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 768.376560][ T39] 1 lock held by syz.2.1430/10504: [ 768.376571][ T39] #0: ffff888034dca128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.376615][ T39] 3 locks held by kworker/u8:16/10752: [ 768.376624][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 768.376665][ T39] #1: ffffc90004027c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 768.376723][ T39] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 768.376870][ T39] 3 locks held by syz.5.1459/10962: [ 768.376881][ T39] #0: ffff8880638d4328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.376924][ T39] #1: ffff88802a5c0500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.376976][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 768.377044][ T39] 3 locks held by syz.5.1459/10970: [ 768.377054][ T39] #0: ffff888034ac8128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.377098][ T39] #1: ffff88802a5c0500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.377145][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 768.377193][ T39] 3 locks held by syz.8.1518/11130: [ 768.377202][ T39] #0: ffff8880369aeb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.377242][ T39] #1: ffff8880586a6500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.377307][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 768.377366][ T39] 3 locks held by syz.6.1592/11430: [ 768.377376][ T39] #0: ffff888040d47d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.380758][ T39] #1: ffff88804bffa500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.380945][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 768.381102][ T39] 1 lock held by syz-executor/11690: [ 768.384519][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 768.384666][ T39] 1 lock held by syz-executor/11697: [ 768.384688][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 768.384937][ T39] 3 locks held by syz.9.1645/11852: [ 768.384966][ T39] #0: ffff888034dca928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.386100][ T39] #1: ffff88803c55c500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.386313][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 768.386480][ T39] 3 locks held by syz.9.1645/11854: [ 768.386512][ T39] #0: ffff888028b59f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.386670][ T39] #1: ffff88803c55c500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.386885][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 768.393546][ T39] 3 locks held by syz.9.1645/11856: [ 768.393572][ T39] #0: ffff88803d52eb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 768.393690][ T39] #1: ffff88803c55c500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 768.393850][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 768.394017][ T39] 13 locks held by syz-executor/12019: [ 768.394067][ T39] 1 lock held by syz.4.1691/12207: [ 768.394097][ T39] #0: ffff8880232a0978 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 768.394340][ T39] 4 locks held by syz.0.1693/12216: [ 768.394378][ T39] 2 locks held by sed/12219: [ 768.394409][ T39] [ 768.394427][ T39] ============================================= [ 768.394427][ T39] [ 768.394456][ T39] NMI backtrace for cpu 1 [ 768.394509][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 768.394577][ T39] Tainted: [L]=SOFTLOCKUP [ 768.394596][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 768.394626][ T39] Call Trace: [ 768.394645][ T39] [ 768.394665][ T39] dump_stack_lvl+0xe8/0x150 [ 768.394749][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 768.394805][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 768.394898][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 768.394991][ T39] sys_info+0x135/0x170 [ 768.395098][ T39] watchdog+0xfd7/0x1030 [ 768.395159][ T39] ? watchdog+0x1c7/0x1030 [ 768.395220][ T39] kthread+0x388/0x470 [ 768.395263][ T39] ? __pfx_watchdog+0x10/0x10 [ 768.395309][ T39] ? __pfx_kthread+0x10/0x10 [ 768.395395][ T39] ret_from_fork+0x514/0xb70 [ 768.395480][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 768.395555][ T39] ? __switch_to+0xc89/0x1420 [ 768.395632][ T39] ? __pfx_kthread+0x10/0x10 [ 768.395745][ T39] ret_from_fork_asm+0x1a/0x30 [ 768.395836][ T39] [ 768.395914][ T39] Sending NMI from CPU 1 to CPUs 0: [ 768.395974][ C0] NMI backtrace for cpu 0 [ 768.395990][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 768.396013][ C0] Tainted: [L]=SOFTLOCKUP [ 768.396019][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 768.396029][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 768.396075][ C0] Code: e8 ae bd 6f fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 2f d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 768.396091][ C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 768.396107][ C0] RAX: 1ffffffff33c9500 RBX: 00000000000003fd RCX: 0000000000000000 [ 768.396119][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 768.396130][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 768.396141][ C0] R10: dffffc0000000000 R11: ffffffff85560cf0 R12: dffffc0000000000 [ 768.396155][ C0] R13: 0000000000000000 R14: ffffffff99e4ad40 R15: 0000000000000000 [ 768.396167][ C0] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 768.396182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.396194][ C0] CR2: 0000200000000340 CR3: 000000003c156000 CR4: 00000000003526f0 [ 768.396210][ C0] Call Trace: [ 768.396217][ C0] [ 768.396225][ C0] wait_for_lsr+0x190/0x300 [ 768.396253][ C0] serial8250_console_write+0x113a/0x1b40 [ 768.396286][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 768.396312][ C0] ? console_flush_one_record+0xfa/0xb50 [ 768.396333][ C0] ? console_flush_one_record+0x472/0xb50 [ 768.396354][ C0] console_flush_one_record+0x642/0xb50 [ 768.396374][ C0] ? console_flush_one_record+0xfa/0xb50 [ 768.396394][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 768.396413][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 768.396439][ C0] legacy_kthread_func+0x1b6/0x250 [ 768.396458][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 768.396475][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 768.396504][ C0] ? __kthread_parkme+0x71/0x1f0 [ 768.396529][ C0] ? __kthread_parkme+0x196/0x1f0 [ 768.396562][ C0] kthread+0x388/0x470 [ 768.396589][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 768.396605][ C0] ? __pfx_kthread+0x10/0x10 [ 768.396632][ C0] ret_from_fork+0x514/0xb70 [ 768.396661][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 768.396689][ C0] ? __switch_to+0xc89/0x1420 [ 768.396714][ C0] ? __pfx_kthread+0x10/0x10 [ 768.396741][ C0] ret_from_fork_asm+0x1a/0x30 [ 768.396767][ C0] [ 768.415344][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 768.415399][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 768.415462][ T39] Tainted: [L]=SOFTLOCKUP [ 768.415479][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 768.415507][ T39] Call Trace: [ 768.415525][ T39] [ 768.415553][ T39] vpanic+0x56c/0xa60 [ 768.415607][ T39] ? __pfx___schedule+0x10/0x10 [ 768.415669][ T39] ? __pfx_vpanic+0x10/0x10 [ 768.415739][ T39] panic+0xc5/0xd0 [ 768.415783][ T39] ? __pfx_panic+0x10/0x10 [ 768.415821][ T39] ? preempt_schedule_common+0x82/0xd0 [ 768.415871][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 768.415897][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 768.415931][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 768.416001][ T39] watchdog+0x1030/0x1030 [ 768.416072][ T39] ? watchdog+0x1c7/0x1030 [ 768.416134][ T39] kthread+0x388/0x470 [ 768.416223][ T39] ? __pfx_watchdog+0x10/0x10 [ 768.416263][ T39] ? __pfx_kthread+0x10/0x10 [ 768.416354][ T39] ret_from_fork+0x514/0xb70 [ 768.416463][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 768.416535][ T39] ? __switch_to+0xc89/0x1420 [ 768.416609][ T39] ? __pfx_kthread+0x10/0x10 [ 768.416682][ T39] ret_from_fork_asm+0x1a/0x30 [ 768.416761][ T39] [ 768.417354][ T39] Kernel Offset: disabled