last executing test programs: 2m8.99324353s ago: executing program 32 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) read(r0, &(0x7f0000000600)=""/100, 0x64) 2m8.6899787s ago: executing program 33 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 20000\n', 0xa) read(r0, &(0x7f0000000140)=""/100, 0x64) close(r0) 2m3.640216521s ago: executing program 6 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/virtio/devices/virtio1/device\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/virtio/devices/virtio2/device\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 2m3.532115128s ago: executing program 6 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-3\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) 2m3.174687667s ago: executing program 34 (id=69): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r12, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r13 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r13, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r14 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r14, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r15 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r15, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 2m3.132348053s ago: executing program 35 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='+tcp 2049\n', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000a00)='127.0.0.1:/\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,sec=krb5i,timeo=1,soft\x00']) 1m58.642521398s ago: executing program 36 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-4 -4.1 -4.2\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='udp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000160)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1\n', 0x2) close(r2) 1m55.907721333s ago: executing program 37 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001a0)='./proc/1/root/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/rpcbind.sock\x00'}, 0x30) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './proc/1/root/run/rpcbind.sock\x00'}, 0x30) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000220)={0x2, 0x6f00, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000260)={0x2, 0x6f00, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='udp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1\n', 0x2) 1m47.667092413s ago: executing program 38 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-3\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) 1m40.321558705s ago: executing program 39 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='2\n\x00', 0x2) close(r1) 1m36.568611636s ago: executing program 40 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='-2 -3 -4 +4.1\n', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='udp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) close(r2) 1m35.444390811s ago: executing program 41 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+tcp 2049\n\x00', 0xa) 1m34.613157551s ago: executing program 42 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) mkdir(&(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000340)="80000038000000010000000000000002000186a3000000030000000100000001000000180000000000000000000003e8000003e800"/64, 0x3c, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r0, &(0x7f0000000400), 0x100) read(r0, &(0x7f0000000400), 0x100) 1m25.270796039s ago: executing program 6 (id=201): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x22b8, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000300)={{0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, {@loopback, 0x22b8, 0x1, 0x1}}, 0x44) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0 1\n', 0x4) close(r2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='0\n', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r5, &(0x7f0000000a00)='1\n', 0x2) sendto$inet(r4, &(0x7f0000000b00)='world\x00', 0x6, 0x0, &(0x7f0000000c00)={0x2, 0x22b8, @loopback}, 0x10) 1m25.147502099s ago: executing program 6 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) close(r0) 1m24.883793219s ago: executing program 43 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='freeze', 0x6) 1m15.613150814s ago: executing program 44 (id=205): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000130001000000000000000000000000000000000001000000010000000c0003006c6f7770616e3000"], 0x2c}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x23, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="416000000000003b400000000000000000000000000000000100000000000000000000000000000002", 0x29}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m12.565727322s ago: executing program 45 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 20000\n', 0xa) close(r0) 1m9.648476462s ago: executing program 46 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) close(r0) 1m8.242378612s ago: executing program 47 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='udp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='1\n', 0x2) 1m6.734620533s ago: executing program 48 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x38}}, 0x0) 1m5.114378519s ago: executing program 49 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='udp 20000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='2\n', 0x2) close(r2) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r3 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r3, &(0x7f0000000900)="123456780000000000000002000186a30000000400000000000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000940)="123456780000000000000002000186a30000000300000000000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 51.130885815s ago: executing program 50 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) mkdir(&(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x108}, 0x10) sendto$inet(r4, &(0x7f0000000340)="80000038000000010000000000000002000186a3000000030000000100000001000000180000000000000000000003e8000003e800"/64, 0x3c, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r0, &(0x7f0000000400), 0x100) read(r0, &(0x7f0000000400), 0x100) 43.733956275s ago: executing program 2 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/syzkaller0/gro_flush_timeout\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='200000000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/syzkaller0/napi_defer_hard_irqs\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='10\n', 0x3) close(r2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x64010101}}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000280)=0x32, 0x4) setsockopt$sock_int(r4, 0x1, 0x45, &(0x7f0000000290)=0x1, 0x4) bind$inet(r4, &(0x7f00000002a0)={0x2, 0x4d2, @empty}, 0x10) write(r0, &(0x7f0000000300)="ffffffffffff00112233445508004500002000014000401170c7640101026401010104d204d2000c000074657374", 0x2e) recvfrom$inet(r4, &(0x7f0000000400), 0x100, 0x40, 0x0, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00112233445508004500002c00024000400670c5640101026401010104d204d2000003e800000001501003e81194000061616161", 0x3a) write(r0, &(0x7f0000000600)="ffffffffffff00112233445508004500002c00034000400670c4640101026401010104d204d2000003ec00000001501003e80f8e000062626262", 0x3a) 43.255437474s ago: executing program 2 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{}, {0x0, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x0, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x0, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x0, 0x5, 0x1}]}}]}, 0x100}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000400)="00112233445500aabbccddee080045000028000100004006f9d37f0000017f00000100500050000000000000000050022000b1a70000", 0x36, 0x0, &(0x7f0000000500)={0x11, 0x300, r2}, 0x0) 42.981763822s ago: executing program 2 (id=325): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000400)=""/100, 0x64) write$nci(r0, &(0x7f0000000500)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x6, 0x0, {0x1, 0x1, 0x1}}, 0x9) write$nci(r0, &(0x7f0000000c00)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x1e, 0x5, @a_listen={0x0, 0x3, 0x5, 0x80, 0xff, 0x1, 0x0, "", 0x80, 0x0, 0x0, 0x15, 0x14}}, 0x21) 39.4411647s ago: executing program 2 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/lo/statistics/rx_frame_errors\x00', 0x0, 0x0) read(r0, &(0x7f0000000100), 0x100) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/virtual/net/lo/statistics/rx_frame_errors\x00', 0x0, 0x0) read(r1, &(0x7f0000000100), 0x100) close(r1) 39.344610645s ago: executing program 2 (id=329): setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000510)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000520)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{0x1}, {0x0, 0xfb, 0x5, 0xfb, 0x5}}}}, 0xd) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) nanosleep(&(0x7f0000000b00)={0x0, 0x2faf080}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000800)=@generic={0x1f, "0000000000000100"}, 0xa) setsockopt(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000750)="01000000", 0x4) 39.178324896s ago: executing program 6 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc_mnt\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/net/ip_vs_conn\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/1024, 0x400) read(r0, &(0x7f0000000100)=""/1024, 0x400) lseek(r0, 0x1, 0x0) read(r0, &(0x7f0000000100)=""/1024, 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/net/ip_vs_conn_sync\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/1024, 0x400) read(r1, &(0x7f0000000300)=""/1024, 0x400) 39.110776039s ago: executing program 6 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000060)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000070)='-3\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) 38.579788021s ago: executing program 2 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/1024, 0x400) close(r0) 37.028515191s ago: executing program 5 (id=339): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x22b8, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000300)={{0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, {@loopback, 0x22b8, 0x1, 0x1}}, 0x44) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000800)='hello\x00', 0x6, 0x0, &(0x7f0000000900)={0x2, 0x22b8, @loopback}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) close(r4) sendto$inet(r3, &(0x7f0000000b00)='world\x00', 0x6, 0x0, &(0x7f0000000c00)={0x2, 0x22b8, @loopback}, 0x10) 36.946031863s ago: executing program 5 (id=340): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000180)=""/100, 0x64) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000280)=""/100, 0x64) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f00000003c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000440)=""/100, 0x64) write$nci(r0, &(0x7f0000000480)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000004c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000500)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000540)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x0, @a={0x0, 0x3, 0x5}}, 0x13) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}}, 0x0) nanosleep(&(0x7f0000000640)={0x1}, 0x0) 36.347947653s ago: executing program 5 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 36.267089152s ago: executing program 5 (id=342): r0 = socket(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@generic={0x2, '\x00\x00\x00\x00d\x00'}, 0x10) 36.213332232s ago: executing program 5 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='10 1 1\x00', 0x7) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 36.145509026s ago: executing program 5 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='udp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) 33.520219896s ago: executing program 51 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 -4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='udp 20000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='2\n', 0x2) close(r2) 32.0027132s ago: executing program 52 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='2\n', 0x2) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,noresvport']) 29.447642673s ago: executing program 0 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="44000000100001060100000000000000000000000000000001000000ffffffff0c00030076726631303000001800120008000100767266000c0002000800010064000000", 0x44) 29.325456491s ago: executing program 0 (id=349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x32}, @in=@empty, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034000100004032f909ac1414bbac1414aa000004d200000001000000000000000000000000000000000000000000000004"], 0x0) 29.255727718s ago: executing program 0 (id=350): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) mount$nfs(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=3,noresvport\x00']) 29.087730352s ago: executing program 0 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/netconsole\x00', 0x0, 0x0) 29.022321882s ago: executing program 0 (id=352): r0 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x1a3b, &(0x7f0000000540)={0x0, 0xbe8, 0x1, 0x3, 0xaf, 0x0, r0}, 0x0, &(0x7f0000000600), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, r1, &(0x7f0000000400)={0x2e, 0x7c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x1, 0xaa0, 0x0, 0x0, 0x1000, 0x401, 0x0, 0x0, 0x4}}}, &(0x7f0000000280)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r5, 0x0, 0x0) lseek(r5, 0x0, 0x0) read(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r6, 0xc138fd00, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x29, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x3, 'wlc\x00', 0x6e, 0x9, 0x2a}, 0x2c) syz_clone(0x44018080, 0x0, 0xfffffffffffffd7e, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 27.463392796s ago: executing program 53 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/100, 0x64) 27.432611101s ago: executing program 0 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n', 0x9) read(r0, &(0x7f0000000200)=""/100, 0x64) close(r0) 23.997865886s ago: executing program 54 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000060)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000070)='-3\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) 23.48222499s ago: executing program 55 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/1024, 0x400) close(r0) 20.889331895s ago: executing program 56 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='udp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) 14.455902047s ago: executing program 8 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0 1 1\x00', 0x6) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='test\x00', 0x5) 14.053827969s ago: executing program 8 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x20, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO]}, 0x20}}, 0x0) 13.848310619s ago: executing program 4 (id=399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/syzkaller0/gro_flush_timeout\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='200000000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/syzkaller0/napi_defer_hard_irqs\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='10\n', 0x3) close(r2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x64010101}}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000280)=0x32, 0x4) setsockopt$sock_int(r4, 0x1, 0x45, &(0x7f0000000290)=0x1, 0x4) write(r0, &(0x7f0000000300)="ffffffffffff00112233445508004500002000014000401170c7640101026401010104d204d2000c000074657374", 0x2e) 13.607722715s ago: executing program 8 (id=400): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000220)={0x1d, r1, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000260)={0x0, 0x0, &(0x7f00000002a0)={&(0x7f00000002c0)="0102030405060708090a0b0c0d0e0f10", 0x10}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 13.251284562s ago: executing program 4 (id=401): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 12.882681963s ago: executing program 4 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x0, 0x0) 12.579687444s ago: executing program 4 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/syzkaller0/gro_flush_timeout\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='200000000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/syzkaller0/napi_defer_hard_irqs\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='10\n', 0x3) close(r2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x64010101}}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000280)=0x32, 0x4) setsockopt$sock_int(r4, 0x1, 0x45, &(0x7f0000000290)=0x1, 0x4) bind$inet(r4, &(0x7f00000002a0)={0x2, 0x4d2, @empty}, 0x10) write(r0, &(0x7f0000000500)="ffffffffffff00112233445508004500002c00024000400670c5640101026401010104d204d2000003e800000001501003e81194000061616161", 0x3a) 12.202353978s ago: executing program 57 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n', 0x9) read(r0, &(0x7f0000000200)=""/100, 0x64) close(r0) 12.129755417s ago: executing program 4 (id=405): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 12.12224871s ago: executing program 8 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140206080100000000000000"], 0x14}}, 0x0) 11.927785987s ago: executing program 8 (id=407): r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000000)={'batadv_slave_0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 11.927540204s ago: executing program 4 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/1024, 0x400) 11.662107062s ago: executing program 8 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 20000\n', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) 8.983065192s ago: executing program 1 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="340000003c000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000000", 0x34, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="340000003d000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000000", 0x34, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="340000003e000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000000", 0x34, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="340000003f000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000000", 0x34, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="3400000040000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000000", 0x34, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="3400000041000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000000", 0x34, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="3400000042000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000000", 0x34, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="3400000043000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000000", 0x34, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="640000003e0001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="640000003f0001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="64000000400001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="64000000410001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="64000000420001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="64000000430001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="64000000440001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="64000000450001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) 8.623907973s ago: executing program 1 (id=424): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003f000506010000000000000001010000000000000c0001006f76732d647030000800020000000000080009002a000000"], 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000410005060100000000000000010100002a000000140001801000040000112233445500aabbccddee04000280"], 0x30}}, 0x0) 8.390087367s ago: executing program 1 (id=425): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001080000004000000000610000"], 0x0, 0x3c}, 0x28) 8.163213798s ago: executing program 1 (id=427): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000180)=""/100, 0x64) write$nci(r0, &(0x7f0000000200)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f0000000240)=""/100, 0x64) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000300)=""/100, 0x64) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) 7.067526571s ago: executing program 1 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./recov\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./recov\x00', 0x8) 6.925146093s ago: executing program 1 (id=432): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x22b8, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)={0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300)={{0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, {@loopback, 0x22b8, 0x1, 0x1}}, 0x44) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='0 1\n', 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000800)='hello\x00', 0x6, 0x0, &(0x7f0000000900)={0x2, 0x22b8, @loopback}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) close(r4) sendto$inet(r3, &(0x7f0000000b00)='world\x00', 0x6, 0x0, &(0x7f0000000c00)={0x2, 0x22b8, @loopback}, 0x10) 6.223605329s ago: executing program 7 (id=438): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x1002}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syz_tun\x00', 0x1}) bind$llc(r1, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) listen(r1, 0x1) write(r0, &(0x7f0000000200)='\x00'/17, 0x11) 5.887737868s ago: executing program 7 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000018000105010000000000000002180000fe03fd0100000000080001000af000001400090008000000010000000800000001000000"], 0x38}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xa, 0xf0, 0x0, 0x1}}, 0x10) 5.839306715s ago: executing program 7 (id=442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x0, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0xa, 0x4d2, 0x0, @remote}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x28, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x8, 0xa, '\x00\x00\x00\x00'}]}, 0x28}}, 0x0) 5.729933932s ago: executing program 7 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000003f00010001000000000000000101000000000000090001006f76733000000000080002000000000008000900c8000000"], 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000042000100020000000000000003010000c80000001200010000112233445566778899aabb08000000040002801800038014001980080001000100000008000200aabbccdd"], 0x48}}, 0x0) 5.425400582s ago: executing program 7 (id=446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) 5.319486237s ago: executing program 7 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='-2\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='udp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) 3.101972009s ago: executing program 9 (id=456): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0300ffff0000", 0x6) 2.913493181s ago: executing program 9 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 2.747851022s ago: executing program 9 (id=458): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_ivalue}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge_slave_0/brport/forward_delay_timer\x00', 0x0, 0x0) read(r1, &(0x7f0000000300), 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/bridge0/brif/bridge_slave_0/forward_delay_timer\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x100) 2.545095589s ago: executing program 9 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, 0x0) 2.200782956s ago: executing program 9 (id=460): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 1.835732618s ago: executing program 9 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='devices', 0x7) 629.647811ms ago: executing program 3 (id=462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1011}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) write(r0, &(0x7f0000000340)="4500002c00014000400626c90a0000010a00000203e9", 0x16) 480.78613ms ago: executing program 3 (id=463): add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040), &(0x7f0000000080)='1.2.3.4\x00', 0x7, 0xfffffffffffffffc) 387.573772ms ago: executing program 3 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000800)={@broadcast, @local, @void, {@ipv4}}, 0x0) 312.108724ms ago: executing program 3 (id=465): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/x25/x25_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n\x00', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000008050010010b101200"], 0xb) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0000080500100117"], 0x8) 95.21549ms ago: executing program 3 (id=466): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendto(r1, &(0x7f0000000200)="05000000010001", 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/syzkaller0/gro_flush_timeout\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='200000000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/syzkaller0/napi_defer_hard_irqs\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='10\n', 0x3) close(r2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x64010101}}) bind$inet(0xffffffffffffffff, &(0x7f00000002a0)={0x2, 0x4d2, @empty}, 0x10) write(r0, &(0x7f0000000300)="ffffffffffff00112233445508004500002000014000401170c7640101026401010104d204d2000c000074657374", 0x2e) kernel console output (not intermixed with test programs): 6712][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.986728][ T6739] R13: 00007f484c426038 R14: 00007f484c425fa0 R15: 00007ffd828a8698 [ 140.986771][ T6739] [ 141.294702][ T6706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.369056][ T6706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.437686][ T6706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.515731][ T6706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.667782][ T6706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.677957][ T6706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.678583][ T52] Bluetooth: hci13: command tx timeout [ 141.681761][ T6706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.692695][ T6706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.706700][ T6706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.710976][ T6706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.711931][ T6706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.718942][ T6706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.902471][ T6706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.934783][ T6706] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.964534][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.964620][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.990906][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.991020][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.406184][ T52] Bluetooth: hci12: command 0x040f tx timeout [ 142.974633][ T6706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.159477][ T6706] veth0_vlan: entered promiscuous mode [ 143.181132][ T6706] veth1_vlan: entered promiscuous mode [ 143.305322][ T6706] veth0_macvtap: entered promiscuous mode [ 143.331820][ T6706] veth1_macvtap: entered promiscuous mode [ 143.379747][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.410598][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.478664][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.479956][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.479997][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.480034][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.524282][ T5612] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 143.526188][ T5612] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 143.528826][ T5612] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 143.536692][ T5612] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 143.538827][ T5612] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 143.762854][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.762880][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.768268][ T52] Bluetooth: hci13: command tx timeout [ 143.923060][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.923088][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.222187][ T6796] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 144.227453][ T50] IPVS: starting estimator thread 0... [ 144.292312][ T6781] lo speed is unknown, defaulting to 1000 [ 144.312521][ T6797] IPVS: using max 24 ests per chain, 57600 per kthread [ 144.457465][ T6801] tipc: Enabled bearer , priority 10 [ 144.457966][ T6801] tipc: Enabled bearer , priority 10 [ 144.477724][ T6800] tipc: Resetting bearer [ 144.479057][ T52] Bluetooth: hci12: command 0x040f tx timeout [ 144.504139][ T5612] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 144.506510][ T5612] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 144.507382][ T5612] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 144.510725][ T5612] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 144.511815][ T5612] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 144.571361][ T6800] tipc: Disabling bearer [ 144.631809][ T6800] tipc: Resetting bearer [ 144.673897][ T6800] tipc: Disabling bearer [ 144.938239][ T983] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.108223][ T983] usb 4-1: Using ep0 maxpacket: 16 [ 145.110136][ T983] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 145.111198][ T983] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 145.111232][ T983] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 145.113313][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.113336][ T983] usb 4-1: Product: syz [ 145.113353][ T983] usb 4-1: Manufacturer: syz [ 145.113371][ T983] usb 4-1: SerialNumber: syz [ 145.203878][ T5612] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 145.207994][ T5612] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 145.210646][ T5612] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 145.216999][ T5612] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 145.217665][ T5612] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 145.602063][ T5612] Bluetooth: hci14: command tx timeout [ 145.719002][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.829729][ T6804] lo speed is unknown, defaulting to 1000 [ 145.840121][ T5612] Bluetooth: hci13: command tx timeout [ 145.871058][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 145.871819][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.873393][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.873477][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.876361][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.876390][ T9] usb 6-1: Product: syz [ 145.876451][ T9] usb 6-1: Manufacturer: syz [ 145.876470][ T9] usb 6-1: SerialNumber: syz [ 145.946506][ T9] usb 6-1: config 0 descriptor?? [ 146.558939][ T5612] Bluetooth: hci15: command tx timeout [ 146.608509][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.610635][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.610790][ T6781] bridge_slave_0: entered allmulticast mode [ 146.622559][ T6781] bridge_slave_0: entered promiscuous mode [ 146.632404][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.632533][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.632706][ T6781] bridge_slave_1: entered allmulticast mode [ 146.650282][ T6781] bridge_slave_1: entered promiscuous mode [ 146.790341][ T6781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.794008][ T6781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.830843][ T983] usb 4-1: USB disconnect, device number 3 [ 146.997773][ T6781] team0: Port device team_slave_0 added [ 147.003330][ T6666] udevd[6666]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.027974][ T6781] team0: Port device team_slave_1 added [ 147.150745][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.150767][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.150817][ T6781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.152764][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.152779][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.152812][ T6781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.153303][ T6818] lo speed is unknown, defaulting to 1000 [ 147.285448][ T5612] Bluetooth: hci16: command tx timeout [ 147.616244][ T6781] hsr_slave_0: entered promiscuous mode [ 147.622069][ T6781] hsr_slave_1: entered promiscuous mode [ 147.624865][ T6781] debugfs: 'hsr0' already exists in 'hsr' [ 147.624886][ T6781] Cannot create hsr debugfs directory [ 147.678910][ T5612] Bluetooth: hci14: command tx timeout [ 147.919765][ T5612] Bluetooth: hci13: command tx timeout [ 148.503436][ T6781] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.550968][ T5728] usb 6-1: USB disconnect, device number 2 [ 148.640719][ T5612] Bluetooth: hci15: command tx timeout [ 148.732895][ T6781] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.761804][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.761990][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.762228][ T6804] bridge_slave_0: entered allmulticast mode [ 148.764373][ T6804] bridge_slave_0: entered promiscuous mode [ 148.795840][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.795949][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.796081][ T6804] bridge_slave_1: entered allmulticast mode [ 148.798507][ T6804] bridge_slave_1: entered promiscuous mode [ 148.892191][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.951637][ T6781] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.967758][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.082877][ T6781] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.109739][ T6804] team0: Port device team_slave_0 added [ 149.126956][ T6804] team0: Port device team_slave_1 added [ 149.216013][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.216036][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.216067][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.243525][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.243542][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.243572][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.358316][ T5612] Bluetooth: hci16: command tx timeout [ 149.422488][ T6804] hsr_slave_0: entered promiscuous mode [ 149.423471][ T6804] hsr_slave_1: entered promiscuous mode [ 149.424098][ T6804] debugfs: 'hsr0' already exists in 'hsr' [ 149.424120][ T6804] Cannot create hsr debugfs directory [ 149.487133][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.487330][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.487476][ T6818] bridge_slave_0: entered allmulticast mode [ 149.493942][ T6818] bridge_slave_0: entered promiscuous mode [ 149.497522][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.501644][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.501790][ T6818] bridge_slave_1: entered allmulticast mode [ 149.504159][ T6818] bridge_slave_1: entered promiscuous mode [ 149.590087][ T6818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.633883][ T6818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.701421][ T6818] team0: Port device team_slave_0 added [ 149.704109][ T6818] team0: Port device team_slave_1 added [ 149.758656][ T5612] Bluetooth: hci14: command tx timeout [ 149.781028][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.781049][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.781077][ T6818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.804194][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.804216][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.804247][ T6818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.911742][ T6804] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.940924][ T6818] hsr_slave_0: entered promiscuous mode [ 149.945817][ T6818] hsr_slave_1: entered promiscuous mode [ 149.946604][ T6818] debugfs: 'hsr0' already exists in 'hsr' [ 149.946625][ T6818] Cannot create hsr debugfs directory [ 150.052756][ T6915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.117760][ T6781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.135137][ T6781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.136146][ T6781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.142252][ T6781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.183468][ T6781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.191808][ T6781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.226964][ T6781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.234725][ T6781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.334400][ T6804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.347472][ T6804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.363922][ T6804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.376090][ T6804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.406763][ T6818] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.429941][ T6804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.433731][ T6804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.435429][ T6804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.439019][ T6804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.504541][ T6818] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.603178][ T6818] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.637945][ T6781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.682091][ T6818] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.710427][ T6781] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.721087][ T5612] Bluetooth: hci15: command tx timeout [ 150.735692][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.749489][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.749594][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.787775][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.787855][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.841287][ T6804] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.882516][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.882624][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.906675][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.906782][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.066549][ T6818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.081230][ T6818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.082448][ T6818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.085401][ T6818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.125346][ T6818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.136691][ T6818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.143563][ T6818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.163485][ T6818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.439466][ T5612] Bluetooth: hci16: command tx timeout [ 151.495061][ T6818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.546006][ T6818] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.566032][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.566167][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.622318][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.622456][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.839563][ T5612] Bluetooth: hci14: command tx timeout [ 152.215364][ T6781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.356301][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.467865][ T6804] veth0_vlan: entered promiscuous mode [ 152.477718][ T6804] veth1_vlan: entered promiscuous mode [ 152.556172][ T6804] veth0_macvtap: entered promiscuous mode [ 152.579582][ T6804] veth1_macvtap: entered promiscuous mode [ 152.619312][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.635977][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.710120][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.717007][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.720611][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.722103][ T133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.798852][ T5612] Bluetooth: hci15: command tx timeout [ 152.822720][ T6818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.898593][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.898620][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.989698][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.989724][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.036233][ T6781] veth0_vlan: entered promiscuous mode [ 153.063344][ T6781] veth1_vlan: entered promiscuous mode [ 153.174143][ T6781] veth0_macvtap: entered promiscuous mode [ 153.193325][ T6781] veth1_macvtap: entered promiscuous mode [ 153.242823][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.265366][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.370771][ T171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.398309][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.402029][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.402105][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.511582][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.511609][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.516929][ T6818] veth0_vlan: entered promiscuous mode [ 153.518392][ T5612] Bluetooth: hci16: command tx timeout [ 153.581262][ T6818] veth1_vlan: entered promiscuous mode [ 153.665736][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.665763][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.710254][ T6818] veth0_macvtap: entered promiscuous mode [ 153.717633][ T6818] veth1_macvtap: entered promiscuous mode [ 153.777235][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.791848][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.818628][ T171] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.819211][ T171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.819245][ T171] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.819275][ T171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.074594][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.074619][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.195036][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.195062][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.358772][ T7014] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 154.360514][ T669] IPVS: starting estimator thread 0... [ 154.464930][ T7015] IPVS: using max 25 ests per chain, 60000 per kthread [ 154.538390][ T5728] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.609437][ T7025] netlink: 56 bytes leftover after parsing attributes in process `syz.0.220'. [ 154.691951][ T5728] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 154.695540][ T5728] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.695581][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.712970][ T5728] usb 5-1: config 0 descriptor?? [ 154.871031][ T52] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 154.873406][ T52] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 154.876815][ T52] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 154.883305][ T52] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 154.899338][ T52] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 155.940076][ T7029] lo speed is unknown, defaulting to 1000 [ 156.875080][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.875260][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.875387][ T7029] bridge_slave_0: entered allmulticast mode [ 156.877352][ T7029] bridge_slave_0: entered promiscuous mode [ 156.881903][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.882092][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.882253][ T7029] bridge_slave_1: entered allmulticast mode [ 156.884329][ T7029] bridge_slave_1: entered promiscuous mode [ 156.928710][ T7029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.932648][ T7029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.958862][ T5612] Bluetooth: hci17: command tx timeout [ 156.968368][ T7029] team0: Port device team_slave_0 added [ 156.971648][ T7029] team0: Port device team_slave_1 added [ 157.024588][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.024610][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.024645][ T7029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.026833][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.026850][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.026881][ T7029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.176854][ T7029] hsr_slave_0: entered promiscuous mode [ 157.179056][ T7029] hsr_slave_1: entered promiscuous mode [ 157.179905][ T7029] debugfs: 'hsr0' already exists in 'hsr' [ 157.179926][ T7029] Cannot create hsr debugfs directory [ 157.310332][ T5728] usbhid 5-1:0.0: can't add hid device: -71 [ 157.310457][ T5728] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 157.341425][ T5728] usb 5-1: USB disconnect, device number 3 [ 157.471851][ T7029] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.556049][ T7029] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.646878][ T7029] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.721199][ T7029] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.880987][ T7029] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 157.884146][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.884926][ T7029] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 157.887524][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.892337][ T7029] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 157.900319][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.901459][ T7029] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 157.905790][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.016226][ T7029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.045656][ T7029] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.057122][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.057222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.080340][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.080473][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.555307][ T7029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.824976][ T7029] veth0_vlan: entered promiscuous mode [ 158.832005][ T7029] veth1_vlan: entered promiscuous mode [ 158.867211][ T7029] veth0_macvtap: entered promiscuous mode [ 158.873297][ T7029] veth1_macvtap: entered promiscuous mode [ 158.894485][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.909603][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.931335][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.931388][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.931433][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.025153][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.025180][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.053140][ T5612] Bluetooth: hci17: command tx timeout [ 159.058343][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.095717][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.095745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.118460][ T5612] Bluetooth: hci17: command tx timeout [ 163.198368][ T5612] Bluetooth: hci17: command tx timeout [ 164.056827][ T52] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 164.067251][ T52] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 164.071450][ T52] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 164.080322][ T52] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 164.080961][ T52] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 164.444538][ T7120] lo speed is unknown, defaulting to 1000 [ 164.930858][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.930975][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.931090][ T7120] bridge_slave_0: entered allmulticast mode [ 164.932685][ T7120] bridge_slave_0: entered promiscuous mode [ 164.936696][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.936846][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.936997][ T7120] bridge_slave_1: entered allmulticast mode [ 164.939237][ T7120] bridge_slave_1: entered promiscuous mode [ 164.977315][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.981412][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.027395][ T7120] team0: Port device team_slave_0 added [ 165.030591][ T7120] team0: Port device team_slave_1 added [ 165.060900][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.060921][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.060951][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.062714][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.062730][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.062759][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.139681][ T7120] hsr_slave_0: entered promiscuous mode [ 165.140859][ T7120] hsr_slave_1: entered promiscuous mode [ 165.141651][ T7120] debugfs: 'hsr0' already exists in 'hsr' [ 165.141672][ T7120] Cannot create hsr debugfs directory [ 165.329318][ T7120] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.399309][ T7120] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.464850][ T7120] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.538766][ T7120] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.677710][ T7120] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 165.689480][ T7120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.690473][ T7120] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 165.693686][ T7120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.694539][ T7120] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 165.697684][ T7120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.700736][ T7120] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 165.710677][ T7120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.843443][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.860924][ T7120] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.869354][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.869465][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.886385][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.886497][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.942365][ T7120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.168586][ T5612] Bluetooth: hci18: command tx timeout [ 166.374108][ T7120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.653328][ T7120] veth0_vlan: entered promiscuous mode [ 166.665945][ T7120] veth1_vlan: entered promiscuous mode [ 166.697296][ T7120] veth0_macvtap: entered promiscuous mode [ 166.707903][ T7120] veth1_macvtap: entered promiscuous mode [ 166.746054][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.752848][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.799101][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.799193][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.799877][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.801117][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.865028][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.865055][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.916878][ T669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.916904][ T669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.084864][ T7165] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 167.099055][ T59] IPVS: starting estimator thread 0... [ 167.168525][ T52] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 167.169778][ T52] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 167.170602][ T52] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 167.171814][ T52] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 167.172448][ T52] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 167.188831][ T7166] IPVS: using max 25 ests per chain, 60000 per kthread [ 167.316887][ T7174] netlink: 56 bytes leftover after parsing attributes in process `syz.7.233'. [ 167.723720][ T7167] lo speed is unknown, defaulting to 1000 [ 167.888150][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 168.039511][ T10] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 168.042393][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 168.042425][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.046561][ T10] usb 8-1: config 0 descriptor?? [ 168.238382][ T5612] Bluetooth: hci18: command tx timeout [ 168.332827][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.333007][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.333141][ T7167] bridge_slave_0: entered allmulticast mode [ 168.335073][ T7167] bridge_slave_0: entered promiscuous mode [ 168.338567][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.338761][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.338912][ T7167] bridge_slave_1: entered allmulticast mode [ 168.341471][ T7167] bridge_slave_1: entered promiscuous mode [ 168.430680][ T7167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.434827][ T7167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.490191][ T7167] team0: Port device team_slave_0 added [ 168.502862][ T7167] team0: Port device team_slave_1 added [ 168.557054][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.557078][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.557112][ T7167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.564628][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.564647][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.564679][ T7167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.700708][ T7167] hsr_slave_0: entered promiscuous mode [ 168.702019][ T7167] hsr_slave_1: entered promiscuous mode [ 168.703002][ T7167] debugfs: 'hsr0' already exists in 'hsr' [ 168.703045][ T7167] Cannot create hsr debugfs directory [ 168.954863][ T7167] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.033056][ T7167] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.112959][ T7167] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.170843][ T7167] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.278595][ T5612] Bluetooth: hci19: command tx timeout [ 169.340755][ T7167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.345417][ T7167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.346494][ T7167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.362192][ T7167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.364009][ T7167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.377902][ T7167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.380802][ T7167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.395652][ T7167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.497610][ T7167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.530258][ T7167] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.555892][ T669] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.556003][ T669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.558940][ T669] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.559057][ T669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.172460][ T52] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 170.173628][ T52] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 170.174265][ T52] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 170.177268][ T52] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 170.180962][ T52] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 170.299915][ T7167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.318083][ T52] Bluetooth: hci18: command tx timeout [ 170.373369][ T7167] veth0_vlan: entered promiscuous mode [ 170.387386][ T7167] veth1_vlan: entered promiscuous mode [ 170.439926][ T7167] veth0_macvtap: entered promiscuous mode [ 170.445310][ T7167] veth1_macvtap: entered promiscuous mode [ 170.475969][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.494788][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.715797][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.715825][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.728417][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.728468][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.728516][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.728558][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.776644][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 170.776756][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 170.794719][ T10] usb 8-1: USB disconnect, device number 4 [ 170.909929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.909957][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.121542][ T7214] lo speed is unknown, defaulting to 1000 [ 171.360270][ T52] Bluetooth: hci19: command tx timeout [ 171.704442][ T5612] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 171.707110][ T5612] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 171.711216][ T5612] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 171.718446][ T5612] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 171.719096][ T5612] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 171.826985][ T7248] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 171.873469][ T7247] netlink: 56 bytes leftover after parsing attributes in process `syz.7.245'. [ 171.876089][ T7247] binder: 7245:7247 ioctl c0306201 0 returned -14 [ 172.239656][ T5612] Bluetooth: hci20: command tx timeout [ 172.402721][ T5612] Bluetooth: hci18: command tx timeout [ 172.527384][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.248'. [ 172.629174][ T7268] ovs_dp0: entered promiscuous mode [ 172.658981][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.659097][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.659241][ T7214] bridge_slave_0: entered allmulticast mode [ 172.665943][ T7214] bridge_slave_0: entered promiscuous mode [ 172.701762][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.702369][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.704122][ T7214] bridge_slave_1: entered allmulticast mode [ 172.707816][ T7214] bridge_slave_1: entered promiscuous mode [ 172.758184][ T879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 172.912133][ T879] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 172.914485][ T879] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.914528][ T879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.964440][ T879] usb 2-1: config 0 descriptor?? [ 172.970557][ T7214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.023721][ T7214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.142694][ T52] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 173.146346][ T52] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 173.162561][ T52] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 173.167490][ T52] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 173.176217][ T52] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 173.195930][ T7240] lo speed is unknown, defaulting to 1000 [ 173.234589][ T7214] team0: Port device team_slave_0 added [ 173.242553][ T7214] team0: Port device team_slave_1 added [ 173.273914][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.7.252'. [ 173.438605][ T52] Bluetooth: hci19: command tx timeout [ 173.460063][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.460086][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.460119][ T7214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.462200][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.462218][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.462251][ T7214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.639713][ T7214] hsr_slave_0: entered promiscuous mode [ 173.640803][ T7214] hsr_slave_1: entered promiscuous mode [ 173.641482][ T7214] debugfs: 'hsr0' already exists in 'hsr' [ 173.641501][ T7214] Cannot create hsr debugfs directory [ 173.782230][ T52] Bluetooth: hci21: command tx timeout [ 174.318634][ T52] Bluetooth: hci20: command tx timeout [ 174.424656][ T7214] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.683875][ T7214] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.784003][ T5612] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 174.786443][ T5612] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 174.787099][ T5612] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 174.818382][ T5612] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 174.822115][ T5612] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 174.979772][ T7214] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.161327][ T7214] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.278682][ T52] Bluetooth: hci22: command tx timeout [ 175.284282][ T7284] lo speed is unknown, defaulting to 1000 [ 175.519172][ T52] Bluetooth: hci19: command tx timeout [ 175.724845][ T879] usbhid 2-1:0.0: can't add hid device: -71 [ 175.724973][ T879] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 175.763303][ T879] usb 2-1: USB disconnect, device number 2 [ 175.839887][ T52] Bluetooth: hci21: command tx timeout [ 176.274870][ T7214] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 176.291844][ T7214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.292822][ T7214] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 176.305327][ T7214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.350536][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.350673][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.350842][ T7240] bridge_slave_0: entered allmulticast mode [ 176.354888][ T7240] bridge_slave_0: entered promiscuous mode [ 176.396273][ T7214] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 176.401457][ T52] Bluetooth: hci20: command tx timeout [ 176.427501][ T7214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.449763][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.449883][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.450060][ T7240] bridge_slave_1: entered allmulticast mode [ 176.455342][ T7240] bridge_slave_1: entered promiscuous mode [ 176.542334][ T7214] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 176.547577][ T7214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.599041][ T7240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.622040][ T7311] lo speed is unknown, defaulting to 1000 [ 176.703480][ T7240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.880720][ T52] Bluetooth: hci23: command tx timeout [ 176.899628][ T7240] team0: Port device team_slave_0 added [ 176.926694][ T7240] team0: Port device team_slave_1 added [ 177.075628][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.075652][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.075686][ T7240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.221552][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.221577][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.221611][ T7240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.311571][ T7370] netlink: 56 bytes leftover after parsing attributes in process `syz.1.257'. [ 177.346485][ T7370] binder: 7368:7370 ioctl c0306201 0 returned -14 [ 177.358882][ T52] Bluetooth: hci22: command tx timeout [ 177.625039][ T7240] hsr_slave_0: entered promiscuous mode [ 177.626324][ T7240] hsr_slave_1: entered promiscuous mode [ 177.627203][ T7240] debugfs: 'hsr0' already exists in 'hsr' [ 177.627226][ T7240] Cannot create hsr debugfs directory [ 177.918743][ T52] Bluetooth: hci21: command tx timeout [ 178.030516][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.030678][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.030796][ T7284] bridge_slave_0: entered allmulticast mode [ 178.032333][ T7284] bridge_slave_0: entered promiscuous mode [ 178.051709][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.051822][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.052036][ T7284] bridge_slave_1: entered allmulticast mode [ 178.055104][ T7284] bridge_slave_1: entered promiscuous mode [ 178.190524][ T7284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.251989][ T7284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.256299][ T7214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.362509][ T7240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.400694][ T7284] team0: Port device team_slave_0 added [ 178.405337][ T7284] team0: Port device team_slave_1 added [ 178.474978][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.475002][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.475035][ T7284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.478901][ T52] Bluetooth: hci20: command tx timeout [ 178.547857][ T7396] BEET mode doesn't support inner IPv4 fragments [ 178.580683][ T7240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.606427][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.606447][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.606481][ T7284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.698283][ T7214] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.729444][ T7240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.843331][ T7240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.867231][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.867313][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.887240][ T7284] hsr_slave_0: entered promiscuous mode [ 178.894550][ T7284] hsr_slave_1: entered promiscuous mode [ 178.895380][ T7284] debugfs: 'hsr0' already exists in 'hsr' [ 178.895403][ T7284] Cannot create hsr debugfs directory [ 178.968414][ T5612] Bluetooth: hci23: command tx timeout [ 178.987064][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.987197][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.999335][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.999459][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.999657][ T7311] bridge_slave_0: entered allmulticast mode [ 179.005126][ T7311] bridge_slave_0: entered promiscuous mode [ 179.014571][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.014690][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.014871][ T7311] bridge_slave_1: entered allmulticast mode [ 179.020620][ T7311] bridge_slave_1: entered promiscuous mode [ 179.155579][ T7311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.181191][ T7311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.261221][ T7311] team0: Port device team_slave_0 added [ 179.297810][ T7311] team0: Port device team_slave_1 added [ 179.440530][ T5612] Bluetooth: hci22: command tx timeout [ 179.477535][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.477560][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.477591][ T7311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.480208][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.480224][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.480256][ T7311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.500452][ T7240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.545580][ T7240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.546665][ T7240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.597555][ T7240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.612638][ T7240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.623125][ T7240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.626562][ T7240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.654633][ T7240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.713543][ T7311] hsr_slave_0: entered promiscuous mode [ 179.714501][ T7311] hsr_slave_1: entered promiscuous mode [ 179.715184][ T7311] debugfs: 'hsr0' already exists in 'hsr' [ 179.715203][ T7311] Cannot create hsr debugfs directory [ 179.973961][ T7284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.000635][ T5612] Bluetooth: hci21: command tx timeout [ 180.143105][ T7284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.173242][ T50] netdevsim netdevsim20 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.403953][ T7284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.628881][ T7284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.723514][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 181.006372][ T7240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.039372][ T52] Bluetooth: hci23: command tx timeout [ 181.087123][ T7442] netlink: 56 bytes leftover after parsing attributes in process `syz.1.266'. [ 181.103526][ T7442] binder: 7441:7442 ioctl c0306201 0 returned -14 [ 181.123436][ T7214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.216911][ T7240] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.250982][ T7284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.294510][ T7284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.346157][ T7284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.371673][ T7284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.376977][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.377096][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.406191][ T7284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.427002][ T7284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.471903][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.472027][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.497435][ T7284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.514672][ T7284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.519138][ T52] Bluetooth: hci22: command tx timeout [ 181.582935][ T7311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.626808][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 181.839296][ T7311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.072714][ T7311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.124847][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 182.241853][ T7311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.500856][ T7214] veth0_vlan: entered promiscuous mode [ 182.586883][ T7214] veth1_vlan: entered promiscuous mode [ 182.605300][ T7284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.694369][ T7284] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.695464][ T171] nci: nci_rf_intf_activated_ntf_packet: error when signaling tm activation [ 182.695653][ T7311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.736539][ T7311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.752690][ T7311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.756440][ T7311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.757246][ T7311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.773368][ T7311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.776267][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.776376][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.826187][ T7311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.831511][ T7311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.836155][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.836261][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.885597][ T7214] veth0_macvtap: entered promiscuous mode [ 182.903064][ T7214] veth1_macvtap: entered promiscuous mode [ 183.009324][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.073928][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.118410][ T52] Bluetooth: hci23: command tx timeout [ 183.178655][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.179048][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.179452][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.179507][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.403193][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.403221][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.422131][ T7311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.450081][ T7240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.540051][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.540078][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.585586][ T7311] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.615448][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.615565][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.671400][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.671514][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.729176][ T7240] veth0_vlan: entered promiscuous mode [ 183.790780][ T7240] veth1_vlan: entered promiscuous mode [ 183.926131][ T7240] veth0_macvtap: entered promiscuous mode [ 183.946307][ T7240] veth1_macvtap: entered promiscuous mode [ 184.047366][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.105619][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.252006][ T171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.258662][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.259880][ T171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.260223][ T171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.448586][ T7284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.539020][ T7284] veth0_vlan: entered promiscuous mode [ 184.547671][ T7284] veth1_vlan: entered promiscuous mode [ 184.727490][ T7284] veth0_macvtap: entered promiscuous mode [ 184.747594][ T7284] veth1_macvtap: entered promiscuous mode [ 184.787298][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.815349][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.903552][ T7311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.928076][ T669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.928599][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.928645][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.949450][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.207638][ T7526] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.207669][ T7526] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 185.239060][ T7526] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.239086][ T7526] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 185.292508][ T7526] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.292536][ T7526] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 185.319335][ T7526] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.319361][ T7526] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 185.326836][ T7311] veth0_vlan: entered promiscuous mode [ 185.337041][ T7311] veth1_vlan: entered promiscuous mode [ 185.363440][ T7526] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 185.363465][ T7526] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 185.424652][ T7526] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 185.424680][ T7526] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 185.463442][ T7526] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 185.463471][ T7526] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 185.501336][ T7526] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 185.501366][ T7526] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 185.503647][ T7486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.556442][ T7311] veth0_macvtap: entered promiscuous mode [ 185.614628][ T7311] veth1_macvtap: entered promiscuous mode [ 185.637721][ T7526] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 185.637748][ T7526] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 185.674320][ T7526] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 185.674344][ T7526] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 185.704876][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.753940][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.773071][ T7526] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 185.773096][ T7526] Bluetooth: hci11: Error when powering off device on rfkill (-4) [ 185.826605][ T7526] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 185.826635][ T7526] Bluetooth: hci12: Error when powering off device on rfkill (-4) [ 185.904406][ T7526] Bluetooth: hci13: Opcode 0x0c1a failed: -4 [ 185.904435][ T7526] Bluetooth: hci13: Error when powering off device on rfkill (-4) [ 185.932638][ T171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.933870][ T171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.934438][ T171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.934762][ T171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.965776][ T7526] Bluetooth: hci14: Opcode 0x0c1a failed: -4 [ 185.965801][ T7526] Bluetooth: hci14: Error when powering off device on rfkill (-4) [ 186.019502][ T7526] Bluetooth: hci15: Opcode 0x0c1a failed: -4 [ 186.019533][ T7526] Bluetooth: hci15: Error when powering off device on rfkill (-4) [ 186.046783][ T7526] Bluetooth: hci16: Opcode 0x0c1a failed: -4 [ 186.046806][ T7526] Bluetooth: hci16: Error when powering off device on rfkill (-4) [ 186.070669][ T7526] Bluetooth: hci17: Opcode 0x0c1a failed: -4 [ 186.070696][ T7526] Bluetooth: hci17: Error when powering off device on rfkill (-4) [ 186.107292][ T7526] Bluetooth: hci18: Opcode 0x0c1a failed: -4 [ 186.107337][ T7526] Bluetooth: hci18: Error when powering off device on rfkill (-4) [ 186.126683][ T7526] Bluetooth: hci19: Opcode 0x0c1a failed: -4 [ 186.126708][ T7526] Bluetooth: hci19: Error when powering off device on rfkill (-4) [ 186.151724][ T7526] Bluetooth: hci20: Opcode 0x0c1a failed: -4 [ 186.151753][ T7526] Bluetooth: hci20: Error when powering off device on rfkill (-4) [ 186.166194][ T7526] Bluetooth: hci21: Opcode 0x0c1a failed: -4 [ 186.166217][ T7526] Bluetooth: hci21: Error when powering off device on rfkill (-4) [ 186.215993][ T7526] Bluetooth: hci22: Opcode 0x0c1a failed: -4 [ 186.216022][ T7526] Bluetooth: hci22: Error when powering off device on rfkill (-4) [ 186.250206][ T7526] Bluetooth: hci23: Opcode 0x0c1a failed: -4 [ 186.250235][ T7526] Bluetooth: hci23: Error when powering off device on rfkill (-4) [ 186.594773][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.594799][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.764670][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.764699][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.857059][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.857082][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.985347][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.985451][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.175609][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.175636][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.251645][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.251671][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.739925][ T7585] lo speed is unknown, defaulting to 1000 [ 187.890906][ T7596] openvswitch: netlink: Key 2 has unexpected len 12 expected 4 [ 187.908241][ T5757] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 187.974890][ T7584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.068472][ T5757] usb 6-1: Using ep0 maxpacket: 32 [ 188.069316][ T5757] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 188.070379][ T5757] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.070409][ T5757] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 188.070440][ T5757] usb 6-1: config 0 interface 0 has no altsetting 0 [ 188.072820][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.072848][ T5757] usb 6-1: Product: syz [ 188.072866][ T5757] usb 6-1: Manufacturer: syz [ 188.072884][ T5757] usb 6-1: SerialNumber: syz [ 188.104299][ T5757] usb 6-1: config 0 descriptor?? [ 188.289846][ T7597] syzkaller0: entered promiscuous mode [ 188.289874][ T7597] syzkaller0: entered allmulticast mode [ 188.293914][ T7597] tipc: Started in network mode [ 188.293947][ T7597] tipc: Node identity e2301f22335f, cluster identity 4711 [ 188.294136][ T7597] tipc: Enabled bearer , priority 0 [ 188.330140][ T7597] tipc: Resetting bearer [ 188.358578][ T7595] tipc: Resetting bearer [ 188.416413][ T7595] tipc: Disabling bearer [ 188.569856][ T5757] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 188.662654][ T5612] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 188.667033][ T5612] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 188.675889][ T5612] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 188.686487][ T5612] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 188.702286][ T5612] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 188.773813][ T7584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.774759][ T5757] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 188.774838][ T5757] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 188.948605][ T5743] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 189.074748][ T7620] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 189.075931][ T7620] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 189.099634][ T5743] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 189.100970][ T5743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.101017][ T5743] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 189.101058][ T5743] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 189.101093][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.103555][ T7620] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 189.103649][ T7620] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 189.186091][ T7584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.218856][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 189.256972][ T7620] hsr_slave_0: left promiscuous mode [ 189.284035][ T7620] hsr_slave_1: left promiscuous mode [ 189.595258][ T7584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.754576][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.9.293'. [ 189.832551][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.833750][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.933056][ T5743] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 189.933129][ T5743] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 189.936754][ T5743] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 189.936808][ T5743] ATM dev 0: poll status: error -71 [ 189.936842][ T5743] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 189.936857][ T5743] ATM dev 0: usbatm_submit_urb: urb 0xffff88809a877600 submission failed (-8)! [ 189.937023][ T5743] ATM dev 0: usbatm_submit_urb: urb 0xffff88809a877500 submission failed (-8)! [ 189.937044][ T5743] ATM dev 0: usbatm_submit_urb: urb 0xffff88809a877300 submission failed (-8)! [ 189.937061][ T5743] ATM dev 0: usbatm_submit_urb: urb 0xffff88809a877b00 submission failed (-8)! [ 190.040330][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88809a877b00 submission failed (-8)! [ 190.074194][ T5735] usb 6-1: USB disconnect, device number 3 [ 190.119479][ T5743] usb 4-1: USB disconnect, device number 4 [ 190.159026][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88809a877b00 submission failed (-19)! [ 190.188814][ T7611] lo speed is unknown, defaulting to 1000 [ 190.798237][ T5612] Bluetooth: hci24: command tx timeout [ 190.915253][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.301'. [ 190.916403][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.301'. [ 191.265891][ T7674] lo speed is unknown, defaulting to 1000 [ 191.462179][ T7688] bridge0: port 3(batadv0) entered blocking state [ 191.462443][ T7688] bridge0: port 3(batadv0) entered disabled state [ 191.463633][ T7688] batadv0: entered allmulticast mode [ 191.500852][ T7688] batadv0: entered promiscuous mode [ 191.502907][ T7688] bridge0: port 3(batadv0) entered blocking state [ 191.503030][ T7688] bridge0: port 3(batadv0) entered forwarding state [ 191.849922][ T38] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 191.849947][ T38] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 192.640581][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 192.690966][ T7672] lo speed is unknown, defaulting to 1000 [ 192.878445][ T52] Bluetooth: hci24: command tx timeout [ 192.892572][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.894480][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.894640][ T7611] bridge_slave_0: entered allmulticast mode [ 192.906974][ T7611] bridge_slave_0: entered promiscuous mode [ 192.908136][ T983] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 193.068444][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 193.075538][ T983] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 193.080987][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 193.085782][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.085812][ T983] usb 3-1: Product: syz [ 193.085830][ T983] usb 3-1: Manufacturer: syz [ 193.085849][ T983] usb 3-1: SerialNumber: syz [ 193.111099][ T983] usb 3-1: config 0 descriptor?? [ 193.146255][ T983] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.146297][ T983] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 193.182647][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.182789][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.183041][ T7611] bridge_slave_1: entered allmulticast mode [ 193.192743][ T7611] bridge_slave_1: entered promiscuous mode [ 193.276023][ T7611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.291943][ T7611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.423515][ T7611] team0: Port device team_slave_0 added [ 193.434678][ T7611] team0: Port device team_slave_1 added [ 193.548111][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.548134][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.548167][ T7611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.553287][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.553304][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.553337][ T7611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.614662][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.614751][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.735248][ T983] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 193.996437][ T7611] hsr_slave_0: entered promiscuous mode [ 193.997895][ T7611] hsr_slave_1: entered promiscuous mode [ 194.006511][ T7611] debugfs: 'hsr0' already exists in 'hsr' [ 194.006535][ T7611] Cannot create hsr debugfs directory [ 194.238162][ T983] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 194.238225][ T983] em28xx 3-1:0.0: board has no eeprom [ 194.598435][ T983] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 194.598472][ T983] em28xx 3-1:0.0: dvb set to bulk mode. [ 194.600942][ T9] em28xx 3-1:0.0: Binding DVB extension [ 194.739407][ T10] usb 3-1: USB disconnect, device number 4 [ 194.754709][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 194.885049][ T9] em28xx 3-1:0.0: Registering input extension [ 194.890338][ T10] em28xx 3-1:0.0: Closing input extension [ 194.961129][ T52] Bluetooth: hci24: command tx timeout [ 195.177784][ T7706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.177812][ T7706] nci: nci_start_poll: failed to set local general bytes [ 195.247701][ T7705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.255988][ T10] em28xx: Freeing device [ 195.283815][ T7611] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.587621][ T7611] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.697937][ T7611] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.884785][ T7611] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.410288][ T7611] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.427266][ T7611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.428701][ T7611] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.456200][ T7611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.464192][ T7611] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.491571][ T7611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.493227][ T7611] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.564247][ T7611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.754577][ T7611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.791493][ T7611] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.834650][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.834800][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.861828][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.861912][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.039115][ T52] Bluetooth: hci24: command tx timeout [ 197.432334][ T7611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.780740][ T7611] veth0_vlan: entered promiscuous mode [ 197.787815][ T7611] veth1_vlan: entered promiscuous mode [ 197.829488][ T7611] veth0_macvtap: entered promiscuous mode [ 197.833836][ T7611] veth1_macvtap: entered promiscuous mode [ 197.861563][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.884744][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.948686][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.949609][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.949652][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.949693][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.044329][ T7822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.044355][ T7822] nci: nci_start_poll: failed to set local general bytes [ 200.086165][ T7820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.217237][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.217264][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.320648][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.320676][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.557329][ T7875] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 202.595168][ T171] IPVS: starting estimator thread 0... [ 202.698463][ T7876] IPVS: using max 25 ests per chain, 60000 per kthread [ 203.098329][ T7878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.185406][ T7890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.185430][ T7890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.186756][ T7890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.186778][ T7890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.223009][ T7890] bridge0: port 3(batadv0) entered disabled state [ 203.227307][ T7890] batadv0 (unregistering): left allmulticast mode [ 203.227333][ T7890] batadv0 (unregistering): left promiscuous mode [ 203.227439][ T7890] bridge0: port 3(batadv0) entered disabled state [ 206.199034][ T5612] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 206.202465][ T5612] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 206.205493][ T5612] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 206.206695][ T5612] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 206.207382][ T5612] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 206.632472][ T7901] lo speed is unknown, defaulting to 1000 [ 207.127303][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.127466][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.127588][ T7901] bridge_slave_0: entered allmulticast mode [ 207.129649][ T7901] bridge_slave_0: entered promiscuous mode [ 207.132932][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.133096][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.133539][ T7901] bridge_slave_1: entered allmulticast mode [ 207.135556][ T7901] bridge_slave_1: entered promiscuous mode [ 207.181013][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.193246][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.232488][ T7901] team0: Port device team_slave_0 added [ 207.234932][ T7901] team0: Port device team_slave_1 added [ 207.264038][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.264059][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.264084][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.265634][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.265651][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.265681][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.370055][ T7901] hsr_slave_0: entered promiscuous mode [ 207.371200][ T7901] hsr_slave_1: entered promiscuous mode [ 207.371995][ T7901] debugfs: 'hsr0' already exists in 'hsr' [ 207.372016][ T7901] Cannot create hsr debugfs directory [ 207.629695][ T7901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.635690][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.636627][ T7901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.644629][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.646179][ T7901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.651206][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.652171][ T7901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.667084][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.751286][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.751424][ T7901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.751818][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.751944][ T7901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.832890][ T52] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 207.837074][ T52] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 207.845724][ T52] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 207.861546][ T52] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 207.862221][ T52] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 207.898742][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.933616][ T133] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.934480][ T133] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.964372][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.971852][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.971961][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.980839][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.980944][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.324747][ T5612] Bluetooth: hci25: command tx timeout [ 208.396692][ T7928] lo speed is unknown, defaulting to 1000 [ 208.764507][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.907152][ T7901] veth0_vlan: entered promiscuous mode [ 208.921934][ T7901] veth1_vlan: entered promiscuous mode [ 209.068022][ T7901] veth0_macvtap: entered promiscuous mode [ 209.114586][ T7901] veth1_macvtap: entered promiscuous mode [ 209.204919][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.205105][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.205256][ T7928] bridge_slave_0: entered allmulticast mode [ 209.206874][ T7928] bridge_slave_0: entered promiscuous mode [ 209.216761][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.216873][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.217024][ T7928] bridge_slave_1: entered allmulticast mode [ 209.219977][ T7928] bridge_slave_1: entered promiscuous mode [ 209.262717][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.297122][ T7928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.303578][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.317410][ T7928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.369502][ T7928] team0: Port device team_slave_0 added [ 209.376467][ T7928] team0: Port device team_slave_1 added [ 209.411658][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.411680][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.411709][ T7928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.413643][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.413660][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.413688][ T7928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.545953][ T1268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.575103][ T7928] hsr_slave_0: entered promiscuous mode [ 209.576360][ T7928] hsr_slave_1: entered promiscuous mode [ 209.577396][ T7928] debugfs: 'hsr0' already exists in 'hsr' [ 209.577420][ T7928] Cannot create hsr debugfs directory [ 209.712440][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.712468][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.823947][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.823975][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.872301][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.878690][ T669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.929384][ T52] Bluetooth: hci26: command tx timeout [ 209.931059][ T7928] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.981877][ T669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.033003][ T7928] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.123500][ T7928] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.212075][ T7928] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.399781][ T52] Bluetooth: hci25: command tx timeout [ 210.453732][ T7928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.476697][ T7928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.488711][ T7928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.492741][ T7928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.493850][ T7928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.497936][ T7928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.524051][ T7928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.544421][ T7928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.686581][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.716595][ T7928] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.734226][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.734308][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.784804][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.784889][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.840364][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.005163][ T52] Bluetooth: hci26: command tx timeout [ 212.380734][ T7928] veth0_vlan: entered promiscuous mode [ 212.395961][ T5612] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1 [ 212.397013][ T5612] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9 [ 212.397496][ T7928] veth1_vlan: entered promiscuous mode [ 212.397613][ T5612] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9 [ 212.398718][ T5612] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4 [ 212.399678][ T5612] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2 [ 212.480110][ T5612] Bluetooth: hci25: command tx timeout [ 212.481193][ T7928] veth0_macvtap: entered promiscuous mode [ 212.494193][ T7928] veth1_macvtap: entered promiscuous mode [ 212.531748][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.545619][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.581830][ T171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.582020][ T669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.582752][ T669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.582911][ T669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.758991][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.759019][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.842325][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.842352][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.206749][ T7998] lo speed is unknown, defaulting to 1000 [ 213.744051][ T5743] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 213.890204][ T5743] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 213.891518][ T5743] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.891570][ T5743] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 213.891604][ T5743] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 213.891652][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.057233][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.057386][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.057594][ T7998] bridge_slave_0: entered allmulticast mode [ 214.061299][ T7998] bridge_slave_0: entered promiscuous mode [ 214.067081][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.067328][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.067553][ T7998] bridge_slave_1: entered allmulticast mode [ 214.070785][ T7998] bridge_slave_1: entered promiscuous mode [ 214.103147][ T5612] Bluetooth: hci26: command tx timeout [ 214.177644][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.190982][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.226743][ T7998] team0: Port device team_slave_0 added [ 214.232521][ T7998] team0: Port device team_slave_1 added [ 214.286315][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.286340][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.286373][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.295753][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.295776][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.295809][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.422509][ T7998] hsr_slave_0: entered promiscuous mode [ 214.423652][ T7998] hsr_slave_1: entered promiscuous mode [ 214.424531][ T7998] debugfs: 'hsr0' already exists in 'hsr' [ 214.424555][ T7998] Cannot create hsr debugfs directory [ 214.478464][ T52] Bluetooth: hci27: command tx timeout [ 214.569417][ T52] Bluetooth: hci25: command tx timeout [ 214.667340][ T7998] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.781214][ T7998] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.857932][ T7998] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.950986][ T7998] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.135975][ T5743] cxacru 5-1:1.0: send of cm 0x90 failed (-71) [ 215.159272][ T5743] usb 5-1: USB disconnect, device number 4 [ 215.183788][ T8026] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 215.183817][ T8026] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 215.193737][ T7998] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 215.227518][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.229205][ T7998] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 215.240769][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.243145][ T7998] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 215.255782][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.257200][ T7998] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 215.269740][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.363737][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.401206][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.407231][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.407382][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.435044][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.435146][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.767694][ T5612] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1 [ 215.782586][ T5612] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9 [ 215.794559][ T5612] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9 [ 215.806869][ T5612] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4 [ 215.807895][ T5612] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2 [ 216.160516][ T52] Bluetooth: hci26: command tx timeout [ 216.466397][ T5612] Bluetooth: hci29: unexpected cc 0x0c03 length: 249 > 1 [ 216.477827][ T5612] Bluetooth: hci29: unexpected cc 0x1003 length: 249 > 9 [ 216.488640][ T5612] Bluetooth: hci29: unexpected cc 0x1001 length: 249 > 9 [ 216.489901][ T5612] Bluetooth: hci29: unexpected cc 0x0c23 length: 249 > 4 [ 216.490610][ T5612] Bluetooth: hci29: unexpected cc 0x0c38 length: 249 > 2 [ 216.559860][ T5612] Bluetooth: hci27: command tx timeout [ 216.703112][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.829592][ T8038] lo speed is unknown, defaulting to 1000 [ 217.943312][ T5612] Bluetooth: hci28: command tx timeout [ 218.036273][ T7998] veth0_vlan: entered promiscuous mode [ 218.132253][ T7998] veth1_vlan: entered promiscuous mode [ 218.186515][ T8055] lo speed is unknown, defaulting to 1000 [ 218.213125][ T7998] veth0_macvtap: entered promiscuous mode [ 218.230088][ T7998] veth1_macvtap: entered promiscuous mode [ 218.293611][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.332719][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.370560][ T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.370806][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.397665][ T38] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.397722][ T38] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.561040][ T52] Bluetooth: hci29: command tx timeout [ 218.639284][ T52] Bluetooth: hci27: command tx timeout [ 218.663959][ T52] Bluetooth: hci26: Unable to find connection for dst 66:55:44:33:22:11 sid 0x01 [ 218.872598][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.872627][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.982760][ T5612] Bluetooth: hci30: unexpected cc 0x0c03 length: 249 > 1 [ 218.984897][ T5612] Bluetooth: hci30: unexpected cc 0x1003 length: 249 > 9 [ 218.985130][ T8038] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.985424][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.985605][ T8038] bridge_slave_0: entered allmulticast mode [ 218.985768][ T5612] Bluetooth: hci30: unexpected cc 0x1001 length: 249 > 9 [ 218.991765][ T8038] bridge_slave_0: entered promiscuous mode [ 219.009646][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.009760][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.009921][ T8038] bridge_slave_1: entered allmulticast mode [ 219.010183][ T5612] Bluetooth: hci30: unexpected cc 0x0c23 length: 249 > 4 [ 219.010909][ T5612] Bluetooth: hci30: unexpected cc 0x0c38 length: 249 > 2 [ 219.082893][ T8038] bridge_slave_1: entered promiscuous mode [ 219.110742][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.110770][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.385167][ T8038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.398286][ T8038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.527242][ T8038] team0: Port device team_slave_0 added [ 219.566485][ T8038] team0: Port device team_slave_1 added [ 219.812508][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.812531][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.812564][ T8038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.817684][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.817701][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.817735][ T8038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.938532][ T8102] syzkaller0: entered promiscuous mode [ 219.938562][ T8102] syzkaller0: entered allmulticast mode [ 219.998666][ T52] Bluetooth: hci28: command tx timeout [ 220.014267][ T8101] tipc: Started in network mode [ 220.014301][ T8101] tipc: Node identity aece5f69b17c, cluster identity 4711 [ 220.019331][ T8101] tipc: Enabled bearer , priority 0 [ 220.059131][ T8102] tipc: Resetting bearer [ 220.148653][ T8111] Cannot find set identified by id 0 to match [ 220.224666][ T8100] tipc: Resetting bearer [ 220.274074][ T8100] tipc: Disabling bearer [ 220.326538][ T8038] hsr_slave_0: entered promiscuous mode [ 220.327727][ T8038] hsr_slave_1: entered promiscuous mode [ 220.342433][ T8038] debugfs: 'hsr0' already exists in 'hsr' [ 220.342458][ T8038] Cannot create hsr debugfs directory [ 220.619897][ T8091] lo speed is unknown, defaulting to 1000 [ 220.640811][ T52] Bluetooth: hci29: command tx timeout [ 220.718992][ T52] Bluetooth: hci27: command tx timeout [ 220.839089][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.839921][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.840108][ T8055] bridge_slave_0: entered allmulticast mode [ 220.842561][ T8055] bridge_slave_0: entered promiscuous mode [ 220.846116][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.846259][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.846419][ T8055] bridge_slave_1: entered allmulticast mode [ 220.856363][ T8055] bridge_slave_1: entered promiscuous mode [ 221.039840][ T52] Bluetooth: hci30: command tx timeout [ 221.044641][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.052611][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.090904][ T8038] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.174410][ T8055] team0: Port device team_slave_0 added [ 221.187064][ T8038] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.235376][ T8055] team0: Port device team_slave_1 added [ 221.275867][ T8038] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.353921][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.353941][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.353972][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.356045][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.356063][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.356100][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.483167][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 221.536671][ T8038] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.636208][ T8055] hsr_slave_0: entered promiscuous mode [ 221.637527][ T8055] hsr_slave_1: entered promiscuous mode [ 221.648697][ T8055] debugfs: 'hsr0' already exists in 'hsr' [ 221.648722][ T8055] Cannot create hsr debugfs directory [ 222.079848][ T52] Bluetooth: hci28: command tx timeout [ 222.122662][ T8038] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.151222][ T8038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.182365][ T8038] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.186795][ T8038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.187782][ T8038] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 222.210383][ T8038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.276506][ T8038] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 222.282371][ T8038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.313877][ T8055] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.404151][ T8055] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.439034][ T8150] syzkaller0: entered promiscuous mode [ 222.439055][ T8150] syzkaller0: entered allmulticast mode [ 222.460956][ T8152] tipc: Started in network mode [ 222.460991][ T8152] tipc: Node identity 7e7abc088ff9, cluster identity 4711 [ 222.462169][ T8152] tipc: Enabled bearer , priority 0 [ 222.510704][ T8055] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.517951][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.518650][ T8150] Zero length message leads to an empty skb [ 222.520880][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.521089][ T8091] bridge_slave_0: entered allmulticast mode [ 222.523289][ T8091] bridge_slave_0: entered promiscuous mode [ 222.527042][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.527161][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.527322][ T8091] bridge_slave_1: entered allmulticast mode [ 222.530121][ T8091] bridge_slave_1: entered promiscuous mode [ 222.539561][ T8150] tipc: Resetting bearer [ 222.565267][ T8148] tipc: Resetting bearer [ 222.597720][ T8148] tipc: Disabling bearer [ 222.664562][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.695611][ T8055] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.718870][ T52] Bluetooth: hci29: command tx timeout [ 222.723885][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.796087][ T8091] team0: Port device team_slave_0 added [ 222.805859][ T8091] team0: Port device team_slave_1 added [ 222.911270][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.911287][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.911310][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.914388][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.914404][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.914434][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.121254][ T52] Bluetooth: hci30: command tx timeout [ 223.167065][ T8091] hsr_slave_0: entered promiscuous mode [ 223.174692][ T8091] hsr_slave_1: entered promiscuous mode [ 223.175529][ T8091] debugfs: 'hsr0' already exists in 'hsr' [ 223.175550][ T8091] Cannot create hsr debugfs directory [ 223.292320][ T8166] batman_adv: batadv0: Adding interface: veth0 [ 223.292340][ T8166] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.292371][ T8166] batman_adv: batadv0: Interface activated: veth0 [ 223.342965][ T8055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.351463][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.393911][ T8055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.403107][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.412380][ T8038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.422026][ T8055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.435759][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.457857][ T8055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.481789][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.630161][ T8038] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.662299][ T8124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.721561][ T8091] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.855669][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.855820][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.907746][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.907858][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.965202][ T8091] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.133360][ T8091] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.159930][ T52] Bluetooth: hci28: command tx timeout [ 224.282080][ T8091] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.416066][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.484251][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.515987][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.516135][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.551642][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.551753][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.804069][ T52] Bluetooth: hci29: command tx timeout [ 224.951154][ T8091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 224.955221][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.956724][ T8091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 224.970068][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.034585][ T8091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 225.061903][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.098572][ T8091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 225.133692][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.199099][ T52] Bluetooth: hci30: command tx timeout [ 225.365061][ T8223] FAULT_INJECTION: forcing a failure. [ 225.365061][ T8223] name failslab, interval 1, probability 100, space 0, times 0 [ 225.365123][ T8223] CPU: 0 UID: 0 PID: 8223 Comm: syz.4.397 Not tainted syzkaller #0 PREEMPT(full) [ 225.365153][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 225.365170][ T8223] Call Trace: [ 225.365180][ T8223] [ 225.365191][ T8223] dump_stack_lvl+0xe8/0x150 [ 225.365238][ T8223] should_fail_ex+0x410/0x560 [ 225.365278][ T8223] should_failslab+0xa8/0x100 [ 225.365316][ T8223] ? copy_net_ns+0x1e3/0x780 [ 225.365351][ T8223] kmem_cache_alloc_noprof+0xa1/0x600 [ 225.365376][ T8223] ? __kmalloc_noprof+0x38c/0x720 [ 225.365406][ T8223] ? copy_net_ns+0x1b1/0x780 [ 225.365437][ T8223] ? copy_net_ns+0x1e3/0x780 [ 225.365478][ T8223] copy_net_ns+0x1e3/0x780 [ 225.365509][ T8223] ? copy_cgroup_ns+0x246/0x880 [ 225.365548][ T8223] create_new_namespaces+0x3f0/0x6b0 [ 225.365590][ T8223] ? security_capable+0x7e/0x2c0 [ 225.365642][ T8223] unshare_nsproxy_namespaces+0x149/0x190 [ 225.365685][ T8223] ksys_unshare+0x5a7/0x950 [ 225.365734][ T8223] ? __pfx_ksys_unshare+0x10/0x10 [ 225.365776][ T8223] ? rcu_is_watching+0x16/0xb0 [ 225.365825][ T8223] __x64_sys_unshare+0x38/0x50 [ 225.365867][ T8223] do_syscall_64+0x166/0x520 [ 225.365905][ T8223] ? trace_irq_disable+0x3b/0x140 [ 225.365935][ T8223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.365970][ T8223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.365997][ T8223] RIP: 0033:0x7f529619e159 [ 225.366021][ T8223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.366044][ T8223] RSP: 002b:00007f5296fbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 225.366072][ T8223] RAX: ffffffffffffffda RBX: 00007f5296425fa0 RCX: 00007f529619e159 [ 225.366092][ T8223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 225.366109][ T8223] RBP: 00007f529623506b R08: 0000000000000000 R09: 0000000000000000 [ 225.366127][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.366144][ T8223] R13: 00007f5296426038 R14: 00007f5296425fa0 R15: 00007ffce15e7318 [ 225.366185][ T8223] [ 225.812330][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.911606][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.991723][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.991861][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.996480][ T8038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.054905][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.055016][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.790259][ T8038] veth0_vlan: entered promiscuous mode [ 226.833139][ T8038] veth1_vlan: entered promiscuous mode [ 226.943117][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.036678][ T8038] veth0_macvtap: entered promiscuous mode [ 227.080734][ T8038] veth1_macvtap: entered promiscuous mode [ 227.193086][ T8038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.232414][ T8038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.234110][ T8055] veth0_vlan: entered promiscuous mode [ 227.278979][ T52] Bluetooth: hci30: command tx timeout [ 227.324603][ C1] vcan0: j1939_tp_rxtimer: 0xffff888082f1cc00: rx timeout, send abort [ 227.326964][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888082f1cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 227.382744][ T669] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.401556][ T8055] veth1_vlan: entered promiscuous mode [ 227.454347][ T38] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.457556][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.465862][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.906658][ T8055] veth0_macvtap: entered promiscuous mode [ 227.932343][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.932370][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.957400][ T8055] veth1_macvtap: entered promiscuous mode [ 228.058226][ T5612] Bluetooth: hci31: unexpected cc 0x0c03 length: 249 > 1 [ 228.063957][ T5612] Bluetooth: hci31: unexpected cc 0x1003 length: 249 > 9 [ 228.066806][ T5612] Bluetooth: hci31: unexpected cc 0x1001 length: 249 > 9 [ 228.067213][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.099020][ T5612] Bluetooth: hci31: unexpected cc 0x0c23 length: 249 > 4 [ 228.103578][ T5612] Bluetooth: hci31: unexpected cc 0x0c38 length: 249 > 2 [ 228.117914][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.117938][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.212129][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.217413][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.272458][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.320127][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.320396][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.514322][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.514344][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.635473][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.635499][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.826991][ T133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.086592][ T8091] veth0_vlan: entered promiscuous mode [ 229.160010][ T8091] veth1_vlan: entered promiscuous mode [ 229.245342][ T8091] veth0_macvtap: entered promiscuous mode [ 229.261931][ T8091] veth1_macvtap: entered promiscuous mode [ 229.373192][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.433525][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.514864][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.557222][ T8276] lo speed is unknown, defaulting to 1000 [ 229.626753][ T1268] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.653591][ T8283] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.682776][ T669] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.812650][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.812678][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.976257][ T8283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.976286][ T8283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.158766][ T5612] Bluetooth: hci31: command tx timeout [ 230.715181][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 230.717778][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 230.767895][ T8334] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 230.776975][ T8334] openvswitch: netlink: Message has 8 unknown bytes. [ 230.777568][ T8334] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 230.794984][ T8334] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 230.795007][ T8334] netlink: 'syz.1.420': attribute type 2 has an invalid length. [ 230.795344][ T8334] openvswitch: netlink: Message has 42 unknown bytes. [ 230.796021][ T8334] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 230.796487][ T8334] netlink: zone id is out of range [ 230.796500][ T8334] netlink: zone id is out of range [ 230.796510][ T8334] netlink: zone id is out of range [ 230.796520][ T8334] netlink: get zone limit has 8 unknown bytes [ 230.796845][ T8334] netlink: 64 bytes leftover after parsing attributes in process `syz.1.420'. [ 231.009669][ T8341] netlink: 'syz.7.423': attribute type 1 has an invalid length. [ 231.100819][ T8341] netlink: 33 bytes leftover after parsing attributes in process `syz.7.423'. [ 231.135221][ T8341] netlink: 'syz.7.423': attribute type 1 has an invalid length. [ 231.137925][ T8341] ksmbd: Unknown IPC event: 10, ignore. [ 231.169278][ T8341] netlink: 'syz.7.423': attribute type 1 has an invalid length. [ 231.204928][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.205122][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.205286][ T8276] bridge_slave_0: entered allmulticast mode [ 231.207449][ T8276] bridge_slave_0: entered promiscuous mode [ 231.212301][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.212482][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.212642][ T8276] bridge_slave_1: entered allmulticast mode [ 231.222292][ T8276] bridge_slave_1: entered promiscuous mode [ 231.322474][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.366434][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.422285][ T8276] team0: Port device team_slave_0 added [ 231.425546][ T8276] team0: Port device team_slave_1 added [ 231.527357][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.527381][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.527406][ T8276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.545443][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.545462][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.545494][ T8276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.683425][ T8276] hsr_slave_0: entered promiscuous mode [ 231.684701][ T8276] hsr_slave_1: entered promiscuous mode [ 231.685478][ T8276] debugfs: 'hsr0' already exists in 'hsr' [ 231.685499][ T8276] Cannot create hsr debugfs directory [ 231.943032][ T8276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.044569][ T8276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.133616][ T8276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.205117][ T8276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.240860][ T5612] Bluetooth: hci31: command tx timeout [ 232.335917][ T8352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.570908][ T8276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.599015][ T8276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.600084][ T8276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.629299][ T8276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.630672][ T8276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.636727][ T8276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.695542][ T8276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.708218][ T8276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.856710][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.910201][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.924844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.924956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.954085][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.954193][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.983759][ T8413] ovs0: entered promiscuous mode [ 234.046727][ T8416] syzkaller0: entered promiscuous mode [ 234.046755][ T8416] syzkaller0: entered allmulticast mode [ 234.067046][ T8416] tipc: Started in network mode [ 234.067081][ T8416] tipc: Node identity ee5ae85f864d, cluster identity 4711 [ 234.067341][ T8416] tipc: Enabled bearer , priority 0 [ 234.096200][ T8416] tipc: Resetting bearer [ 234.129644][ T8415] tipc: Resetting bearer [ 234.164491][ T8415] tipc: Disabling bearer [ 234.190804][ T8276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.297452][ T8276] veth0_vlan: entered promiscuous mode [ 234.315745][ T8276] veth1_vlan: entered promiscuous mode [ 234.318751][ T5612] Bluetooth: hci31: command tx timeout [ 234.381632][ T8276] veth0_macvtap: entered promiscuous mode [ 234.387130][ T8276] veth1_macvtap: entered promiscuous mode [ 234.405941][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.436020][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.508262][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.508472][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.509203][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.509247][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.611677][ T8283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.611705][ T8283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.680360][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.680382][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.795127][ T8447] lo speed is unknown, defaulting to 1000 [ 236.120430][ T5728] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 236.279863][ T5728] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 236.282220][ T5728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.282274][ T5728] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 236.282308][ T5728] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 236.282357][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.408710][ T5612] Bluetooth: hci31: command tx timeout [ 237.163984][ T8475] syzkaller0: entered promiscuous mode [ 237.164015][ T8475] syzkaller0: entered allmulticast mode [ 237.182076][ T8475] tipc: Enabled bearer , priority 0 [ 237.213568][ T8474] tipc: Resetting bearer [ 237.248758][ T8474] tipc: Disabling bearer [ 238.481387][ T5728] cxacru 4-1:1.0: send of cm 0x90 failed (-104) [ 238.925008][ T5742] usb 4-1: USB disconnect, device number 5 [ 239.172050][ T8526] bridge0: port 3(syz_tun) entered blocking state [ 239.172416][ T8526] bridge0: port 3(syz_tun) entered disabled state [ 239.172625][ T8526] syz_tun: entered allmulticast mode [ 239.174752][ T8526] syz_tun: entered promiscuous mode [ 239.175399][ T8526] bridge0: port 3(syz_tun) entered blocking state [ 239.175485][ T8526] bridge0: port 3(syz_tun) entered forwarding state [ 239.721129][ T32] INFO: task syz.1.34:5948 blocked for more than 143 seconds. [ 239.721161][ T32] Not tainted syzkaller #0 [ 239.721176][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.721188][ T32] task:syz.1.34 state:D stack:28808 pid:5948 tgid:5941 ppid:5611 task_flags:0x400040 flags:0x00080002 [ 239.721273][ T32] Call Trace: [ 239.721283][ T32] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 239.723565][ T32] __schedule+0x17db/0x58f0 [ 239.723644][ T32] ? __pfx___schedule+0x10/0x10 [ 239.723698][ T32] ? schedule+0x90/0x2b0 [ 239.723737][ T32] schedule+0x164/0x2b0 [ 239.723775][ T32] schedule_preempt_disabled+0x13/0x30 [ 239.723810][ T32] __mutex_lock+0x7c1/0x1550 [ 239.723857][ ** replaying previous printk message ** [ 239.723857][ T32] ? __mutex_lock+0x5d4/0x1550 [ 239.723901][ T32] ? fdget_pos+0x246/0x320 [ 239.723947][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 239.723994][ T32] ? __fget_files+0x2a/0x420 [ 239.724039][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.724072][ T32] ? __fget_files+0x3a2/0x420 [ 239.724112][ T32] ? __fget_files+0x2a/0x420 [ 239.724158][ T32] fdget_pos+0x246/0x320 [ 239.724203][ T32] ksys_read+0x79/0x270 [ 239.724234][ T32] ? __pfx_ksys_read+0x10/0x10 [ 239.724258][ T32] ? __pfx_kcov_ioctl+0x10/0x10 [ 239.724300][ T32] do_syscall_64+0x166/0x520 [ 239.724368][ T32] ? trace_irq_disable+0x3b/0x140 [ 239.724399][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.724432][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.724460][ T32] RIP: 0033:0x7f6efa79e159 [ 239.724484][ T32] RSP: 002b:00007f6efb5e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.724511][ T32] RAX: ffffffffffffffda RBX: 00007f6efaa26090 RCX: 00007f6efa79e159 [ 239.724531][ T32] RDX: 0000000000000064 RSI: 0000200000000600 RDI: 0000000000000003 [ 239.724548][ T32] RBP: 00007f6efa83506b R08: 0000000000000000 R09: 0000000000000000 [ 239.724566][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.724583][ T32] R13: 00007f6efaa26128 R14: 00007f6efaa26090 R15: 00007ffe93602d98 [ 239.724625][ T32] [ 239.724637][ T32] INFO: task syz.5.38:5952 blocked for more than 143 seconds. [ 239.724655][ T32] Not tainted syzkaller #0 [ 239.724677][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.724688][ T32] task:syz.5.38 state:D stack:27080 pid:5952 tgid:5951 ppid:5625 task_flags:0x400140 flags:0x00080002 [ 239.724766][ T32] Call Trace: [ 239.724775][ T32] [ 239.724792][ T32] __schedule+0x17db/0x58f0 [ 239.724847][ T32] ? kernel_text_address+0xa5/0xe0 [ 239.724881][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.724915][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.724946][ T32] ? unwind_get_return_address+0x4d/0x90 [ 239.724989][ T32] ? __pfx___schedule+0x10/0x10 [ 239.725035][ T32] ? schedule+0x90/0x2b0 [ 239.725074][ T32] schedule+0x164/0x2b0 [ 239.725111][ T32] schedule_preempt_disabled+0x13/0x30 [ 239.725146][ T32] __mutex_lock+0x7c1/0x1550 [ 239.725184][ T32] ? kasan_save_track+0x3e/0x80 [ 239.725222][ T32] ? __mutex_lock+0x5d4/0x1550 [ 239.725266][ T32] ? write_ports+0xb5/0xd10 [ 239.725309][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 239.725374][ T32] write_ports+0xb5/0xd10 [ 239.725418][ T32] ? __pfx_write_ports+0x10/0x10 [ 239.725458][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.725503][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.725548][ T32] ? _copy_from_user+0x94/0xb0 [ 239.725587][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.725619][ T32] ? simple_transaction_get+0x12d/0x160 [ 239.725673][ T32] nfsctl_transaction_write+0x10f/0x160 [ 239.725715][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 239.725755][ T32] vfs_write+0x296/0xba0 [ 239.725791][ T32] ? __pfx_vfs_write+0x10/0x10 [ 239.725820][ T32] ? __fget_files+0x2a/0x420 [ 239.725865][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.725900][ T32] ? __fget_files+0x3a2/0x420 [ 239.725939][ T32] ? __fget_files+0x2a/0x420 [ 239.725984][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.726023][ T32] ksys_write+0x150/0x270 [ 239.726053][ T32] ? __pfx_ksys_write+0x10/0x10 [ 239.726095][ T32] do_syscall_64+0x166/0x520 [ 239.726132][ T32] ? trace_irq_disable+0x3b/0x140 [ 239.726161][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.726197][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.726225][ T32] RIP: 0033:0x7f3dacf9e159 [ 239.726248][ T32] RSP: 002b:00007f3dade6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.726276][ T32] RAX: ffffffffffffffda RBX: 00007f3dad225fa0 RCX: 00007f3dacf9e159 [ 239.726296][ T32] RDX: 000000000000000a RSI: 0000200000000100 RDI: 0000000000000003 [ 239.726313][ T32] RBP: 00007f3dad03506b R08: 0000000000000000 R09: 0000000000000000 [ 239.726330][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.726347][ T32] R13: 00007f3dad226038 R14: 00007f3dad225fa0 R15: 00007ffec19e99c8 [ 239.726390][ T32] [ 239.726401][ T32] INFO: task syz.5.38:5956 blocked for more than 143 seconds. [ 239.726419][ T32] Not tainted syzkaller #0 [ 239.726432][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.726443][ T32] task:syz.5.38 state:D stack:28808 pid:5956 tgid:5951 ppid:5625 task_flags:0x400040 flags:0x00080002 [ 239.726526][ T32] Call Trace: [ 239.726534][ T32] [ 239.726550][ T32] __schedule+0x17db/0x58f0 [ 239.726620][ T32] ? __pfx___schedule+0x10/0x10 [ 239.726671][ T32] ? schedule+0x90/0x2b0 [ 239.726710][ T32] schedule+0x164/0x2b0 [ 239.726748][ T32] schedule_preempt_disabled+0x13/0x30 [ 239.726783][ T32] __mutex_lock+0x7c1/0x1550 [ 239.726827][ T32] ? __mutex_lock+0x5d4/0x1550 [ 239.726870][ T32] ? fdget_pos+0x246/0x320 [ 239.726914][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 239.726963][ T32] ? __fget_files+0x2a/0x420 [ 239.727008][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.727041][ T32] ? __fget_files+0x3a2/0x420 [ 239.727080][ T32] ? __fget_files+0x2a/0x420 [ 239.727127][ T32] fdget_pos+0x246/0x320 [ 239.727171][ T32] ksys_read+0x79/0x270 [ 239.727201][ T32] ? __pfx_ksys_read+0x10/0x10 [ 239.727226][ T32] ? __pfx_kcov_ioctl+0x10/0x10 [ 239.727267][ T32] do_syscall_64+0x166/0x520 [ 239.727305][ T32] ? trace_irq_disable+0x3b/0x140 [ 239.727334][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.727370][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.727397][ T32] RIP: 0033:0x7f3dacf9e159 [ 239.727420][ T32] RSP: 002b:00007f3dade4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.727447][ T32] RAX: ffffffffffffffda RBX: 00007f3dad226090 RCX: 00007f3dacf9e159 [ 239.727467][ T32] RDX: 0000000000000064 RSI: 0000200000000140 RDI: 0000000000000003 [ 239.727485][ T32] RBP: 00007f3dad03506b R08: 0000000000000000 R09: 0000000000000000 [ 239.727522][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.727539][ T32] R13: 00007f3dad226128 R14: 00007f3dad226090 R15: 00007ffec19e99c8 [ 239.727581][ T32] [ 239.727814][ T32] [ 239.727814][ T32] Showing all locks held in the system: [ 239.727828][ T32] locks held by kworker/u8:0/12: 2, last CPU#0: [ 239.727848][ T32] #0: ffff88803254a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.727927][ T32] #1: ffffc90000117c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.729934][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 239.729954][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 239.730033][ T32] locks held by kworker/u8:11/1290: 3, on CPU#0: [ 239.730052][ T32] #0: ffff88801fa92940 ((wq_completion)pm_fs_sync){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.730128][ T32] #1: ffffc90005ce7c40 (pm_fs_sync_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.730202][ T32] #2: ffff888077d8c0e8 (&type->s_umount_key#53){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 239.730301][ T32] locks held by getty/5367: 2, on CPU#0: [ 239.730319][ T32] #0: ffff8880345850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 239.730385][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 239.730461][ T32] locks held by kworker/u9:2/5612: 3, on CPU#1: [ 239.730480][ T32] #0: ffff8880346ce140 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.730556][ T32] #1: ffffc90003affc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.730634][ T32] #2: ffff888065894ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 239.730710][ T32] locks held by syz-executor/5618: 2, on CPU#0: [ 239.730729][ T32] #0: ffff888077d8c0e8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 239.730812][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 239.730888][ T32] locks held by kworker/0:4/5742: 5, on CPU#0: [ 239.730907][ T32] #0: ffff888020685540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.730982][ T32] #1: ffffc9000497fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.731058][ T32] #2: ffff888029f0d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 239.731133][ T32] #3: ffff88808daaa1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 239.731200][ T32] #4: ffff88805480c1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 239.731276][ T32] locks held by kworker/0:5/5743: 5, on CPU#0: [ 239.731295][ T32] #0: ffff888020685540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.731371][ T32] #1: ffffc9000498fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 239.731446][ T32] #2: ffff888029fab1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 239.731518][ T32] #3: ffff88815032b1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 239.731603][ T32] #4: ffff8881505541a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 239.731688][ T32] locks held by syz.1.34/5942: 3, on CPU#1: [ 239.731706][ T32] #0: ffff88807a3015f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.731785][ T32] #1: ffff888076236460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.731854][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.731931][ T32] locks held by syz.1.34/5948: 1, on CPU#0: [ 239.731949][ T32] #0: ffff88807a3015f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.732028][ T32] locks held by syz.5.38/5952: 3, on CPU#0: [ 239.732047][ T32] #0: ffff88803299e7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.732125][ T32] #1: ffff88807d2d4460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.732194][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.732270][ T32] locks held by syz.5.38/5956: 1, on CPU#1: [ 239.732289][ T32] #0: ffff88803299e7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.732368][ T32] locks held by syz.3.71/6050: 3, on CPU#1: [ 239.732386][ T32] #0: ffff88807ec2c9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.732465][ T32] #1: ffff8880299a8460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.732533][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.732609][ T32] locks held by syz.3.71/6058: 3, on CPU#0: [ 239.732628][ T32] #0: ffff8880797c9430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.732713][ T32] #1: ffff8880299a8460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.732781][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.732858][ T32] locks held by syz.4.85/6121: 3, on CPU#1: [ 239.732876][ T32] #0: ffff8880784c29b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.732955][ T32] #1: ffff8880330e6460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.733023][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.733100][ T32] locks held by syz.4.85/6122: 3, on CPU#0: [ 239.733119][ T32] #0: ffff88801eaa40f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.733197][ T32] #1: ffff8880330e6460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.738583][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.738669][ T32] locks held by syz.4.85/6123: 3, on CPU#0: [ 239.738688][ T32] #0: ffff88801eaa5b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.738767][ T32] #1: ffff8880330e6460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.738837][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.738915][ T32] locks held by syz.0.88/6131: 3, on CPU#1: [ 239.738933][ T32] #0: ffff88807a67e0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.739011][ T32] #1: ffff888034a58460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.739080][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.739157][ T32] locks held by syz.0.88/6132: 3, on CPU#1: [ 239.739176][ T32] #0: ffff88807a67eef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.739254][ T32] #1: ffff888034a58460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.739324][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.739405][ T32] locks held by syz.6.100/6256: 3, on CPU#0: [ 239.739423][ T32] #0: ffff88807f6d6630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.739502][ T32] #1: ffff88802a358460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.739571][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.739672][ T32] locks held by syz.6.100/6258: 3, on CPU#1: [ 239.739691][ T32] #0: ffff8880357567f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.739769][ T32] #1: ffff88802a358460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.739839][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.739923][ T32] locks held by syz.6.100/6261: 3, on CPU#1: [ 239.739941][ T32] #0: ffff88807f32ab70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.740020][ T32] #1: ffff88802a358460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.740089][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.740169][ T32] locks held by syz.8.116/6422: 3, on CPU#0: [ 239.740188][ T32] #0: ffff888033fdab70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.740266][ T32] #1: ffff888055946460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.740335][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.740411][ T32] locks held by syz.8.116/6423: 3, on CPU#0: [ 239.740430][ T32] #0: ffff888079542630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.740508][ T32] #1: ffff888055946460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.740578][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.740662][ T32] locks held by syz.7.139/6512: 3, on CPU#1: [ 239.740681][ T32] #0: ffff8880790790b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.740759][ T32] #1: ffff8880322d0460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.740829][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.740906][ T32] locks held by syz.7.139/6516: 3, on CPU#0: [ 239.740924][ T32] #0: ffff88801ebc0630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.741002][ T32] #1: ffff8880322d0460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.741072][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.741149][ T32] locks held by syz.7.139/6518: 3, on CPU#0: [ 239.741168][ T32] #0: ffff88801eaa5430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.741246][ T32] #1: ffff8880322d0460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.754181][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.754276][ T32] locks held by syz.1.147/6550: 3, on CPU#1: [ 239.754295][ T32] #0: ffff8880203c7cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.754375][ T32] #1: ffff8880345e8460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.754444][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.754521][ T32] locks held by syz.9.151/6571: 3, on CPU#0: [ 239.754539][ T32] #0: ffff8880795730b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.754616][ T32] #1: ffff88803bee6460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.754690][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.754766][ T32] locks held by syz.9.151/6572: 3, on CPU#1: [ 239.754785][ T32] #0: ffff888076efe0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.754862][ T32] #1: ffff88803bee6460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.754931][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.755008][ T32] locks held by syz-executor/6706: 2, on CPU#0: [ 239.755027][ T32] #0: ffff888032f8a0e8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 239.755111][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 239.755180][ T32] locks held by syz.2.183/6713: 5, last CPU#0: [ 239.755197][ T32] #0: ffff8880797c9eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.755275][ T32] #1: ffff8880327c0460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.755344][ T32] #2: ffff88803b3fa480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 239.755421][ T32] #3: ffff88801f69c2d8 (kn->active#69){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 239.755503][ T32] #4: ffffffff8ec04720 (system_transition_mutex){+.+.}-{4:4}, at: pm_suspend+0x127/0x760 [ 239.755583][ T32] locks held by syz-executor/6781: 2, on CPU#0: [ 239.755602][ T32] #0: ffff8880326580e8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 239.755692][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 239.755767][ T32] locks held by syz.5.214/6965: 3, on CPU#0: [ 239.755786][ T32] #0: ffff88801eaa4470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.755864][ T32] #1: ffff8880764d8460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.755933][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.756010][ T32] locks held by syz.6.217/7018: 3, on CPU#0: [ 239.756029][ T32] #0: ffff888030d749b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.756107][ T32] #1: ffff88802a9a2460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.756177][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.756254][ T32] locks held by syz.0.225/7065: 3, on CPU#0: [ 239.756273][ T32] #0: ffff88807a4a2b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.756351][ T32] #1: ffff88803b382460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.756420][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.756497][ T32] locks held by syz.0.225/7069: 3, on CPU#1: [ 239.756515][ T32] #0: ffff88807452c630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.756593][ T32] #1: ffff88803b382460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.756668][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.763168][ T32] locks held by syz.0.225/7070: 3, on CPU#1: [ 239.763191][ T32] #0: ffff88807452c470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.763272][ T32] #1: ffff88803b382460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.763342][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.763422][ T32] locks held by syz.8.229/7114: 3, on CPU#0: [ 239.763440][ T32] #0: ffff888077171eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.763519][ T32] #1: ffff88807d6c2460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.763589][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.763672][ T32] locks held by syz.8.229/7115: 3, on CPU#0: [ 239.763690][ T32] #0: ffff888077171970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.763769][ T32] #1: ffff88807d6c2460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.763838][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.763915][ T32] locks held by syz.8.229/7116: 3, on CPU#1: [ 239.763933][ T32] #0: ffff88807f3282b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.764012][ T32] #1: ffff88807d6c2460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.764080][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.764162][ T32] locks held by syz.7.253/7292: 3, on CPU#0: [ 239.764181][ T32] #0: ffff88807d421430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.764258][ T32] #1: ffff8880937d2460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.764325][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.764419][ T32] locks held by syz.7.253/7295: 3, on CPU#1: [ 239.764437][ T32] #0: ffff888025afe7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.764514][ T32] #1: ffff8880937d2460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.764583][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.764673][ T32] locks held by syz.1.296/7648: 3, on CPU#1: [ 239.764691][ T32] #0: ffff888076bfeef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.764771][ T32] #1: ffff88807a2d8460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.764839][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.764916][ T32] locks held by syz.1.296/7650: 3, on CPU#1: [ 239.764935][ T32] #0: ffff88807a8abb30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.765014][ T32] #1: ffff88807a2d8460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.765082][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.765158][ T32] locks held by syz.1.296/7652: 3, on CPU#1: [ 239.765177][ T32] #0: ffff8880203c6ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.765255][ T32] #1: ffff88807a2d8460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.765323][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.765400][ T32] locks held by syz.9.307/7702: 3, on CPU#1: [ 239.765419][ T32] #0: ffff88807d357eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.765497][ T32] #1: ffff8880541ac460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.768543][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.768622][ T32] locks held by syz.9.307/7711: 3, on CPU#1: [ 239.768640][ T32] #0: ffff88807718cef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.768727][ T32] #1: ffff8880541ac460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.768797][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.768875][ T32] locks held by syz.3.324/7803: 2, on CPU#0: [ 239.768893][ T32] #0: ffff888030d75430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.768971][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.769049][ T32] locks held by syz.6.330/7852: 3, on CPU#0: [ 239.769067][ T32] #0: ffff88807e9b0d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.769146][ T32] #1: ffff8880317f4460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.769216][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.769294][ T32] locks held by syz.6.330/7853: 3, on CPU#1: [ 239.769313][ T32] #0: ffff88807e5e6630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.769391][ T32] #1: ffff8880317f4460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.769478][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.769554][ T32] locks held by syz.6.330/7854: 3, on CPU#0: [ 239.769573][ T32] #0: ffff88807e9b1270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.769651][ T32] #1: ffff8880317f4460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.769727][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.769803][ T32] locks held by syz.2.334/7862: 2, on CPU#1: [ 239.769821][ T32] #0: ffff88807a890630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.769900][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.769978][ T32] locks held by syz.5.344/7896: 3, on CPU#0: [ 239.769996][ T32] #0: ffff88807e9c7eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.770074][ T32] #1: ffff88808d87c460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.770144][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.770221][ T32] locks held by syz.5.344/7897: 3, on CPU#0: [ 239.770239][ T32] #0: ffff88807e9c7b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.770317][ T32] #1: ffff88808d87c460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.770394][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.770470][ T32] locks held by syz.5.344/7898: 3, on CPU#0: [ 239.770488][ T32] #0: ffff88807e9c67f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.770566][ T32] #1: ffff88808d87c460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.770636][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.775775][ T32] locks held by syz.0.354/7994: 3, on CPU#0: [ 239.775795][ T32] #0: ffff888035aefcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.775877][ T32] #1: ffff8880796be460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.775947][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.776023][ T32] locks held by syz.0.354/7996: 1, on CPU#1: [ 239.776042][ T32] #0: ffff888035aefcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.776123][ T32] locks held by cxacru/8026: 1, on CPU#0: [ 239.776142][ T32] #0: ffffffff8ebf7d88 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 239.776219][ T32] locks held by syz-executor/8055: 2, on CPU#0: [ 239.776238][ T32] #0: ffff88808e4080e8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 239.776323][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 239.776415][ T32] locks held by syz.4.408/8271: 2, on CPU#0: [ 239.776434][ T32] #0: ffff88803298d7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.776512][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.776588][ T32] locks held by syz.8.409/8277: 3, on CPU#0: [ 239.776607][ T32] #0: ffff888060c8c470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.776690][ T32] #1: ffff888034548460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.776759][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.776835][ T32] locks held by syz.8.409/8279: 3, on CPU#1: [ 239.776854][ T32] #0: ffff88807954cb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.776932][ T32] #1: ffff888034548460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.777001][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.777081][ T32] locks held by syz.7.447/8422: 3, on CPU#1: [ 239.777099][ T32] #0: ffff88807a4b02b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.777178][ T32] #1: ffff88802e334460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.777247][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 239.777324][ T32] locks held by syz.7.447/8424: 3, on CPU#0: [ 239.777342][ T32] #0: ffff88807c61beb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.777420][ T32] #1: ffff88802e334460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.777489][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 239.777566][ T32] locks held by syz.7.447/8426: 3, on CPU#0: [ 239.777584][ T32] #0: ffff8880203c7430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.777667][ T32] #1: ffff88802e334460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.777737][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 239.786941][ T32] locks held by syz.9.461/8495: 5, on CPU#0: [ 239.786965][ T32] #0: ffff8880797cd270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 239.787048][ T32] #1: ffff88815c14c460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 239.787118][ T32] #2: ffff88805777d480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 239.787195][ T32] #3: ffff88801f6b5d28 (kn->active#75){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 239.787277][ T32] #4: ffffffff8ec04720 (system_transition_mutex){+.+.}-{4:4}, at: pm_test_store+0x95/0x480 [ 239.787349][ T32] locks held by syz.3.467/8532: 2, last CPU#1: [ 239.787368][ T32] #0: ffff8880264f4080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 239.787449][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 239.787549][ T32] [ 239.787556][ T32] ============================================= [ 239.787556][ T32] [ 239.787568][ T32] NMI backtrace for cpu 1 [ 239.787584][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 239.787612][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 239.787628][ T32] Call Trace: [ 239.787638][ T32] [ 239.787649][ T32] dump_stack_lvl+0xe8/0x150 [ 239.787694][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 239.787726][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 239.787773][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 239.787807][ T32] sys_info+0x135/0x170 [ 239.787833][ T32] watchdog+0xfd7/0x1030 [ 239.787872][ T32] ? watchdog+0x1c7/0x1030 [ 239.787909][ T32] kthread+0x38b/0x480 [ 239.787937][ T32] ? __pfx_watchdog+0x10/0x10 [ 239.787966][ T32] ? __pfx_kthread+0x10/0x10 [ 239.787995][ T32] ret_from_fork+0x514/0xb70 [ 239.788025][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 239.788050][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.788081][ T32] ? __switch_to+0xc89/0x1420 [ 239.788126][ T32] ? __pfx_kthread+0x10/0x10 [ 239.788155][ T32] ret_from_fork_asm+0x1a/0x30 [ 239.788216][ T32] [ 239.788314][ T32] Sending NMI from CPU 1 to CPUs 0: [ 239.788343][ C0] NMI backtrace for cpu 0 [ 239.788356][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 239.788381][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 239.788395][ C0] RIP: 0010:check_preemption_disabled+0x1a/0xd0 [ 239.788435][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 1b bd ae 07 65 48 8b 0d eb bc ae 07 85 c9 74 0c 5b <41> 5e 41 5f 5d e9 d7 7d 29 f5 cc 9c 59 f7 c1 00 02 00 00 74 ea 65 [ 239.788455][ C0] RSP: 0018:ffffc90000157898 EFLAGS: 00000002 [ 239.788474][ C0] RAX: 0000000000000000 RBX: 0000000000000993 RCX: 8000000000000002 [ 239.788491][ C0] RDX: 0000000000000001 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 239.788507][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 239.788522][ C0] R10: dffffc0000000000 R11: ffffffff8be546c0 R12: 1ffffffff35a86b5 [ 239.788539][ C0] R13: 00000000ffffffff R14: 0000008f553269a0 R15: 00000000000004e1 [ 239.788559][ C0] FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 239.788578][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.788594][ C0] CR2: 00007fc3f5026f02 CR3: 0000000158a43000 CR4: 0000000000350ef0 [ 239.788613][ C0] Call Trace: [ 239.788621][ C0] [ 239.788631][ C0] delay_tsc+0x6c/0xd0 [ 239.788658][ C0] wait_for_lsr+0x147/0x2f0 [ 239.788692][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 239.788736][ C0] serial8250_console_write+0xaa1/0x1200 [ 239.788773][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 239.788801][ C0] ? __schedule+0x17f1/0x58f0 [ 239.788831][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.788866][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.788899][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 239.788939][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 239.788972][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.789000][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 239.789038][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.789066][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 239.789098][ C0] nbcon_kthread_func+0x679/0x880 [ 239.789130][ C0] ? nbcon_kthread_func+0x163/0x880 [ 239.789161][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 239.789189][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.789221][ C0] ? __kthread_parkme+0x71/0x1f0 [ 239.789257][ C0] ? __kthread_parkme+0x199/0x1f0 [ 239.789297][ C0] kthread+0x38b/0x480 [ 239.789320][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 239.789345][ C0] ? __pfx_kthread+0x10/0x10 [ 239.789369][ C0] ret_from_fork+0x514/0xb70 [ 239.789394][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 239.789416][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.789444][ C0] ? __switch_to+0xc89/0x1420 [ 239.789479][ C0] ? __pfx_kthread+0x10/0x10 [ 239.789503][ C0] ret_from_fork_asm+0x1a/0x30 [ 239.789553][ C0] [ 239.815919][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 243.007464][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 243.016592][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 243.026651][ T32] Call Trace: [ 243.029926][ T32] [ 243.032852][ T32] vpanic+0x56d/0xa60 [ 243.036849][ T32] ? __pfx___schedule+0x10/0x10 [ 243.041702][ T32] ? __pfx_vpanic+0x10/0x10 [ 243.046219][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.051867][ T32] panic+0xc5/0xd0 [ 243.055599][ T32] ? __pfx_panic+0x10/0x10 [ 243.060026][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 243.065517][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 243.070888][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 243.077563][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 243.083723][ T32] watchdog+0x1030/0x1030 [ 243.088064][ T32] ? watchdog+0x1c7/0x1030 [ 243.092488][ T32] kthread+0x38b/0x480 [ 243.096553][ T32] ? __pfx_watchdog+0x10/0x10 [ 243.101222][ T32] ? __pfx_kthread+0x10/0x10 [ 243.105839][ T32] ret_from_fork+0x514/0xb70 [ 243.110430][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 243.115534][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.121251][ T32] ? __switch_to+0xc89/0x1420 [ 243.125940][ T32] ? __pfx_kthread+0x10/0x10 [ 243.130535][ T32] ret_from_fork_asm+0x1a/0x30 [ 243.135337][ T32] [ 243.138562][ T32] Kernel Offset: disabled [ 243.142869][ T32] Rebooting in 86400 seconds..