last executing test programs: 9m7.956877146s ago: executing program 32 (id=555): r0 = socket$nl_crypto(0x10, 0x3, 0x15) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001200330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$sock_inet_udp_SIOCINQ(r2, 0x5761, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r3, &(0x7f0000000040)='./cgroup/file0\x00', r3, 0x0, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="400100001000010026bd7000fcdbdf25636263286165732d6165736e6929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000040000000000000000000008000100000001000800010001040000080001000600000008000100faffffff080001000800ddff070001"], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x100008c0) 8m27.211555461s ago: executing program 33 (id=719): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) (async) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) write$binfmt_aout(r4, 0x0, 0x20) (async) splice(r4, &(0x7f0000000040)=0xf, 0xffffffffffffffff, 0x0, 0x807, 0x0) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r6 = openat(r5, &(0x7f0000000240)='./mysys\x00', 0x109440, 0x42) removexattr(0x0, &(0x7f0000000100)=@random={'security.', 'sysfs\x00'}) (async) write(r6, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x49}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 5m18.878675864s ago: executing program 5 (id=1495): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) pwrite64(r0, &(0x7f00000001c0)="c69893cbb0359f27bd20d7fce2f2b329aeb9e58545098c38b735ccae53ca50f49dbf31f4d4baa8e7e3ca7bb110d70f8f09cf95c4daf3c44ef7e175c783cb42b1fe8247283e0d9be04372e53a27ad8e086c29321a2ff734e5ec20da8533e09511dad64896fac52a81939c98ddfaedf56e06a9ae80ad729d88d9c5ff5efb4f3ee1d18694b11be4b3c35cff", 0x8a, 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x2b}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x2b, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x9143d663d776f2d2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f00000003c0)=[{0x60, 0x8, 0xff}, {0x6, 0x3, 0x0, 0x6a}]}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x3, 0x71}) 5m17.004497015s ago: executing program 5 (id=1500): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffb, 0xa502) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 5m16.80007038s ago: executing program 5 (id=1502): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0x1, 0x6, 0x43}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "b47233e19f10929b698cc6876071b37f37d06232afe3700d", "0dcc0f9b4038187fd0ea9a12d6db7ed3b59a831af9887dc7a7eb90392c61dd8f"}}}}, 0x6a) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 5m14.607023715s ago: executing program 5 (id=1516): socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) syz_clone3(&(0x7f0000002300)={0x100000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000580), 0x0) pipe2(&(0x7f0000000200), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b9040220087cfefe7c09e8fe55a10a0015400400142603600e1208000b007c001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r7, r3, 0x68, 0x1) syz_ublk_setup_queues(r2, r5, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x35e}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4703, 0x400, 0x1000000, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x8, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 4m58.582832927s ago: executing program 34 (id=1516): socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) syz_clone3(&(0x7f0000002300)={0x100000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000580), 0x0) pipe2(&(0x7f0000000200), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b9040220087cfefe7c09e8fe55a10a0015400400142603600e1208000b007c001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r7, r3, 0x68, 0x1) syz_ublk_setup_queues(r2, r5, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x35e}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4703, 0x400, 0x1000000, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x8, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 4m9.707187778s ago: executing program 3 (id=1798): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002180)={&(0x7f0000001a00)={0xa, 0x4e20, 0x8, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="280000000000000029000000040000005c01120400000000050200010401"], 0x28}, 0x1) 4m9.566736008s ago: executing program 6 (id=1800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000005000400000000000900020073797a32000000001400078005001500cee5000008001240000000000500050002000000050001000600000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 4m9.566585951s ago: executing program 4 (id=1801): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x15, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x10) 4m9.486129585s ago: executing program 6 (id=1802): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x91) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000020010000000000000000000000000001000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000050000000000000000001f00000000000000fd0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4m9.386160045s ago: executing program 4 (id=1803): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)={0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}, 0x1, 0x7}, 0x4084) 4m9.118772929s ago: executing program 4 (id=1804): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="44010000100001000000000800000000fe88000000000000000040000000000100000000000000000000000000000000000200004e200101000020006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000033000000ac1414aa000000000000000000000000000000000000000004000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000001040000090000000000000000000000000000000a00010000000000000000004800010073686132353600"], 0x144}, 0x1, 0x0, 0x0, 0x6044000}, 0x24000058) 4m9.118590433s ago: executing program 3 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002e00090025bd7000ffd3df2501000800080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) 4m9.118499156s ago: executing program 6 (id=1806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c000180"], 0x44}}, 0x4000050) 4m8.953076243s ago: executing program 4 (id=1807): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c000380680000800800034000000002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4m8.952972517s ago: executing program 6 (id=1808): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:*'], 0xa) 4m8.789795048s ago: executing program 4 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000040900010073797a310000000054000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003708000240000000021c0001800a00010072656469720000000c00028008000140ce66000a0900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 4m8.54686652s ago: executing program 4 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x1e, 0x1, 0x80000, 0x4, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4m8.344999708s ago: executing program 3 (id=1811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 4m8.343391687s ago: executing program 6 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 4m8.127133743s ago: executing program 6 (id=1813): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, 0x0, 0xff8a) 4m7.870723218s ago: executing program 3 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m7.729147649s ago: executing program 3 (id=1815): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001600070400000000000000251a"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 4m7.669061906s ago: executing program 3 (id=1816): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)={0x14, 0x76, 0x1, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1}, 0x0) 3m54.450103932s ago: executing program 35 (id=1799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 3m53.33932014s ago: executing program 36 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x1e, 0x1, 0x80000, 0x4, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3m52.312886683s ago: executing program 37 (id=1813): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, 0x0, 0xff8a) 3m52.160408658s ago: executing program 38 (id=1816): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)={0x14, 0x76, 0x1, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1}, 0x0) 1m55.202791234s ago: executing program 0 (id=1993): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0, 0x1}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0, 0x1}, 0x1c) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) close(r2) close(r3) close(r1) 1m54.293728985s ago: executing program 0 (id=1995): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100), &(0x7f0000000200)=0x200) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100), &(0x7f0000000200)=0x200) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000100), &(0x7f0000000200)=0x200) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100), &(0x7f0000000200)=0x200) 1m53.607648106s ago: executing program 0 (id=2000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x0, 0xa, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x0, 0x1, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x601, 0x0, 0x0, {0x2}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x601, 0x0, 0x0, {0x2}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x601, 0x0, 0x0, {0x2}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x601, 0x0, 0x0, {0x2}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x20, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY_IP={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @remote}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @local}]}]}}, @NFT_MSG_DELOBJ={0x0, 0x13, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x0, 0xb, 0x1, 0x0, 0x0, {0x2}}}}}, 0x0) 1m53.511938684s ago: executing program 0 (id=2001): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge0\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syz_tun\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000200)={'bridge0\x00', @ifru_ivalue=0x2}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'syz_tun\x00', 0x1}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000000112233445500264242030000000000800000112233445500000000800000112233445580010000140002000f00"], 0x34) nanosleep(&(0x7f0000000600)={0x2}, 0x0) 1m52.530150396s ago: executing program 0 (id=2011): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200), &(0x7f0000000210)=0x8) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m52.240756179s ago: executing program 0 (id=2014): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n\x00', 0x2) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000540)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f0000000580)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) 1m37.138251308s ago: executing program 39 (id=2014): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n\x00', 0x2) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000540)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f0000000580)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) 1m26.97483689s ago: executing program 7 (id=2142): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000000400)='abcdefghijklmnopqrstuvwxyz', 0x1a, 0x0, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1}, 0x40) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000500)={0x1}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000500)={0x2}, &(0x7f0000000540)=0x8) 1m25.895026818s ago: executing program 7 (id=2145): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xe) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='data', 0x4}], 0x1}, 0x0) 1m24.885206205s ago: executing program 7 (id=2146): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\n', 0x2) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'lo\x00', {0x2, 0x0, @loopback}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000700)={0x2, 0x4e24, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000900)='hello', 0x5) read(r6, &(0x7f0000000a00), 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x2faf080}, 0x0) 1m21.498302439s ago: executing program 7 (id=2147): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100), 0x4) bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000600)=""/4, 0x8}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000600)=""/4, 0x8}], 0x1}, 0x0) 1m20.869620879s ago: executing program 7 (id=2148): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x40, 0x10, 0x0, 0x0, 0x0, {0x1}, [@typed={0xb, 0x1, 0x0, 0x0, @str='ovs_dp0\x00'}, @nested={0xc, 0x2, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x40}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x4c, 0x11, 0x0, 0x0, 0x0, {0x1}, [@typed={0xa, 0x1, 0x0, 0x0, @str='veth0\x00'}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x2}, @nested={0xc, 0x3, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x4c}}, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000500)={'veth0\x00', 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x13, 0x0, 0x0, 0x0, {0x1}, [@typed={0x20, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb08004500040000000000401100000101010102020202"}, @nested={0x20, 0x2, 0x0, 0x0, [@nested={0xc, 0x2, 0x0, 0x0, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x800}]}]}, @nested={0xc, 0x3, 0x0, 0x0, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, @typed={0x6, 0x5, 0x0, 0x0, @u32=0x1f4}]}, 0x100}}, 0x0) 1m20.683821101s ago: executing program 7 (id=2149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10\n', 0x8c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\n', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000003000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) 1m5.166187327s ago: executing program 40 (id=2149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10\n', 0x8c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\n', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000003000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) 57.273170998s ago: executing program 2 (id=2240): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='10 1\n', 0x5) (async) nanosleep(&(0x7f0000000080)={0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}]}}}, 0x0) 56.238512111s ago: executing program 2 (id=2241): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1 1 1\x00', 0x6) close(r0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'netdevsim0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000500), r4) sendmsg$nl_generic(r4, &(0x7f00000002c0), 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340), 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 55.58192074s ago: executing program 2 (id=2242): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000100)={0x2a, 0x1, 0xfffffffe}, 0x10) 55.395718799s ago: executing program 2 (id=2243): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) write(r0, &(0x7f0000000000)="2c000000180001000000000000000000020100000b000100706e657431000000070002006c6f0000070003006c6f0000", 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000500)=@in={0x2, 0x1f90, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x1f90, @loopback}, 0x10) 54.552579316s ago: executing program 2 (id=2244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x0, 0xa, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x0, 0x13, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x0, 0xb, 0x1, 0x0, 0x0, {0x2}}}}}, 0x0) 54.517679263s ago: executing program 2 (id=2245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) (async) close(r2) 44.804683204s ago: executing program 9 (id=2248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) sendto$packet(r1, &(0x7f0000000300)="00112233445566778899", 0xa, 0x0, &(0x7f0000000400)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) 44.038781647s ago: executing program 9 (id=2253): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 44.010297957s ago: executing program 9 (id=2255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10 1\n', 0x5) close(r0) 43.720847114s ago: executing program 9 (id=2256): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000400)="0123456789abcdef", 0x10) read(r2, &(0x7f0000000500)=""/256, 0x100) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000600)=""/64, &(0x7f0000000300)=0x40) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000700)=""/64, &(0x7f0000000300)=0x40) 42.532136176s ago: executing program 9 (id=2259): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3012, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000020)={0x2, 0x3013, @loopback}, 0x10) listen(r0, 0x5) sendto$inet(r1, &(0x7f0000000040)="00003012000000000000000001000038000000010000ffff000a000a112233440001000800000000000b000400"/56, 0x3c, 0x0, &(0x7f0000000080)={0x2, 0x3012, @loopback}, 0x10) close(r0) close(r1) 42.215009375s ago: executing program 9 (id=2260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x3) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) 42.023527431s ago: executing program 8 (id=2261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000120)='source\x00', &(0x7f0000000130)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000190)='vers\x00', &(0x7f00000001a0)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000300)="80000018000000000000000100"/28, 0x1c) shutdown(r2, 0x2) close(r2) 41.15341094s ago: executing program 8 (id=2262): unshare(0x60000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000000000000000010800040000000000140000001100010000000000000000000200000a"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a34000000140a01000000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000420000000020a01000000000000000000020000000900010073797a3000000000140000001100010000000000000000000200000a"], 0x7c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 38.985592181s ago: executing program 41 (id=2245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) (async) close(r2) 37.123428127s ago: executing program 5 (id=2207): r0 = syz_usb_connect(0x1, 0x53, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401011109000010102000109024100030100e0010904000001ff000000070581034000010904010002ff00000007058202000200070502020002000904020001ff00000007058801000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = socket(0x8, 0x2, 0x0) connect(r1, &(0x7f0000000400)=@generic={0x8, '\x00\x00\x00\x00\x00d\x00'}, 0x10) ioctl(r1, 0x400261f3, &(0x7f0000000500)="02000000000000006e61733000000000dc050000") ioctl(r1, 0x400261f2, &(0x7f0000000600)="02000000020000006e617330000000000000000000000000000000000100"/48) syz_usb_ep_write(r0, 0x82, 0x35, &(0x7f0000000700)="0000064200544553540000000000000000000000000000000000000000000000000000000000000000000004c704dd7b") 35.205019471s ago: executing program 8 (id=2264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) 34.999223552s ago: executing program 8 (id=2265): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0 1 1\x00', 0x6) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="34000000000000000100000000000000010000006a010000", 0x18}], 0x1}, 0x0) 34.868869623s ago: executing program 8 (id=2266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x32}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1388}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="4500003a00000000401100007f0000017f000001123413880026000000000400"/56], 0x3a) 34.662724131s ago: executing program 8 (id=2267): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) (async) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) 34.038456782s ago: executing program 5 (id=2268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd_mnt\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 test\n\x00', 0x1f) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd_mnt/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd_mnt/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) write(r2, &(0x7f0000000800)='0\n\x00', 0x2) close(r2) 27.254661769s ago: executing program 42 (id=2260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x3) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) 19.535193421s ago: executing program 43 (id=2267): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) (async) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) 18.437565936s ago: executing program 44 (id=2268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd_mnt\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 test\n\x00', 0x1f) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd_mnt/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd_mnt/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) write(r2, &(0x7f0000000800)='0\n\x00', 0x2) close(r2) 9.166725903s ago: executing program 1 (id=2309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x300, r3}, 0x14) sendto$packet(r1, &(0x7f0000000400)="00112233445566778899aabbccdd", 0xe, 0x0, &(0x7f0000000500)={0x11, 0x300, r3}, 0x14) 8.716972066s ago: executing program 1 (id=2310): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\n', 0x2) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000700)={0x2, 0x4e24, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000900)='hello', 0x5) read(r6, &(0x7f0000000a00), 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r3, 0x1, 0x0, 0x0, {0x10}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e25}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x5f5e100}, 0x0) write(r5, &(0x7f0000000900)='world', 0x5) read(r6, &(0x7f0000000a00), 0x10) nanosleep(&(0x7f0000000d00)={0x0, 0x5f5e100}, 0x0) 1.36683667s ago: executing program 1 (id=2311): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) 1.210692127s ago: executing program 1 (id=2312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x4002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', @ifru_flags=0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) write$tun(r0, &(0x7f0000000300)={@void, @val={0x1, 0x1, 0x36, 0xe803}, @eth={@broadcast, @remote, @void, {@generic={0x800, "4500002800014000400626b90a0000020a00000100501f9000000001000000015010ffff85f00000"}}}}, 0x44) 935.34334ms ago: executing program 1 (id=2313): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x10) listen(r0, 0x5) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x10) sendto$llc(r1, &(0x7f0000000200)='12345678', 0x8, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2314): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x17d78400}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @private=0xa010100}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000800), 0x4) bind$rds(r2, &(0x7f0000000300)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$rds(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)=""/5, 0x5}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 483.456891][T19582] Free swap = 124396kB [ 483.456900][T19582] Total swap = 124996kB [ 483.456908][T19582] 2097051 pages RAM [ 483.456916][T19582] 0 pages HighMem/MovableOnly [ 483.456927][T19582] 427780 pages reserved [ 483.456933][T19582] 0 pages cma reserved [ 483.459232][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 483.552351][ T5603] Bluetooth: hci1: hcon ffff888064544000 sent 2 < count 65279 [ 483.773429][T19583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.213953][T19583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.450115][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 484.450136][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 484.494138][T18913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 484.517207][T18913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.890286][T19556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.912601][T19556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.181032][ T1171] hsr_slave_0: left promiscuous mode [ 485.220853][ T1171] hsr_slave_1: left promiscuous mode [ 485.223729][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.225259][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.267138][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.267166][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.312664][ T5699] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 485.384531][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 485.384561][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 485.384624][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 485.384922][ T32] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 485.419313][ T32] usb 5-1: USB disconnect, device number 63 [ 485.451025][ T5690] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 485.451210][ T5699] usb 4-1: device descriptor read/64, error -71 [ 485.525638][ T1171] veth1_macvtap: left promiscuous mode [ 485.525751][ T1171] veth0_macvtap: left promiscuous mode [ 485.526051][ T1171] veth1_vlan: left promiscuous mode [ 485.526250][ T1171] veth0_vlan: left promiscuous mode [ 485.620905][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 485.638094][ T5690] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 485.638128][ T5690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 485.638158][ T5690] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 485.638188][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.727315][ T5690] usb 2-1: config 0 descriptor?? [ 485.771950][ T5699] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 485.920860][ T5699] usb 4-1: device descriptor read/64, error -71 [ 485.946501][T19615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.948806][T19615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.033586][ T5699] usb usb4-port1: attempt power cycle [ 486.266507][ T5690] belkin 0003:050D:3201.001E: global environment stack underflow [ 486.266530][ T5690] belkin 0003:050D:3201.001E: item 0 4 1 11 parsing failed [ 486.267257][ T5690] belkin 0003:050D:3201.001E: parse failed [ 486.267335][ T5690] belkin 0003:050D:3201.001E: probe with driver belkin failed with error -22 [ 486.440923][ T32] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 486.441239][ T5699] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 486.471378][ T5699] usb 4-1: device descriptor read/8, error -71 [ 486.581899][ T37] usb 2-1: USB disconnect, device number 12 [ 486.616140][ T32] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 486.616864][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.616893][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.616930][ T32] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 486.616953][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.691257][ T32] usb 5-1: config 0 descriptor?? [ 486.732056][ T5699] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 486.753096][ T5699] usb 4-1: device descriptor read/8, error -71 [ 486.861134][ T5699] usb usb4-port1: unable to enumerate USB device [ 487.002266][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 487.051701][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 487.172161][T19656] overlayfs: overlapping lowerdir path [ 487.608971][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 488.092375][T18913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.205840][T19682] xfs: Unknown parameter '\$**O#' [ 488.667944][T18913] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.792187][ T5699] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 488.982097][ T5699] usb 4-1: device descriptor read/64, error -71 [ 489.027050][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.027515][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.240863][ T5699] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 489.410798][ T5699] usb 4-1: device descriptor read/64, error -71 [ 489.458744][ T32] usbhid 5-1:0.0: can't add hid device: -71 [ 489.458864][ T32] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 489.476169][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.476338][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.491790][ T5254] 8021q: adding VLAN 0 to HW filter on device eth8 [ 489.497290][T19712] validate_nla: 55 callbacks suppressed [ 489.497309][T19712] netlink: 'syz.1.1634': attribute type 4 has an invalid length. [ 489.521252][ T5699] usb usb4-port1: attempt power cycle [ 489.527805][ T32] usb 5-1: USB disconnect, device number 64 [ 489.910837][ T5699] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 489.947801][ T5699] usb 4-1: device descriptor read/8, error -71 [ 490.232148][ T5699] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 490.266440][ T5699] usb 4-1: device descriptor read/8, error -71 [ 490.439936][ T5699] usb usb4-port1: unable to enumerate USB device [ 491.338178][T18913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.501293][T19768] netlink: 'syz.3.1641': attribute type 28 has an invalid length. [ 491.722506][ T6187] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 491.785929][T19786] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1643'. [ 491.787678][T19781] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1643'. [ 491.907948][ T6187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 491.908711][ T6187] usb 5-1: not running at top speed; connect to a high speed hub [ 491.927281][ T6187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.974793][ T6187] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.974822][ T6187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.974841][ T6187] usb 5-1: Product: syz [ 491.974854][ T6187] usb 5-1: Manufacturer: syz [ 491.974868][ T6187] usb 5-1: SerialNumber: syz [ 492.158819][T18913] veth0_vlan: entered promiscuous mode [ 492.195836][T19766] comedi comedi3: pcl812: I/O base address not correctly aligned [ 492.231750][ T5690] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 492.276481][ T6187] cdc_ncm 5-1:1.0: skipping garbage [ 492.276501][ T6187] cdc_ncm 5-1:1.0: skipping garbage [ 492.276514][ T6187] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 492.276553][ T6187] cdc_ncm 5-1:1.0: bind() failure [ 492.312670][ T6187] cdc_ncm 5-1:1.1: skipping garbage [ 492.312690][ T6187] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 492.312729][ T6187] cdc_ncm 5-1:1.1: bind() failure [ 492.314029][T18913] veth1_vlan: entered promiscuous mode [ 492.349905][ T6187] usb 5-1: USB disconnect, device number 65 [ 492.384188][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 492.390214][ T5690] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 492.390251][ T5690] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 64 [ 492.390273][ T5690] usb 2-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 492.390299][ T5690] usb 2-1: config 1 interface 0 has no altsetting 0 [ 492.403969][ T5690] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.404009][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.404028][ T5690] usb 2-1: Product: ⣽嗂仿î˜ì¬«é–³â¾éƒ¼è·¯ì°šï¾ î®œì’푘섒젗＠ç¤ç¨î£‘î·šî¢î®ˆá·¶á¨ç‡™ê„°ëƒ´ä¸‹æ»˜é¢˜á†šì¼¨ì‰«èª†ç¯ºé‚¦Öµá‘´å¥«ä²‚î•ê½“갩秎䆯㢼ᡰ꘯勩뷠㪖뉖隿Ѐ槕긊鎿쇄鳉倢㭗㬬탗ᒉз쓚ཇ糴í¬ì§•áº’ [ 492.404053][ T5690] usb 2-1: Manufacturer: à „ [ 492.404067][ T5690] usb 2-1: SerialNumber: 澣ᮭ㡻棺ﵻî¬é„žë·”瀚充♑êµè¯ç±ë£§ìŸžæ…™á½œï¼å¼‚霽ꫥ较䜱è™é”£â“³àµ¸åº¢å†¦âŸë“¶è¯¶à£ê˜£äˆ°í•’磶å¹æ€±å‚釘ౙ蛮㥥尛ະ멷Ｏ⽅䡅蚂嫼텮ᾕ耎펌ᵉ畤쫔强ì±á¿„ᗷ檛ê¬êƒ„鮚的튽Ħⶖ郙ëžìž¢ç­£ãœ½ [ 492.417847][T19793] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 492.417963][T19793] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 492.484005][ T5607] udevd[5607]: setting mode of /dev/bus/usb/005/065 to 020664 failed: No such file or directory [ 492.484189][ T5607] udevd[5607]: setting owner of /dev/bus/usb/005/065 to uid=0, gid=0 failed: No such file or directory [ 492.713390][ T5690] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 492.749331][ T5690] usb 2-1: USB disconnect, device number 13 [ 493.280011][T19836] loop8: detected capacity change from 0 to 8 [ 493.399124][T19836] Dev loop8: unable to read RDB block 8 [ 493.399171][T19836] loop8: unable to read partition table [ 493.399410][T19836] loop8: partition table beyond EOD, truncated [ 493.399444][T19836] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 493.476920][T18913] veth0_macvtap: entered promiscuous mode [ 493.524466][T19835] Flush: task=syz.1.1651[19835] dev=loop8 state=2 [ 493.567342][T18913] veth1_macvtap: entered promiscuous mode [ 493.567582][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'. [ 493.567607][T19844] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 493.675761][T18913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.760475][T18913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.802057][ T1026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.804680][ T1026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.806367][ T1026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.806927][T19835] Teardown: task=syz.1.1651[19835] dev=loop8 state=2 [ 493.849464][ T1026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.898854][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 494.050213][T19848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 494.288372][ T6187] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 494.448927][ T6187] usb 2-1: Using ep0 maxpacket: 32 [ 494.452211][ T6187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 494.453442][ T6187] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.453465][ T6187] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 494.453524][ T6187] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 494.493859][ T6187] usb 2-1: New USB device found, idVendor=2c8c, idProduct=0103, bcdDevice= 0.40 [ 494.493890][ T6187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.493909][ T6187] usb 2-1: Product: syz [ 494.493923][ T6187] usb 2-1: Manufacturer: syz [ 494.493937][ T6187] usb 2-1: SerialNumber: syz [ 494.927332][ T6187] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 494.938881][ T6187] usb 2-1: 0:2 : does not exist [ 495.089510][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 495.119401][ T6187] usb 2-1: USB disconnect, device number 14 [ 495.193544][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.193566][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.291952][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 495.294347][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 495.314337][ T9] usb 5-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 495.314364][ T9] usb 5-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 495.319065][ T9] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 495.319103][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.319130][ T9] usb 5-1: Product: syz [ 495.319144][ T9] usb 5-1: Manufacturer: syz [ 495.319158][ T9] usb 5-1: SerialNumber: syz [ 495.610568][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.033467][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.033488][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.036996][T19935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1661'. [ 496.051699][ T5690] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 496.262568][ T5690] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 496.262599][ T5690] usb 4-1: config 0 interface 0 has no altsetting 0 [ 496.262619][ T5690] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 496.262631][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.332562][ T5690] usb 4-1: config 0 descriptor?? [ 496.333384][T19917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 496.950793][ T5690] usbhid 4-1:0.0: can't add hid device: -71 [ 496.950895][ T5690] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 496.962603][ T5690] usb 4-1: USB disconnect, device number 23 [ 497.076377][ T6187] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 497.184847][ T9] usb 5-1: reset high-speed USB device number 66 using dummy_hcd [ 497.230927][ T6187] usb 7-1: Using ep0 maxpacket: 8 [ 497.233287][ T6187] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.233312][ T6187] usb 7-1: config 0 has no interface number 0 [ 497.235902][ T6187] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 497.235929][ T6187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.235948][ T6187] usb 7-1: Product: syz [ 497.235959][ T6187] usb 7-1: Manufacturer: syz [ 497.235967][ T6187] usb 7-1: SerialNumber: syz [ 497.239973][ T6187] usb 7-1: config 0 descriptor?? [ 497.300329][ T6187] usb 7-1: selecting invalid altsetting 2 [ 497.300381][ T6187] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 497.350879][ T5771] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 497.432283][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 497.464410][ T5690] usb 7-1: USB disconnect, device number 2 [ 497.481318][ T9] usb 5-1: device firmware changed [ 497.533884][ T5771] usb 2-1: config index 0 descriptor too short (expected 45, got 28) [ 497.533915][ T5771] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 497.533963][ T5771] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 497.540113][ T5771] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 497.540144][ T5771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.540163][ T5771] usb 2-1: Product: syz [ 497.540176][ T5771] usb 2-1: Manufacturer: syz [ 497.540192][ T5771] usb 2-1: SerialNumber: syz [ 497.724462][ T9] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 497.724559][ T9] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 497.728163][ T5771] rtl8150 2-1:1.0: couldn't find required endpoints [ 497.728380][ T5771] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 497.751607][ T5699] usb 5-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 497.751637][ T5699] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 497.768621][ T9] usb 5-1: USB disconnect, device number 66 [ 497.957901][T19996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.963194][T19996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.037288][ T10] usb 2-1: USB disconnect, device number 15 [ 498.267879][T20025] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 498.430844][ T5771] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 498.450881][ T37] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 498.587056][ T5771] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 498.587082][ T5771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.592173][ T5771] usb 7-1: config 0 descriptor?? [ 498.624862][ T37] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 498.624890][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.624908][ T37] usb 4-1: config 0 has no interface number 0 [ 498.627221][ T37] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 498.627248][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.627274][ T37] usb 4-1: Product: syz [ 498.627288][ T37] usb 4-1: Manufacturer: syz [ 498.627301][ T37] usb 4-1: SerialNumber: syz [ 498.635878][ T5771] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 498.650622][ T37] usb 4-1: config 0 descriptor?? [ 498.869749][T20019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1669'. [ 499.023213][ T5771] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 499.099044][ T37] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 499.099132][ T37] uvcvideo 4-1:0.64: No valid video chain found. [ 499.119644][ T37] usb 4-1: USB disconnect, device number 24 [ 499.429343][T20014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.429861][T20014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.449034][ T5771] gspca_cpia1: usb_control_msg 02, error -71 [ 499.449055][ T5771] cpia1 7-1:0.0: only firmware version 1 is supported (got: 161) [ 499.454567][ T5771] usb 7-1: USB disconnect, device number 3 [ 500.132263][ T5690] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 500.172524][T20083] usbcore.quirks: string doesn't fit in 127 chars. [ 500.201137][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 500.327010][ T5690] usb 4-1: unable to get BOS descriptor or descriptor too short [ 500.330785][ T5690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.330811][ T5690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.353373][ T5690] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 500.353403][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.353423][ T5690] usb 4-1: Product: syz [ 500.353436][ T5690] usb 4-1: Manufacturer: syz [ 500.353450][ T5690] usb 4-1: SerialNumber: syz [ 500.363000][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.363033][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.363067][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 500.363090][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.389082][ T10] usb 2-1: config 0 descriptor?? [ 500.419422][ T5690] usb 4-1: selecting invalid altsetting 1 [ 500.573116][ T5690] usb 4-1: unit 6 not found! [ 500.845814][T20074] binder: 20073:20074 ioctl c004743e 2000000003c0 returned -22 [ 500.865665][T20069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.866588][T20069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.086281][ T5690] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 501.121903][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 501.121978][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 501.129274][ T10] usb 2-1: USB disconnect, device number 16 [ 501.388304][ T5690] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 501.413484][ T5690] usb 4-1: USB disconnect, device number 25 [ 501.422545][T19915] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 501.488166][T20146] program syz.4.1682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.541739][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.541840][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.563602][T19915] usb 7-1: device descriptor read/64, error -71 [ 501.578436][ T7291] udevd[7291]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.801950][T19915] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 501.826738][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 501.826767][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 501.951270][T19915] usb 7-1: device descriptor read/64, error -71 [ 501.990854][ T5771] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 502.071881][T19915] usb usb7-port1: attempt power cycle [ 502.146478][ T5771] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 502.146507][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.146526][ T5771] usb 4-1: Product: syz [ 502.146538][ T5771] usb 4-1: Manufacturer: syz [ 502.146551][ T5771] usb 4-1: SerialNumber: syz [ 502.418936][T19915] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 502.447334][T19915] usb 7-1: device descriptor read/8, error -71 [ 502.594310][ T5771] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 502.594372][ T5771] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 502.594829][ T5771] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 502.594878][ T5771] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 502.673137][ T5771] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 502.680842][T19915] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 502.703418][T19915] usb 7-1: device descriptor read/8, error -71 [ 502.719256][ T5771] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 502.744654][ T5771] usb 4-1: USB disconnect, device number 26 [ 502.812427][T19915] usb usb7-port1: unable to enumerate USB device [ 502.923441][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 503.073335][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 503.075645][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 503.075673][ T10] usb 2-1: config 0 has no interface number 0 [ 503.077938][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 503.077966][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.077986][ T10] usb 2-1: Product: syz [ 503.078000][ T10] usb 2-1: Manufacturer: syz [ 503.078014][ T10] usb 2-1: SerialNumber: syz [ 503.144701][ T10] usb 2-1: config 0 descriptor?? [ 503.148233][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 503.380975][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 503.424861][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 503.774974][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 503.786110][ T6187] usb 2-1: USB disconnect, device number 17 [ 503.801559][ T6187] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 503.827987][ T6187] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 503.835477][ T6187] quatech2 2-1:0.51: device disconnected [ 503.993904][ T5771] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 504.217645][ T5771] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 504.217674][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.217685][ T5771] usb 4-1: Product: syz [ 504.217693][ T5771] usb 4-1: Manufacturer: syz [ 504.217701][ T5771] usb 4-1: SerialNumber: syz [ 504.263846][ T5771] ums-karma 4-1:1.0: USB Mass Storage device detected [ 504.280532][ T5771] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 504.280532][ T5771] Please send a copy of this message to and [ 504.707105][T20250] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1692'. [ 504.944876][T20313] overlayfs: failed to resolve './file2': -2 [ 505.095842][ T5771] scsi host1: usb-storage 4-1:1.0 [ 505.195095][T20333] netlink: 'syz.6.1700': attribute type 10 has an invalid length. [ 505.571504][T19915] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 505.746213][T19915] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 505.746246][T19915] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 505.746266][T19915] usb 2-1: Product: syz [ 505.746280][T19915] usb 2-1: Manufacturer: syz [ 505.746295][T19915] usb 2-1: SerialNumber: syz [ 505.791183][T19915] usb 2-1: config 0 descriptor?? [ 506.239581][T19915] usb 2-1: USB disconnect, device number 18 [ 506.363169][T20378] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 507.557402][ T5690] usb 4-1: USB disconnect, device number 27 [ 510.285929][T20533] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 510.574356][T20549] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1721'. [ 510.655160][T20553] Sensor B: ================= START STATUS ================= [ 510.655271][T20553] Sensor B: Test Pattern: 75% Colorbar [ 510.655308][T20553] Sensor B: Show Information: All [ 510.655327][T20553] Sensor B: Vertical Flip: false [ 510.655344][T20553] Sensor B: Horizontal Flip: false [ 510.655361][T20553] Sensor B: Brightness: 128 [ 510.655379][T20553] Sensor B: Contrast: 128 [ 510.655395][T20553] Sensor B: Hue: 0 [ 510.655411][T20553] Sensor B: Saturation: 128 [ 510.655428][T20553] Sensor B: Pixel Rate: 160000000 [ 510.655446][T20553] Sensor B: Horizontal Blanking: 800 [ 510.655464][T20553] Sensor B: Vertical Blanking: 4375 [ 510.655481][T20553] Sensor B: ================== END STATUS ================== [ 511.660922][ T5771] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 511.720830][ T6187] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 511.801122][ T5690] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 511.811205][ T5771] usb 4-1: Using ep0 maxpacket: 32 [ 511.814516][ T5771] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 511.814542][ T5771] usb 4-1: config 2 has no interface number 0 [ 511.814596][ T5771] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 511.814621][ T5771] usb 4-1: config 2 interface 88 has no altsetting 0 [ 511.818829][ T5771] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 511.818856][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 511.818876][ T5771] usb 4-1: Product: syz [ 511.818890][ T5771] usb 4-1: Manufacturer: syz [ 511.818904][ T5771] usb 4-1: SerialNumber: syz [ 511.837986][T20616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 511.850859][ T6187] usb 2-1: device descriptor read/64, error -71 [ 511.943463][ T5690] usb 7-1: device descriptor read/64, error -71 [ 512.096552][ T6187] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 512.190828][ T5690] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 512.240855][ T6187] usb 2-1: device descriptor read/64, error -71 [ 512.291988][T20657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 512.320899][ T5690] usb 7-1: device descriptor read/64, error -71 [ 512.351422][ T6187] usb usb2-port1: attempt power cycle [ 512.417982][T20661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1735'. [ 512.418035][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 512.444015][ T5690] usb usb7-port1: attempt power cycle [ 512.495746][T20616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.497285][T20616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.501585][ T5771] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 512.501871][ T5771] asix 4-1:2.88: probe with driver asix failed with error -71 [ 512.547244][ T5771] usb 4-1: USB disconnect, device number 28 [ 512.690974][ T6187] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 512.712616][ T6187] usb 2-1: device descriptor read/8, error -71 [ 512.716552][T20679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'. [ 512.812370][ T5690] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 512.832650][ T5690] usb 7-1: device descriptor read/8, error -71 [ 512.840314][T20685] netlink: 62 bytes leftover after parsing attributes in process `syz.4.1740'. [ 512.952135][ T6187] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 512.973035][ T6187] usb 2-1: device descriptor read/8, error -71 [ 513.081171][ T6187] usb usb2-port1: unable to enumerate USB device [ 513.090278][ T5690] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 513.121743][ T5690] usb 7-1: device descriptor read/8, error -71 [ 513.186882][T20701] netlink: 'syz.4.1745': attribute type 27 has an invalid length. [ 513.186900][T20701] netlink: 'syz.4.1745': attribute type 4 has an invalid length. [ 513.186907][T20701] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1745'. [ 513.231392][ T5690] usb usb7-port1: unable to enumerate USB device [ 513.476792][T20716] netlink: 'syz.4.1750': attribute type 11 has an invalid length. [ 513.476815][T20716] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1750'. [ 513.527022][T20719] netlink: 'syz.3.1751': attribute type 29 has an invalid length. [ 513.528406][T20719] netlink: 'syz.3.1751': attribute type 29 has an invalid length. [ 513.938412][T20743] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1759'. [ 514.793056][T20790] netlink: 'syz.1.1772': attribute type 10 has an invalid length. [ 514.820266][T20790] bond0: left promiscuous mode [ 514.820289][T20790] bond_slave_0: left promiscuous mode [ 514.831371][T20790] bond_slave_1: left promiscuous mode [ 514.831599][T20790] dummy0: left promiscuous mode [ 514.855314][T20790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.869533][T20790] team0: Port device bond0 added [ 514.983233][T20800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1776'. [ 515.602041][T20829] netlink: Invalid conntrack timeout [ 515.602074][T20829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.721555][T20833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 515.836388][T20842] openvswitch: netlink: EtherType 500 is less than min 600 [ 515.938510][T20847] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 515.998488][T20847] team0: Device veth0_vlan failed to register rx_handler [ 516.592796][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1802'. [ 516.681138][T20882] syzkaller0: create flow: hash 602637756 index 2 [ 516.907704][T20892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 517.107287][T20902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1807'. [ 517.491175][T20882] syzkaller0: delete flow: hash 602637756 index 2 [ 517.558780][ T1026] syzkaller0: tun_net_xmit 76 [ 517.559490][ T1026] syzkaller0: tun_net_xmit 48 [ 531.937710][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 532.059215][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 532.061279][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 532.169865][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 532.232107][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.848128][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 532.869018][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 532.879745][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 532.887923][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 532.888679][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 534.400521][ T5608] Bluetooth: hci3: command tx timeout [ 534.457342][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 534.518396][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 534.602910][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 534.619502][T20960] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 534.664384][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.683547][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.683807][T20960] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 534.690833][T20960] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 534.702243][T20960] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 534.706213][T20960] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 535.414654][ T60] Bluetooth: hci5: command tx timeout [ 536.501938][T20960] Bluetooth: hci3: command tx timeout [ 537.002644][T20960] Bluetooth: hci6: command tx timeout [ 537.457492][T20960] Bluetooth: hci5: command tx timeout [ 537.473724][T20960] Bluetooth: hci7: command tx timeout [ 538.572007][T20960] Bluetooth: hci3: command tx timeout [ 539.074124][T20960] Bluetooth: hci6: command tx timeout [ 539.530908][T20960] Bluetooth: hci7: command tx timeout [ 539.530926][ T5603] Bluetooth: hci5: command tx timeout [ 540.654012][ T5603] Bluetooth: hci3: command tx timeout [ 541.130774][ T5603] Bluetooth: hci6: command tx timeout [ 541.633114][ T5603] Bluetooth: hci5: command tx timeout [ 541.633148][ T5603] Bluetooth: hci7: command tx timeout [ 543.223711][T20960] Bluetooth: hci6: command tx timeout [ 543.696724][T20960] Bluetooth: hci7: command tx timeout [ 546.943092][ T1026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.390486][ T1026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.870379][ T1026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.332806][ T1026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.222346][T20935] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.222591][T20935] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.222759][T20935] bridge_slave_0: entered allmulticast mode [ 549.224671][T20935] bridge_slave_0: entered promiscuous mode [ 549.383740][T20935] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.383927][T20935] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.384099][T20935] bridge_slave_1: entered allmulticast mode [ 549.386474][T20935] bridge_slave_1: entered promiscuous mode [ 549.640157][T20935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.759769][T20935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.787292][T20954] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.787682][T20954] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.787980][T20954] bridge_slave_0: entered allmulticast mode [ 549.790438][T20954] bridge_slave_0: entered promiscuous mode [ 549.803152][T20955] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.803463][T20955] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.803724][T20955] bridge_slave_0: entered allmulticast mode [ 549.807126][T20955] bridge_slave_0: entered promiscuous mode [ 549.902123][T20954] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.902312][T20954] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.902496][T20954] bridge_slave_1: entered allmulticast mode [ 549.904399][T20954] bridge_slave_1: entered promiscuous mode [ 549.905995][T20955] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.906165][T20955] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.906318][T20955] bridge_slave_1: entered allmulticast mode [ 549.908284][T20955] bridge_slave_1: entered promiscuous mode [ 549.942273][T20944] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.942576][T20944] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.942840][T20944] bridge_slave_0: entered allmulticast mode [ 549.963647][T20944] bridge_slave_0: entered promiscuous mode [ 550.033593][T20935] team0: Port device team_slave_0 added [ 550.034012][T20944] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.034335][T20944] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.034617][T20944] bridge_slave_1: entered allmulticast mode [ 550.038072][T20944] bridge_slave_1: entered promiscuous mode [ 550.141596][ T1026] bridge_slave_1: left allmulticast mode [ 550.141622][ T1026] bridge_slave_1: left promiscuous mode [ 550.141853][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.241713][ T1026] bridge_slave_0: left allmulticast mode [ 550.241737][ T1026] bridge_slave_0: left promiscuous mode [ 550.241913][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.031653][ T1026] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 551.251485][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.299123][ T1026] bond0 (unregistering): Released all slaves [ 551.526352][T20935] team0: Port device team_slave_1 added [ 551.557458][T20954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.591711][T20955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.708445][T20954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.724139][T20955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.761038][T20944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.818966][ T1026] tipc: Disabling bearer [ 551.819536][ T1026] tipc: Left network mode [ 551.859086][T20935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.859098][T20935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.859113][T20935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.911571][T20944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.955592][T20935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.955608][T20935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.955630][T20935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.048414][T20954] team0: Port device team_slave_0 added [ 552.057751][T20955] team0: Port device team_slave_0 added [ 552.281215][T20954] team0: Port device team_slave_1 added [ 552.285754][T20955] team0: Port device team_slave_1 added [ 552.297377][T20944] team0: Port device team_slave_0 added [ 552.406464][T20944] team0: Port device team_slave_1 added [ 553.103047][T20954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.103057][T20954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.103072][T20954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.105163][T20955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.105173][T20955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.105187][T20955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.204062][T20954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.204077][T20954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.204097][T20954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.206808][T20955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.206824][T20955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.206851][T20955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.238623][T20935] hsr_slave_0: entered promiscuous mode [ 553.241194][T20935] hsr_slave_1: entered promiscuous mode [ 553.243027][T20935] debugfs: 'hsr0' already exists in 'hsr' [ 553.243050][T20935] Cannot create hsr debugfs directory [ 553.246312][T20944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.246326][T20944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.246352][T20944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.330055][T20944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.330073][T20944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.330099][T20944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.770501][T20954] hsr_slave_0: entered promiscuous mode [ 553.777924][T20954] hsr_slave_1: entered promiscuous mode [ 553.783144][T20954] debugfs: 'hsr0' already exists in 'hsr' [ 553.783169][T20954] Cannot create hsr debugfs directory [ 553.805507][T20955] hsr_slave_0: entered promiscuous mode [ 553.807799][T20955] hsr_slave_1: entered promiscuous mode [ 553.809674][T20955] debugfs: 'hsr0' already exists in 'hsr' [ 553.809698][T20955] Cannot create hsr debugfs directory [ 554.158548][T20944] hsr_slave_0: entered promiscuous mode [ 554.181075][T20944] hsr_slave_1: entered promiscuous mode [ 554.182721][T20944] debugfs: 'hsr0' already exists in 'hsr' [ 554.182746][T20944] Cannot create hsr debugfs directory [ 554.567049][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9 [ 556.382249][ T1026] hsr_slave_0: left promiscuous mode [ 556.421009][ T1026] hsr_slave_1: left promiscuous mode [ 556.422659][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.422684][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.462159][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.462186][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.613819][ T1026] veth1_macvtap: left promiscuous mode [ 556.623524][ T1026] veth0_macvtap: left promiscuous mode [ 556.624114][ T1026] veth1_vlan: left promiscuous mode [ 556.624323][ T1026] veth0_vlan: left promiscuous mode [ 557.422709][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 557.461334][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 557.696198][ T5254] 8021q: adding VLAN 0 to HW filter on device eth10 [ 557.885677][T20935] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 558.083364][T20935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.110780][T20935] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 558.226319][T20935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.344429][T20935] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 558.483155][T20935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.059350][ T5254] 8021q: adding VLAN 0 to HW filter on device eth11 [ 559.059587][T20935] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 559.094643][T20935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.901344][ T5254] 8021q: adding VLAN 0 to HW filter on device eth12 [ 560.103177][ T1026] IPVS: stop unused estimator thread 0... [ 560.118203][T20935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.556959][T20935] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.606346][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.606598][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.657629][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.657783][ T6305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.640413][ T1026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.420217][ T1026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.985114][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.010271][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.044590][ T5699] usb 5-1: [UEAGLE-ATM] firmware is not available [ 563.547843][ T1026] team0: Port device netdevsim1 removed [ 563.554072][ T1026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.792084][T20935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.198423][ T1026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.483708][T20954] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 564.626542][T20954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.686466][T20954] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 564.774767][T20954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.789431][T20954] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 564.854791][T20954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.079922][T20954] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 565.130597][T20954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.209720][T20955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 566.244025][T20955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 566.328269][T20955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 566.546126][T20955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 566.588439][T20955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 566.697526][T20955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.996721][ T1026] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.183715][T20955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 567.224225][T20955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.682399][ T1026] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.761013][T20935] veth0_vlan: entered promiscuous mode [ 568.176072][ T1026] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.236548][T20935] veth1_vlan: entered promiscuous mode [ 568.260085][T20944] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 568.296676][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 568.312594][T20944] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 568.407782][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.794947][ T1026] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.833528][T20944] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 568.876686][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 568.979806][T20944] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 569.013991][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.329376][T20935] veth0_macvtap: entered promiscuous mode [ 569.386072][T20954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.411990][T20935] veth1_macvtap: entered promiscuous mode [ 569.815529][T20954] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.922670][T20935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.111657][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.111819][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.119386][T20935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.162501][T20955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.239254][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.239362][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.259553][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 570.391284][ T1026] bridge_slave_1: left allmulticast mode [ 570.391308][ T1026] bridge_slave_1: left promiscuous mode [ 570.407251][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.501670][ T1026] bridge_slave_0: left allmulticast mode [ 570.501694][ T1026] bridge_slave_0: left promiscuous mode [ 570.501878][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.721455][ T1026] bridge_slave_1: left allmulticast mode [ 570.721492][ T1026] bridge_slave_1: left promiscuous mode [ 570.721757][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.832630][ T1026] bridge_slave_0: left allmulticast mode [ 570.832667][ T1026] bridge_slave_0: left promiscuous mode [ 570.832875][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.791674][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.871498][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.913267][ T1026] bond0 (unregistering): Released all slaves [ 572.581672][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.643368][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.683642][ T1026] bond0 (unregistering): Released all slaves [ 572.702091][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.725385][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.729916][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.774430][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.025298][T20955] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.540116][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.540372][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.548839][T20944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.995351][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.995473][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.174471][T20944] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.610185][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.610204][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.842294][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.842423][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.083509][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.183103][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.867805][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 576.907442][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.907464][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.598363][T22436] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1817'. [ 577.598391][T22436] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 578.199512][T22458] netlink: 'syz.7.1823': attribute type 2 has an invalid length. [ 578.199535][T22458] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1823'. [ 578.392530][T20954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.100206][T22487] netlink: 'syz.7.1825': attribute type 11 has an invalid length. [ 579.100231][T22487] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1825'. [ 579.438253][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 579.532230][T20955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.662510][T20944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.185588][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4 [ 581.229266][T20954] veth0_vlan: entered promiscuous mode [ 581.482989][ T1026] hsr_slave_0: left promiscuous mode [ 581.521800][ T1026] hsr_slave_1: left promiscuous mode [ 581.523054][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.523072][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.564226][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.564255][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.740788][ T1026] hsr_slave_0: left promiscuous mode [ 581.760817][ T1026] hsr_slave_1: left promiscuous mode [ 581.761898][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.761918][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.804296][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.804316][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.925987][ T1026] veth1_macvtap: left promiscuous mode [ 581.926063][ T1026] veth0_macvtap: left promiscuous mode [ 581.926518][ T1026] veth1_vlan: left promiscuous mode [ 582.040989][ T1026] veth1_macvtap: left promiscuous mode [ 582.041051][ T1026] veth0_macvtap: left promiscuous mode [ 582.041222][ T1026] veth1_vlan: left promiscuous mode [ 582.041341][ T1026] veth0_vlan: left promiscuous mode [ 582.552834][T22534] NFSD: Unable to initialize client recovery tracking! (-110) [ 582.552854][T22534] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 582.552865][T22534] NFSD: starting 90-second grace period (net f00003a7) [ 583.011278][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 583.051528][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 583.722132][T22553] netlink: 'syz.7.1831': attribute type 2 has an invalid length. [ 583.722154][T22553] netlink: 'syz.7.1831': attribute type 11 has an invalid length. [ 583.722167][T22553] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1831'. [ 583.856291][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 583.911251][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 584.142739][T20955] veth0_vlan: entered promiscuous mode [ 584.255728][T20954] veth1_vlan: entered promiscuous mode [ 584.275086][T20955] veth1_vlan: entered promiscuous mode [ 584.917168][T20955] veth0_macvtap: entered promiscuous mode [ 584.940283][T20954] veth0_macvtap: entered promiscuous mode [ 584.969118][T20955] veth1_macvtap: entered promiscuous mode [ 584.997290][T20954] veth1_macvtap: entered promiscuous mode [ 585.014945][T20944] veth0_vlan: entered promiscuous mode [ 585.112671][T20944] veth1_vlan: entered promiscuous mode [ 585.156156][T20954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.169444][T20955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.273542][T20954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.316426][T20955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.410179][T22578] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1834'. [ 585.473244][ T4209] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.475496][ T4209] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.476636][ T4209] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.477525][ T4209] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.676742][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13 [ 585.689691][ T4209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.708255][ T4209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.797043][ T4209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.853088][ T4209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.818835][T20944] veth0_macvtap: entered promiscuous mode [ 587.662448][T20944] veth1_macvtap: entered promiscuous mode [ 588.816512][T20944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.116021][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.116041][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.331825][T20944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.859745][ T6306] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.861991][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.863264][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.865012][ T6306] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.102506][ T4174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.102525][ T4174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.613833][ T3364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.613851][ T3364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.330550][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.330580][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.404803][ T3364] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.482994][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 594.600513][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.610522][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.637825][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 594.657789][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 595.245764][ T1026] IPVS: stop unused estimator thread 0... [ 595.817669][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 595.905512][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 595.918131][T22685] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1840'. [ 595.918159][T22685] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1840'. [ 595.928073][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 595.936341][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 595.955559][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 596.697233][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14 [ 597.227033][T20960] Bluetooth: hci0: command tx timeout [ 598.427506][T20960] Bluetooth: hci1: command tx timeout [ 599.054885][ T5690] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 599.061832][ T5690] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 599.126920][ T6187] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 599.127274][ T37] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 599.293260][T20960] Bluetooth: hci0: command tx timeout [ 599.368933][ T5690] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 599.527395][ T32] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 599.560094][T22763] ceph: No mds server is up or the cluster is laggy [ 599.567505][T22764] ceph: No mds server is up or the cluster is laggy [ 599.591137][T22766] ceph: No mds server is up or the cluster is laggy [ 599.591183][ T6187] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 599.718601][ T5254] 8021q: adding VLAN 0 to HW filter on device eth15 [ 599.898279][ T5690] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 600.137652][ T6187] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 600.534958][T20960] Bluetooth: hci1: command tx timeout [ 600.926244][ T1026] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.393836][T20960] Bluetooth: hci0: command tx timeout [ 602.245246][ T1026] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.570975][T20960] Bluetooth: hci1: command tx timeout [ 602.714037][ T1026] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.437286][ T1026] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.454595][T20960] Bluetooth: hci0: command tx timeout [ 603.503355][ T5254] 8021q: adding VLAN 0 to HW filter on device eth16 [ 604.665692][T20960] Bluetooth: hci1: command tx timeout [ 605.470247][T23031] ceph: No source [ 605.527687][T22800] NFSD: Failed to start, no listeners configured. [ 605.610256][ T5676] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 605.809947][T22683] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.810176][T22683] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.810356][T22683] bridge_slave_0: entered allmulticast mode [ 605.835604][T22683] bridge_slave_0: entered promiscuous mode [ 605.895917][ T5676] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 605.956706][T22683] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.956999][T22683] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.957163][T22683] bridge_slave_1: entered allmulticast mode [ 605.959202][T22683] bridge_slave_1: entered promiscuous mode [ 606.106610][T22655] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.106846][T22655] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.107065][T22655] bridge_slave_0: entered allmulticast mode [ 606.109908][T22655] bridge_slave_0: entered promiscuous mode [ 606.174841][T22655] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.175073][T22655] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.175299][T22655] bridge_slave_1: entered allmulticast mode [ 606.201928][T22655] bridge_slave_1: entered promiscuous mode [ 606.202204][T23028] ceph: No mds server is up or the cluster is laggy [ 606.214048][T22683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.262537][T22683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.484948][ T1026] bridge_slave_1: left allmulticast mode [ 606.484983][ T1026] bridge_slave_1: left promiscuous mode [ 606.485263][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.756123][ T1026] bridge_slave_0: left allmulticast mode [ 606.756158][ T1026] bridge_slave_0: left promiscuous mode [ 606.756452][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.391595][T23147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1858'. [ 607.391753][T23147] openvswitch: netlink: Message has 4 unknown bytes. [ 608.101462][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.174451][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.192656][ T1026] bond0 (unregistering): Released all slaves [ 608.452542][T22655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.580975][T22655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.586543][T22683] team0: Port device team_slave_0 added [ 608.647074][T23197] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 608.719792][T22683] team0: Port device team_slave_1 added [ 608.892443][T22655] team0: Port device team_slave_0 added [ 608.948014][T22655] team0: Port device team_slave_1 added [ 608.956823][T22683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.956836][T22683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.956856][T22683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.454501][T23245] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1867'. [ 609.456813][T23245] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1867'. [ 609.459497][T23245] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1867'. [ 609.460494][T23245] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1867'. [ 609.509991][T23245] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1867'. [ 609.681593][T22683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.681611][T22683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.681638][T22683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.893803][T22655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.893819][T22655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.893846][T22655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.052153][T22655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.052169][T22655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.052195][T22655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.243733][T22683] hsr_slave_0: entered promiscuous mode [ 610.245118][T22683] hsr_slave_1: entered promiscuous mode [ 610.440744][ T1026] hsr_slave_0: left promiscuous mode [ 610.450885][ T37] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 610.460775][ T1026] hsr_slave_1: left promiscuous mode [ 610.463119][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.463146][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.502375][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.502415][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.582187][ T1026] veth1_macvtap: left promiscuous mode [ 610.594384][ T1026] veth0_macvtap: left promiscuous mode [ 610.599515][ T1026] veth1_vlan: left promiscuous mode [ 610.599728][ T1026] veth0_vlan: left promiscuous mode [ 610.633349][ T37] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 610.633443][ T37] usb 10-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 610.635093][ T37] usb 10-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 610.635120][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 610.635140][ T37] usb 10-1: Product: syz [ 610.635154][ T37] usb 10-1: Manufacturer: syz [ 611.056937][ T37] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 611.953650][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 611.954938][T23324] syz.7.1872 (23324) used greatest stack depth: 16320 bytes left [ 612.118271][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 612.358483][ T37] usb 10-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 612.358524][ T37] usb 10-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 612.743534][T22655] hsr_slave_0: entered promiscuous mode [ 612.745990][T22655] hsr_slave_1: entered promiscuous mode [ 612.748188][T22655] debugfs: 'hsr0' already exists in 'hsr' [ 612.748429][T22655] Cannot create hsr debugfs directory [ 613.346682][ T5254] 8021q: adding VLAN 0 to HW filter on device eth17 [ 614.118959][T23436] tipc: Started in network mode [ 614.118979][T23436] tipc: Node identity 1, cluster identity 4711 [ 614.118992][T23436] tipc: Node number set to 1 [ 614.290418][T23444] tipc: New replicast peer: 127.0.0.1 [ 614.303400][T23444] tipc: Enabled bearer , priority 10 [ 614.435814][T23436] tipc: Disabling bearer [ 615.656461][ T1026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.844123][ T1026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.072154][ T9] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 617.087895][T23608] ceph: No mds server is up or the cluster is laggy [ 618.009867][ T1026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.270437][T23691] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1884'. [ 618.321873][T23694] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1884'. [ 618.321890][T23694] openvswitch: netlink: Flow actions attr not present in new flow. [ 618.416211][ T5254] 8021q: adding VLAN 0 to HW filter on device eth18 [ 618.709211][T23691] ovs-system: entered promiscuous mode [ 619.064129][ T1026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.096193][T23712] sctp: [Deprecated]: syz.9.1887 (pid 23712) Use of int in maxseg socket option. [ 619.096193][T23712] Use struct sctp_assoc_value instead [ 619.420442][T23721] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1889'. [ 619.437772][T23721] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1889'. [ 619.438612][T23721] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1889'. [ 619.439374][T23721] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1889'. [ 619.453147][T23721] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1889'. [ 620.165110][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1894'. [ 620.983794][ T5254] 8021q: adding VLAN 0 to HW filter on device eth19 [ 621.281706][ T1026] bridge_slave_1: left allmulticast mode [ 621.281730][ T1026] bridge_slave_1: left promiscuous mode [ 621.281921][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.339746][ T5699] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 621.352506][T23761] ceph: No mds server is up or the cluster is laggy [ 621.545198][ T1026] bridge_slave_0: left allmulticast mode [ 621.545224][ T1026] bridge_slave_0: left promiscuous mode [ 621.545423][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.981622][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.075582][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.134940][ T1026] bond0 (unregistering): Released all slaves [ 623.214742][T23823] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1909'. [ 623.214771][T23823] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1909'. [ 624.438203][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.450325][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.634241][ T5254] 8021q: adding VLAN 0 to HW filter on device eth20 [ 624.761924][T23851] smc: net device lo applied user defined pnetid SYZ0 [ 626.060867][ T1026] hsr_slave_0: left promiscuous mode [ 626.102816][ T1026] hsr_slave_1: left promiscuous mode [ 626.106608][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.106636][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.141654][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.141674][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.248935][ T1026] veth1_macvtap: left promiscuous mode [ 626.248999][ T1026] veth0_macvtap: left promiscuous mode [ 626.249171][ T1026] veth1_vlan: left promiscuous mode [ 626.249287][ T1026] veth0_vlan: left promiscuous mode [ 627.211529][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 627.251246][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 628.919956][T23939] nvme nvme0: failed to connect socket: -111 [ 630.241647][T23974] ovs-system: entered promiscuous mode [ 632.019561][T22390] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.263320][T22683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.318535][T24074] ceph: No mds server is up or the cluster is laggy [ 633.324793][ T6187] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 633.987064][T19915] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 634.245258][T22683] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.265073][T19919] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 634.273723][T22655] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 634.328784][T22655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 634.343159][T22655] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 634.403802][T22655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.433098][T22655] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 634.456852][T22655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.500248][T24116] ceph: No mds server is up or the cluster is laggy [ 634.534457][T22655] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 634.594770][T22655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 634.596859][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.597025][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.064733][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.064897][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.981983][T24179] can0: slcan on ptm0. [ 636.378708][T24177] can0 (unregistered): slcan off ptm0. [ 636.748599][T24215] tipc: New replicast peer: 127.0.0.1 [ 636.805542][T24215] tipc: Enabled bearer , priority 10 [ 636.930699][T24215] tipc: Disabling bearer [ 636.999187][T22655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.339273][T22655] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.487705][T22391] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.488065][T22391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.597875][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.598044][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.129394][T22683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.423408][T22683] veth0_vlan: entered promiscuous mode [ 639.540693][T24300] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1955'. [ 639.543911][T22683] veth1_vlan: entered promiscuous mode [ 639.642256][T22655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.564767][T22683] veth0_macvtap: entered promiscuous mode [ 640.612509][T22683] veth1_macvtap: entered promiscuous mode [ 641.060647][T24363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1959'. [ 641.181921][T22683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.196160][T24363] openvswitch: ovs-system: Dropping previously announced user features [ 641.654369][T22683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.099298][ T32] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PREFIX) [ 642.111183][T24387] ceph: No mds server is up or the cluster is laggy [ 642.917664][T24493] sctp: [Deprecated]: syz.7.1964 (pid 24493) Use of int in maxseg socket option. [ 642.917664][T24493] Use struct sctp_assoc_value instead [ 643.029072][T22655] veth0_vlan: entered promiscuous mode [ 643.576429][T22655] veth1_vlan: entered promiscuous mode [ 644.121301][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.121319][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.850839][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.850858][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.986412][T22655] veth0_macvtap: entered promiscuous mode [ 645.102003][T22655] veth1_macvtap: entered promiscuous mode [ 645.428026][T22655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.482616][T22655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.656495][T22390] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.799580][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1975'. [ 645.862291][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1975'. [ 645.862314][T24577] openvswitch: netlink: Flow actions attr not present in new flow. [ 645.932687][T22390] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.938123][T24564] can0: slcan on ptm0. [ 646.257094][ T4209] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.292891][T24572] openvswitch: ovs-system: Dropping previously announced user features [ 646.633100][ T4209] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.727118][T24563] can0 (unregistered): slcan off ptm0. [ 650.789299][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.789321][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.510543][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.511067][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.762849][T24774] openvswitch: netlink: Flow actions attr not present in new flow. [ 656.715248][T24849] svc: failed to register lockdv1 RPC service (errno 512). [ 656.729243][T24849] lockd_up: makesock failed, error=-512 [ 657.220926][T20960] Bluetooth: hci3: command 0x0406 tx timeout [ 657.225902][T24829] infiniband syz0: set active [ 657.235278][T24829] infiniband syz0: added veth0 [ 657.488840][T24829] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 657.517710][T24829] infiniband syz0: Couldn't open port 1 [ 657.518328][T24829] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 657.518359][T24829] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 657.518394][T24829] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 658.150224][T24829] RDS/IB: syz0: added [ 658.166108][T24829] smc: adding ib device syz0 with port count 1 [ 658.197478][T24829] smc: ib device syz0 port 1 has no pnetid [ 658.378121][T24849] svc: failed to register nfsdv3 RPC service (errno 512). [ 658.378353][T24849] svc: failed to register nfsaclv3 RPC service (errno 512). [ 658.378369][T24849] failed to unregister tcp with rpcbind [ 658.378628][T24849] svc: failed to register nfsdv3 RPC service (errno 97). [ 658.378645][T24849] svc: failed to register nfsaclv3 RPC service (errno 97). [ 658.378658][T24849] failed to unregister tcp with rpcbind [ 660.338773][T24996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2029'. [ 660.338801][T24996] netlink: 'syz.7.2029': attribute type 1 has an invalid length. [ 660.474762][T24998] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2030'. [ 660.475135][T24998] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2030'. [ 660.478739][T24998] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2030'. [ 660.501352][T24998] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2030'. [ 660.501686][T24998] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2030'. [ 660.501987][T24998] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2030'. [ 660.502383][T24998] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2030'. [ 660.502593][T24998] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2030'. [ 662.330791][ T5603] Bluetooth: hci6: command 0x0406 tx timeout [ 663.464133][T25066] ceph: No source [ 663.593285][T25072] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2052'. [ 663.593319][T25072] ksmbd: Unknown IPC event: 1, ignore. [ 663.594358][T25072] nbd: must specify at least one socket [ 663.598049][T25071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.616868][ T5771] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 663.900053][ T5771] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 664.225064][T25062] ceph: No mds server is up or the cluster is laggy [ 665.091035][ T200] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 665.302930][ T200] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 665.303008][ T200] usb 9-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 665.328174][ T200] usb 9-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 665.328202][ T200] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 665.328221][ T200] usb 9-1: Product: syz [ 665.328236][ T200] usb 9-1: Manufacturer: syz [ 665.566498][ T200] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 666.233680][T25135] tipc: Started in network mode [ 666.233708][T25135] tipc: Node identity 7f000001, cluster identity 4711 [ 666.236527][T25135] tipc: Enabling of bearer rejected, failed to enable media [ 666.265909][T25136] bridge0: port 3(gretap0) entered blocking state [ 666.266946][T25136] bridge0: port 3(gretap0) entered disabled state [ 666.269625][T25136] gretap0: entered allmulticast mode [ 666.400188][T25136] gretap0: entered promiscuous mode [ 666.424785][T25136] bridge0: port 3(gretap0) entered blocking state [ 666.430436][T25136] bridge0: port 3(gretap0) entered forwarding state [ 666.459345][T25139] bridge0: port 4(erspan0) entered blocking state [ 666.459471][T25139] bridge0: port 4(erspan0) entered disabled state [ 666.459620][T25139] erspan0: entered allmulticast mode [ 666.464573][T25139] erspan0: entered promiscuous mode [ 666.487345][T25139] bridge0: port 4(erspan0) entered blocking state [ 666.487505][T25139] bridge0: port 4(erspan0) entered forwarding state [ 667.308208][ T5698] libceph: connect (1)127.0.0.1:6789 error -101 [ 667.308380][ T5698] libceph: mon0 (1)127.0.0.1:6789 connect error [ 667.329970][ T5698] libceph: connect (1)127.0.0.1:6789 error -101 [ 667.330144][ T5698] libceph: mon0 (1)127.0.0.1:6789 connect error [ 667.586270][ T5698] libceph: connect (1)127.0.0.1:6789 error -101 [ 667.586429][ T5698] libceph: mon0 (1)127.0.0.1:6789 connect error [ 668.091476][T19915] libceph: connect (1)127.0.0.1:6789 error -101 [ 668.091656][T19915] libceph: mon0 (1)127.0.0.1:6789 connect error [ 668.123021][T25180] ceph: No mds server is up or the cluster is laggy [ 668.909593][T25213] __nla_validate_parse: 5 callbacks suppressed [ 668.909614][T25213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2081'. [ 668.909659][T25213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2081'. [ 669.139982][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 669.291260][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 669.296668][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 669.299544][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 669.304808][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.247277][T25249] rdma_rxe: rxe_newlink: failed to add lo [ 671.421564][T25361] openvswitch: netlink: Key type 36 is out of range max 32 [ 671.463478][T25344] sctp: [Deprecated]: syz.8.2097 (pid 25344) Use of int in maxseg socket option. [ 671.463478][T25344] Use struct sctp_assoc_value instead [ 671.611271][T20960] Bluetooth: hci2: command tx timeout [ 671.885127][T25219] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.887371][T25219] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.887651][T25219] bridge_slave_0: entered allmulticast mode [ 671.909036][T25219] bridge_slave_0: entered promiscuous mode [ 671.940019][T25219] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.940283][T25219] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.940529][T25219] bridge_slave_1: entered allmulticast mode [ 671.951899][T25219] bridge_slave_1: entered promiscuous mode [ 672.304563][T25219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.357917][T25219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.486662][T25219] team0: Port device team_slave_0 added [ 672.492594][T25219] team0: Port device team_slave_1 added [ 672.605192][T25401] ceph: No mds server is up or the cluster is laggy [ 672.752712][T25219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.752729][T25219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.752756][T25219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.762939][T25219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.762955][T25219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.762982][T25219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.693133][T20960] Bluetooth: hci2: command tx timeout [ 673.721155][T25528] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2113'. [ 673.809159][T25219] hsr_slave_0: entered promiscuous mode [ 673.817606][T25219] hsr_slave_1: entered promiscuous mode [ 673.828169][T25219] debugfs: 'hsr0' already exists in 'hsr' [ 673.828195][T25219] Cannot create hsr debugfs directory [ 673.888500][T25537] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2114'. [ 673.913939][T25537] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2114'. [ 674.393954][ T5676] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 674.396024][T25502] ceph: No mds server is up or the cluster is laggy [ 674.919701][T25624] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2118'. [ 674.935163][ T5771] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 675.154064][T25561] ceph: No mds server is up or the cluster is laggy [ 675.239486][ T5676] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 675.789215][T20960] Bluetooth: hci2: command tx timeout [ 675.806009][ T200] usb 9-1: [UEAGLE-ATM] firmware ueagle-atm/930-fpga.bin is not available [ 675.806093][ T200] usb 9-1: [UEAGLE-ATM] urb submission failed with error -19 [ 675.806177][ T200] ueagle-atm 9-1:1.0: usbatm_usb_probe: bind failed: -19! [ 675.983882][ T37] usb 10-1: [UEAGLE-ATM] firmware ueagle-atm/930-fpga.bin is not available [ 675.983957][ T37] usb 10-1: [UEAGLE-ATM] urb submission failed with error -19 [ 675.984051][ T37] ueagle-atm 10-1:1.0: usbatm_usb_probe: bind failed: -19! [ 675.999982][ T37] ueagle-atm 10-1:1.2: usbatm_usb_probe: bind failed: -19! [ 676.071410][ T200] ueagle-atm 9-1:1.2: usbatm_usb_probe: bind failed: -19! [ 676.076832][ T200] usb 9-1: USB disconnect, device number 2 [ 676.115632][ T37] usb 10-1: USB disconnect, device number 2 [ 676.217323][T25219] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.266127][T25219] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.861982][T20960] Bluetooth: hci2: command tx timeout [ 677.904291][T25219] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.351113][T25219] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.401106][T25714] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2136'. [ 678.401172][T25717] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2136'. [ 678.462939][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2137'. [ 681.291530][T25754] lo speed is unknown, defaulting to 1000 [ 681.497032][T25219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 681.584649][T25219] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 681.587680][T25754] lo speed is unknown, defaulting to 1000 [ 682.041091][T25219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 682.087470][T25219] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.321665][T25219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 682.322219][T25754] lo speed is unknown, defaulting to 1000 [ 682.411725][T25219] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.657828][ T4174] bridge_slave_1: left allmulticast mode [ 682.657865][ T4174] bridge_slave_1: left promiscuous mode [ 682.658146][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.846415][ T4174] bridge_slave_0: left allmulticast mode [ 682.846452][ T4174] bridge_slave_0: left promiscuous mode [ 682.846720][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.958966][T25754] infiniband syz1: set active [ 682.959052][T25754] infiniband syz1: added lo [ 682.968859][T25754] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 682.978034][T25754] infiniband syz1: Couldn't open port 1 [ 682.978446][T25754] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 682.978477][T25754] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 682.978514][T25754] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 683.085843][T25754] RDS/IB: syz1: added [ 683.085918][T25754] smc: adding ib device syz1 with port count 1 [ 683.099327][T25754] smc: ib device syz1 port 1 has no pnetid [ 683.956007][ T4174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.053563][ T4174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.103011][ T4174] bond0 (unregistering): Released all slaves [ 684.121796][T25219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 684.248722][T25219] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.282282][T19915] lo speed is unknown, defaulting to 1000 [ 684.414464][ T5597] lo speed is unknown, defaulting to 1000 [ 684.569711][T25754] lo speed is unknown, defaulting to 1000 [ 685.043975][T25754] lo speed is unknown, defaulting to 1000 [ 685.405161][T25219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.870731][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.870824][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.995282][T25754] lo speed is unknown, defaulting to 1000 [ 686.201775][T25219] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.232951][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.233113][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.287062][T22391] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.287194][T22391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.797510][T25754] lo speed is unknown, defaulting to 1000 [ 687.270423][T25219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.368175][T25754] lo speed is unknown, defaulting to 1000 [ 687.474224][T25219] veth0_vlan: entered promiscuous mode [ 687.567579][T25219] veth1_vlan: entered promiscuous mode [ 687.610071][T24625] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 687.620320][T25886] ceph: No mds server is up or the cluster is laggy [ 687.861874][T25219] veth0_macvtap: entered promiscuous mode [ 687.876542][ T200] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 687.916142][T25219] veth1_macvtap: entered promiscuous mode [ 688.233479][T25898] ovs-system: entered promiscuous mode [ 688.253791][T25754] lo speed is unknown, defaulting to 1000 [ 688.453373][T25219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.532295][T25219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.560265][T22391] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.583357][T22391] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.583834][T22391] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.583874][T22391] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.769623][T25911] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 689.222726][T25754] lo speed is unknown, defaulting to 1000 [ 689.244961][ T37] IPVS: starting estimator thread 0... [ 689.417012][T25919] IPVS: using max 12 ests per chain, 28800 per kthread [ 690.087167][ T3364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.087189][ T3364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.613281][ T3364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.613303][ T3364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.036987][T25974] can0: slcan on ptm0. [ 692.255219][ T5771] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PREFIX) [ 692.264624][T25966] ceph: No mds server is up or the cluster is laggy [ 692.703741][T25970] can0 (unregistered): slcan off ptm0. [ 693.800977][ T4174] hsr_slave_0: left promiscuous mode [ 694.069594][ T4174] hsr_slave_1: left promiscuous mode [ 694.127980][ T4174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.130722][ T4174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.155393][ T4174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.155421][ T4174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.530486][ T4174] veth1_macvtap: left promiscuous mode [ 694.533922][ T4174] veth0_macvtap: left promiscuous mode [ 694.534269][ T4174] veth1_vlan: left promiscuous mode [ 694.534465][ T4174] veth0_vlan: left promiscuous mode [ 696.411628][T26079] netlink: 'syz.9.2189': attribute type 4 has an invalid length. [ 696.734653][ T4174] team0 (unregistering): Port device team_slave_1 removed [ 696.793521][ T4174] team0 (unregistering): Port device team_slave_0 removed [ 699.118850][T26117] lo speed is unknown, defaulting to 1000 [ 699.263301][T26137] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2200'. [ 700.637496][T26193] rdma_op ffff8880666cba70 conn xmit_rdma 0000000000000000 [ 701.399788][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2211'. [ 701.549179][T26211] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2211'. [ 701.549214][T26211] openvswitch: netlink: Flow actions attr not present in new flow. [ 701.899976][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 701.984849][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 701.996765][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.034230][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.141366][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 703.023552][T26209] ovs-system: entered promiscuous mode [ 704.667298][T26207] lo speed is unknown, defaulting to 1000 [ 705.002895][T20960] Bluetooth: hci1: command tx timeout [ 705.281229][T26292] smc: net device veth0 applied user defined pnetid SYZ0 [ 706.386549][T26315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2230'. [ 706.390296][T26315] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2230'. [ 706.414072][T26315] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2230'. [ 707.051331][T20960] Bluetooth: hci1: command tx timeout [ 707.194796][T26376] netlink: 'syz.9.2237': attribute type 3 has an invalid length. [ 707.865763][T26413] netlink: 'syz.9.2239': attribute type 1 has an invalid length. [ 707.865786][T26413] netlink: 'syz.9.2239': attribute type 1 has an invalid length. [ 707.866856][T26413] netlink: 'syz.9.2239': attribute type 1 has an invalid length. [ 707.866872][T26413] netlink: 'syz.9.2239': attribute type 1 has an invalid length. [ 708.602897][T26364] lo speed is unknown, defaulting to 1000 [ 709.131113][T20960] Bluetooth: hci1: command tx timeout [ 709.240354][T26207] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.247945][T26207] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.248260][T26207] bridge_slave_0: entered allmulticast mode [ 709.271202][T26207] bridge_slave_0: entered promiscuous mode [ 709.278071][T26207] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.279819][T26207] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.280122][T26207] bridge_slave_1: entered allmulticast mode [ 709.288329][T26207] bridge_slave_1: entered promiscuous mode [ 709.612960][T26207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.661917][T26207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.863405][T26207] team0: Port device team_slave_0 added [ 709.872600][T26207] team0: Port device team_slave_1 added [ 709.982311][T26372] lo speed is unknown, defaulting to 1000 [ 710.062277][T26207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.063808][T26207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.063838][T26207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.185505][T26207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.185523][T26207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.185551][T26207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.083877][T26207] hsr_slave_0: entered promiscuous mode [ 711.086178][T26207] hsr_slave_1: entered promiscuous mode [ 711.098772][T26379] lo speed is unknown, defaulting to 1000 [ 711.227492][T20960] Bluetooth: hci1: command tx timeout [ 713.823090][T26407] lo speed is unknown, defaulting to 1000 [ 714.797428][T26386] lo speed is unknown, defaulting to 1000 [ 718.659690][T20960] Bluetooth: hci0: command 0x0406 tx timeout [ 720.525834][T26207] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 720.589425][T26207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.590480][T26207] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 720.701174][T26207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.710382][T26207] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 720.740189][T26207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 720.748000][T26207] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 720.786876][T26207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.979204][T26907] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2247'. [ 721.009979][T26907] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2247'. [ 721.045959][T26907] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2247'. [ 721.338171][T26207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.836731][T26207] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.974627][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.974800][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.069952][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.070109][ T4174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.404693][T26207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.128218][T26207] veth0_vlan: entered promiscuous mode [ 725.279073][T26207] veth1_vlan: entered promiscuous mode [ 725.469997][T26207] veth0_macvtap: entered promiscuous mode [ 725.513015][T26207] veth1_macvtap: entered promiscuous mode [ 725.606248][T26207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.652734][T26207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.769471][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.783423][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.783770][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.787196][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.182916][T27035] lo speed is unknown, defaulting to 1000 [ 727.726941][ T4174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.726960][ T4174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.946964][T20960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 728.046502][T20960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 728.224082][T20960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 728.249833][T22391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.249850][T22391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.292783][T20960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 728.298872][T20960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 729.155615][ T5771] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 729.394271][ T5771] usb 6-1: Invalid ep0 maxpacket: 64 [ 729.489688][T27064] lo speed is unknown, defaulting to 1000 [ 729.550765][ T5771] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 729.781827][ T5771] usb 6-1: Invalid ep0 maxpacket: 64 [ 729.782122][ T5771] usb usb6-port1: attempt power cycle [ 730.130801][ T5771] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 730.154672][ T5771] usb 6-1: Invalid ep0 maxpacket: 64 [ 730.280751][ T5771] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 730.321367][ T5771] usb 6-1: Invalid ep0 maxpacket: 64 [ 730.321715][ T5771] usb usb6-port1: unable to enumerate USB device [ 730.741695][ T5603] Bluetooth: hci4: command tx timeout [ 730.752836][T27064] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.753234][T27064] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.753560][T27064] bridge_slave_0: entered allmulticast mode [ 730.757086][T27064] bridge_slave_0: entered promiscuous mode [ 730.764758][T27064] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.765138][T27064] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.765439][T27064] bridge_slave_1: entered allmulticast mode [ 730.768953][T27064] bridge_slave_1: entered promiscuous mode [ 730.865215][T27064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.870514][T27064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.011906][T27064] team0: Port device team_slave_0 added [ 731.017087][T27064] team0: Port device team_slave_1 added [ 731.087442][T27064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.087460][T27064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.087485][T27064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.138442][T27064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.138457][T27064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.138485][T27064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.280085][T27064] hsr_slave_0: entered promiscuous mode [ 731.291582][T27064] hsr_slave_1: entered promiscuous mode [ 731.293311][T27064] debugfs: 'hsr0' already exists in 'hsr' [ 731.293340][T27064] Cannot create hsr debugfs directory [ 732.407681][T27064] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.810908][ T5603] Bluetooth: hci4: command tx timeout [ 732.875737][T27064] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.292264][T27064] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.625288][T27064] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.177841][T27064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 734.218789][T27064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.219711][T27064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 734.257079][T27064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.258025][T27064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 734.294905][T27064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 734.296207][T27064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 734.339277][T27064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.481078][T27064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.526902][T27064] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.540341][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.540487][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.562788][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.562946][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.898596][ T5603] Bluetooth: hci4: command tx timeout [ 735.115866][T27064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.238177][T27064] veth0_vlan: entered promiscuous mode [ 735.281159][T27064] veth1_vlan: entered promiscuous mode [ 735.337434][T27064] veth0_macvtap: entered promiscuous mode [ 735.352746][T27064] veth1_macvtap: entered promiscuous mode [ 735.389802][T27064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.408252][T27064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.442193][T22391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.443546][T22391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.443594][T22391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.443627][T22391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.390926][ T3364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.390944][ T3364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.985204][ T5603] Bluetooth: hci4: command tx timeout [ 737.181323][ T6306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.181344][ T6306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.868354][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 739.001676][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 739.004827][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 739.008096][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 739.008855][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 739.718551][T27477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2276'. [ 739.719099][T27477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'. [ 740.059969][T27454] lo speed is unknown, defaulting to 1000 [ 741.053722][ T5603] Bluetooth: hci5: command tx timeout [ 741.083607][T27454] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.083843][T27454] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.084067][T27454] bridge_slave_0: entered allmulticast mode [ 741.086792][T27454] bridge_slave_0: entered promiscuous mode [ 741.092998][T27454] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.093388][T27454] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.093957][T27454] bridge_slave_1: entered allmulticast mode [ 741.097125][T27454] bridge_slave_1: entered promiscuous mode [ 741.196538][T27454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.210185][T27454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.290164][T27454] team0: Port device team_slave_0 added [ 741.297089][T27454] team0: Port device team_slave_1 added [ 741.348400][T27454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.348411][T27454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.348426][T27454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.352653][T27454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.352668][T27454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.352693][T27454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.600153][T27454] hsr_slave_0: entered promiscuous mode [ 741.605260][T27454] hsr_slave_1: entered promiscuous mode [ 741.607234][T27454] debugfs: 'hsr0' already exists in 'hsr' [ 741.607259][T27454] Cannot create hsr debugfs directory [ 741.684142][T27683] tipc: Started in network mode [ 741.684172][T27683] tipc: Node identity 7f000001, cluster identity 4711 [ 741.684463][T27683] tipc: New replicast peer: 127.0.0.1 [ 741.685329][T27683] tipc: Enabled bearer , priority 10 [ 743.132617][ T5603] Bluetooth: hci5: command tx timeout [ 743.329120][ T37] tipc: Node number set to 2130706433 [ 745.214245][ T5603] Bluetooth: hci5: command tx timeout [ 745.693444][T27814] lo speed is unknown, defaulting to 1000 [ 746.744001][ T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 746.798684][ T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 746.878326][ T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 746.891540][ T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 746.894045][ T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 747.298860][ T60] Bluetooth: hci5: command tx timeout [ 747.323963][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.324065][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.248100][ T5603] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 748.316532][ T5603] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 748.322482][ T5603] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 748.365534][ T5603] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 748.368230][ T5603] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 748.875302][T27454] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 748.919118][T27454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 748.926549][T27454] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 748.973200][ T60] Bluetooth: hci7: command tx timeout [ 749.003031][T27454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.080326][T27454] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 749.356973][T27454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.376874][T27454] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 749.554708][T27454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.339787][T27454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.517485][T27881] lo speed is unknown, defaulting to 1000 [ 750.538014][T27454] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.869339][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.883642][ T4171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.918033][ T60] Bluetooth: hci8: command tx timeout [ 750.960759][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.960947][ T4171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.062715][ T60] Bluetooth: hci7: command tx timeout [ 752.040442][T27916] lo speed is unknown, defaulting to 1000 [ 752.550102][T27994] ceph: No mds server is up or the cluster is laggy [ 752.981291][ T60] Bluetooth: hci8: command tx timeout [ 753.131439][ T60] Bluetooth: hci7: command tx timeout [ 753.582778][T27454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.649947][T27881] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.653040][T27881] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.653342][T27881] bridge_slave_0: entered allmulticast mode [ 754.663027][T27881] bridge_slave_0: entered promiscuous mode [ 754.709543][T27881] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.709768][T27881] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.709956][T27881] bridge_slave_1: entered allmulticast mode [ 754.724473][T27881] bridge_slave_1: entered promiscuous mode [ 755.053588][ T60] Bluetooth: hci8: command tx timeout [ 755.224785][ T60] Bluetooth: hci7: command tx timeout [ 755.321384][T27881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.367774][T27881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.586575][T27881] team0: Port device team_slave_0 added [ 755.781008][T27881] team0: Port device team_slave_1 added [ 756.409145][T27881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.409163][T27881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.409195][T27881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.517582][T27881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.517593][T27881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.517609][T27881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.715903][T27916] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.717838][T27916] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.718138][T27916] bridge_slave_0: entered allmulticast mode [ 756.726326][T27916] bridge_slave_0: entered promiscuous mode [ 756.729526][T27454] veth0_vlan: entered promiscuous mode [ 756.755583][T27916] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.755913][T27916] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.756206][T27916] bridge_slave_1: entered allmulticast mode [ 756.759660][T27916] bridge_slave_1: entered promiscuous mode [ 757.060257][T27881] hsr_slave_0: entered promiscuous mode [ 757.068719][T27881] hsr_slave_1: entered promiscuous mode [ 757.071596][T27881] debugfs: 'hsr0' already exists in 'hsr' [ 757.071623][T27881] Cannot create hsr debugfs directory [ 757.095817][T27916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.131117][ T60] Bluetooth: hci8: command tx timeout [ 757.175181][T27916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.185057][T27454] veth1_vlan: entered promiscuous mode [ 757.328695][T27916] team0: Port device team_slave_0 added [ 757.394825][T27916] team0: Port device team_slave_1 added [ 757.520462][T27916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.520472][T27916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.520486][T27916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.566711][T27916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.566734][T27916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.566762][T27916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.239593][T28414] lo speed is unknown, defaulting to 1000 [ 758.276105][T27916] hsr_slave_0: entered promiscuous mode [ 758.280292][T27916] hsr_slave_1: entered promiscuous mode [ 758.294636][T27916] debugfs: 'hsr0' already exists in 'hsr' [ 758.294661][T27916] Cannot create hsr debugfs directory [ 758.467667][T27454] veth0_macvtap: entered promiscuous mode [ 758.538451][T27454] veth1_macvtap: entered promiscuous mode [ 761.032365][T27454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.333970][T27454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.486978][ T1171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.489293][ T1171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.489566][ T1171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.499104][ T1171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.417437][ T6305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.417460][ T6305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.882474][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.882494][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.108659][T28757] rdma_rxe: rxe_newlink: failed to add lo [ 769.765721][ T4171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.668401][ T4171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.382440][ T4171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.217478][ T4171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.262095][ T4171] bridge_slave_1: left allmulticast mode [ 774.262132][ T4171] bridge_slave_1: left promiscuous mode [ 774.267208][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.442259][ T4171] bridge_slave_0: left allmulticast mode [ 774.442295][ T4171] bridge_slave_0: left promiscuous mode [ 774.442559][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.821399][ T4171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.885408][ T4171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.903015][ T4171] bond0 (unregistering): Released all slaves [ 778.716541][ T4171] hsr_slave_0: left promiscuous mode [ 778.754520][ T4171] hsr_slave_1: left promiscuous mode [ 778.768552][ T4171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.768580][ T4171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.799085][ T4171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.799114][ T4171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.917437][ T4171] veth1_macvtap: left promiscuous mode [ 778.917543][ T4171] veth0_macvtap: left promiscuous mode [ 778.917840][ T4171] veth1_vlan: left promiscuous mode [ 778.918051][ T4171] veth0_vlan: left promiscuous mode [ 779.941446][ T4171] team0 (unregistering): Port device team_slave_1 removed [ 780.001266][ T4171] team0 (unregistering): Port device team_slave_0 removed [ 780.944157][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 781.735007][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 782.300984][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 782.849484][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4 [ 783.800886][ T4171] bridge_slave_1: left allmulticast mode [ 783.800922][ T4171] bridge_slave_1: left promiscuous mode [ 783.801194][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.962191][ T4171] bridge_slave_0: left allmulticast mode [ 783.962232][ T4171] bridge_slave_0: left promiscuous mode [ 783.962534][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.200858][ T4171] bridge_slave_1: left allmulticast mode [ 784.200891][ T4171] bridge_slave_1: left promiscuous mode [ 784.201079][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.301625][ T4171] bridge_slave_0: left allmulticast mode [ 784.301651][ T4171] bridge_slave_0: left promiscuous mode [ 784.301822][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.711672][ T4171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.794353][ T4171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.872528][ T4171] bond0 (unregistering): Released all slaves [ 785.141662][ T4171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.241387][ T4171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.314813][ T4171] bond0 (unregistering): Released all slaves [ 785.363614][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 786.466818][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6 [ 787.216691][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 787.660858][ T4171] hsr_slave_0: left promiscuous mode [ 787.700746][ T4171] hsr_slave_1: left promiscuous mode [ 787.702557][ T4171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.741422][ T4171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.920769][ T4171] hsr_slave_0: left promiscuous mode [ 787.940906][ T4171] hsr_slave_1: left promiscuous mode [ 787.942002][ T4171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.981396][ T4171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.411749][ T4171] team0 (unregistering): Port device team_slave_1 removed [ 788.461814][ T4171] team0 (unregistering): Port device team_slave_0 removed [ 788.993126][ T4171] team0 (unregistering): Port device team_slave_1 removed [ 789.061174][ T4171] team0 (unregistering): Port device team_slave_0 removed [ 789.255099][ T5254] 8021q: adding VLAN 0 to HW filter on device eth8 [ 795.450793][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 808.737664][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.737762][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 826.251012][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 831.772398][ T39] INFO: task syz.7.2149:25853 blocked for more than 143 seconds. [ 831.772427][ T39] Tainted: G L syzkaller #0 [ 831.772439][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.772448][ T39] task:syz.7.2149 state:D stack:28360 pid:25853 tgid:25847 ppid:20935 task_flags:0x400140 flags:0x00080002 [ 831.772516][ T39] Call Trace: [ 831.772523][ T39] [ 831.772535][ [ 831.772535][ T39] __schedule+0x1709/0x5530 [ 831.772583][ T39] ? __pfx_sched_clock_cpu+0x10/0x10 [ 831.772618][ T39] ? __pfx___schedule+0x10/0x10 [ 831.772659][ T39] rt_mutex_schedule+0x76/0xf0 [ 831.772678][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 831.772713][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 831.772743][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 831.772772][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 831.772798][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 831.772840][ T39] ? write_threads+0x3b4/0x610 [ 831.772875][ T39] ? write_threads+0x3b4/0x610 [ 831.772901][ T39] mutex_lock_nested+0x168/0x1d0 [ 831.772933][ T39] write_threads+0x3b4/0x610 [ 831.772966][ T39] ? __pfx_write_threads+0x10/0x10 [ 831.773012][ T39] ? _copy_from_user+0x94/0xb0 [ 831.773030][ T39] ? simple_transaction_get+0x130/0x170 [ 831.773053][ T39] nfsctl_transaction_write+0x112/0x160 [ 831.773084][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 831.773112][ T39] vfs_write+0x29f/0xbb0 [ 831.773143][ T39] ? __pfx_vfs_write+0x10/0x10 [ 831.773180][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 831.773200][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 831.773220][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 831.773240][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 831.773263][ T39] ? fdget_pos+0x252/0x320 [ 831.773293][ T39] ksys_write+0x156/0x270 [ 831.773318][ T39] ? __pfx_ksys_write+0x10/0x10 [ 831.773352][ T39] do_syscall_64+0x17b/0x530 [ 831.773372][ T39] ? irqentry_exit+0x10f/0x8f0 [ 831.773391][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.773412][ T39] ? clear_bhb_loop+0x40/0x90 [ 831.773438][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.773459][ T39] RIP: 0033:0x7ff3c3e4e019 [ 831.773479][ T39] RSP: 002b:00007ff3c2085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 831.773500][ T39] RAX: ffffffffffffffda RBX: 00007ff3c40d6090 RCX: 00007ff3c3e4e019 [ 831.773515][ T39] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000005 [ 831.773549][ T39] RBP: 00007ff3c3ee500c R08: 0000000000000000 R09: 0000000000000000 [ 831.773562][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.773574][ T39] R13: 00007ff3c40d6128 R14: 00007ff3c40d6090 R15: 00007ffd1b26a958 [ 831.773608][ T39] [ 831.800369][ T39] [ 831.800369][ T39] Showing all locks held in the system: [ 831.800387][ T39] locks held by kworker/u8:0/12: 2, on CPU#0: [ 831.800404][ T39] #0: ffff88801bba2138 ((wq_completion)xprtiod){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.800455][ T39] #1: ffffc90000117c60 ((work_completion)(&(&transport->connect_worker)->work)#2){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.800772][ T39] locks held by ktimers/1/30: 6, last CPU#1: [ 831.800787][ T39] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 831.800835][ T39] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 831.800884][ T39] #2: ffff8880b87241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 831.800945][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 831.800996][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd1/0x3d0 [ 831.801042][ T39] #5: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 831.801092][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 831.801106][ T39] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 831.801178][ T39] locks held by kworker/u8:11/3364: 10, last CPU#1: [ 831.801192][ T39] #0: ffff888041ba7138 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.801243][ T39] #1: ffffc9000eb77c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.801289][ T39] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 831.801334][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 831.801382][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 831.801426][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __icmp_send+0x230/0x1710 [ 831.801476][ T39] #6: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 831.801522][ T39] #7: ffff88801cb4bba0 (k-slock-AF_INET){+...}-{3:3}, at: __icmp_send+0xa49/0x1710 [ 831.801578][ T39] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 831.801628][ T39] #9: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 831.801687][ T39] locks held by kworker/u9:1/4907: 2, on CPU#1: [ 831.801702][ T39] #0: ffff888027ea8938 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.801745][ T39] #1: ffffc9001159fc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.801799][ T39] locks held by getty/5349: 2, on CPU#1: [ 831.801813][ T39] #0: ffff88802a4e60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 831.801908][ T39] #1: ffffc900044d62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 831.801959][ T39] locks held by kworker/u9:2/5596: 2, on CPU#1: [ 831.801974][ T39] #0: ffff888027ea8938 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.832577][ T39] #1: ffffc900057efc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.832626][ T39] locks held by kworker/u9:3/5599: 2, on CPU#1: [ 831.832642][ T39] #0: ffff888027ea8938 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.832686][ T39] #1: ffffc9000580fc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.832735][ T39] locks held by kworker/u8:16/6305: 4, last CPU#0: [ 831.832750][ T39] #0: ffff88805f96b938 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.832799][ T39] #1: ffffc90006c9fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 831.832844][ T39] #2: ffff88806d6097b8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 831.832903][ T39] #3: ffff88805ce75938 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 831.832969][ T39] locks held by syz.7.2149/25850: 3, on CPU#1: [ 831.832983][ T39] #0: ffff88803bf37528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.833027][ T39] #1: ffff88803faac510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.833079][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 831.833131][ T39] locks held by syz.7.2149/25853: 3, on CPU#1: [ 831.833153][ T39] #0: ffff888037656928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.833197][ T39] #1: ffff88803faac510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.833246][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 831.833300][ T39] locks held by syz.2.2245/26607: 3, on CPU#1: [ 831.833314][ T39] #0: ffff888038221b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.833358][ T39] #1: ffff888032ff2510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.833408][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 831.833463][ T39] locks held by syz.2.2245/26614: 3, on CPU#1: [ 831.833477][ T39] #0: ffff88805d416d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.833521][ T39] #1: ffff888032ff2510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.833570][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 831.833622][ T39] locks held by syz.2.2245/26621: 3, on CPU#1: [ 831.833635][ T39] #0: ffff888038223528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.833682][ T39] #1: ffff888032ff2510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.833733][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 831.833785][ T39] locks held by syz.9.2260/26995: 3, on CPU#0: [ 831.833799][ T39] #0: ffff888073143b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.833843][ T39] #1: ffff88803a29e510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.833892][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 831.833944][ T39] locks held by syz.9.2260/27000: 3, on CPU#1: [ 831.833957][ T39] #0: ffff88806c7dbd28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.834001][ T39] #1: ffff88803a29e510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.834051][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 831.834101][ T39] locks held by syz.9.2260/27005: 3, on CPU#1: [ 831.834115][ T39] #0: ffff8880664a9928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.834165][ T39] #1: ffff88803a29e510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.834214][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 831.838419][ T39] locks held by syz.8.2267/27306: 3, on CPU#1: [ 831.838439][ T39] #0: ffff888033e3b728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.838490][ T39] #1: ffff888035694510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.838542][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 831.838595][ T39] locks held by syz.8.2267/27316: 3, on CPU#1: [ 831.838609][ T39] #0: ffff88801f772928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.838653][ T39] #1: ffff888035694510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.838715][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 831.838767][ T39] locks held by syz.8.2267/27352: 3, on CPU#0: [ 831.838781][ T39] #0: ffff88803bfa3528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.838825][ T39] #1: ffff888035694510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.838875][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 831.838926][ T39] locks held by syz.5.2268/27391: 3, on CPU#0: [ 831.838940][ T39] #0: ffff888032e55d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.838984][ T39] #1: ffff888026124510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.839033][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 831.839085][ T39] locks held by syz.5.2268/27392: 3, on CPU#0: [ 831.839098][ T39] #0: ffff888032e55728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.839148][ T39] #1: ffff888026124510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 831.839198][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 831.839249][ T39] locks held by syz.5.2268/27393: 1, on CPU#0: [ 831.839263][ T39] #0: ffff888032e55728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 831.839312][ T39] [ 831.839317][ T39] ============================================= [ 831.839317][ T39] [ 831.839338][ T39] NMI backtrace for cpu 1 [ 831.839355][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 831.839381][ T39] Tainted: [L]=SOFTLOCKUP [ 831.839388][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.839400][ T39] Call Trace: [ 831.839408][ T39] [ 831.839416][ T39] dump_stack_lvl+0xe8/0x150 [ 831.839442][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 831.839469][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 831.839498][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 831.839527][ T39] sys_info+0x135/0x170 [ 831.839550][ T39] watchdog+0xfd7/0x1030 [ 831.839586][ T39] ? watchdog+0x1c7/0x1030 [ 831.839623][ T39] kthread+0x388/0x470 [ 831.839649][ T39] ? __pfx_watchdog+0x10/0x10 [ 831.839674][ T39] ? __pfx_kthread+0x10/0x10 [ 831.839701][ T39] ret_from_fork+0x514/0xb70 [ 831.839730][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 831.839755][ T39] ? __switch_to+0xc89/0x1420 [ 831.839780][ T39] ? __pfx_kthread+0x10/0x10 [ 831.839806][ T39] ret_from_fork_asm+0x1a/0x30 [ 831.839846][ T39] [ 831.839857][ T39] Sending NMI from CPU 1 to CPUs 0: [ 831.839887][ C0] NMI backtrace for cpu 0 [ 831.839907][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 831.839931][ C0] Tainted: [L]=SOFTLOCKUP [ 831.839938][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.839948][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 831.839971][ C0] Code: e8 6e 3b 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 92 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 831.839990][ C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 831.840005][ C0] RAX: 1ffffffff340f020 RBX: 00000000000003fd RCX: 0000000000000000 [ 831.840018][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 831.840029][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 831.840041][ C0] R10: dffffc0000000000 R11: ffffffff856067f0 R12: dffffc0000000000 [ 831.840055][ C0] R13: 0000000000000000 R14: ffffffff9a078580 R15: 0000000000000000 [ 831.840067][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 831.840081][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.840095][ C0] CR2: 000055c9aac89660 CR3: 000000000e1b0000 CR4: 00000000003526f0 [ 831.840111][ C0] Call Trace: [ 831.840118][ C0] [ 831.840127][ C0] wait_for_lsr+0x190/0x300 [ 831.840149][ C0] serial8250_console_write+0x113a/0x1b40 [ 831.840176][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 831.840200][ C0] ? console_flush_one_record+0x49d/0xb90 [ 831.840229][ C0] console_flush_one_record+0x667/0xb90 [ 831.840258][ C0] ? console_flush_one_record+0xfa/0xb90 [ 831.840286][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 831.840313][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 831.840334][ C0] legacy_kthread_func+0x1b6/0x250 [ 831.840361][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 831.840387][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 831.840412][ C0] ? __kthread_parkme+0x71/0x1f0 [ 831.840432][ C0] ? __kthread_parkme+0x196/0x1f0 [ 831.840455][ C0] kthread+0x388/0x470 [ 831.840478][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 831.840501][ C0] ? __pfx_kthread+0x10/0x10 [ 831.840525][ C0] ret_from_fork+0x514/0xb70 [ 831.840550][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 831.840573][ C0] ? __switch_to+0xc89/0x1420 [ 831.840594][ C0] ? __pfx_kthread+0x10/0x10 [ 831.840617][ C0] ret_from_fork_asm+0x1a/0x30 [ 831.840656][ C0] [ 831.844437][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 831.844459][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 831.844486][ T39] Tainted: [L]=SOFTLOCKUP [ 831.844493][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.844505][ T39] Call Trace: [ 831.844513][ T39] [ 831.844521][ T39] vpanic+0x56c/0xa60 [ 831.844545][ T39] ? __pfx___schedule+0x10/0x10 [ 831.844575][ T39] ? __pfx_vpanic+0x10/0x10 [ 831.844603][ T39] panic+0xc5/0xd0 [ 831.844621][ T39] ? __pfx_panic+0x10/0x10 [ 831.844638][ T39] ? preempt_schedule_common+0x82/0xd0 [ 831.844666][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 831.844686][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 831.844715][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 831.844748][ T39] watchdog+0x1030/0x1030 [ 831.844784][ T39] ? watchdog+0x1c7/0x1030 [ 831.844818][ T39] kthread+0x388/0x470 [ 831.844845][ T39] ? __pfx_watchdog+0x10/0x10 [ 831.844871][ T39] ? __pfx_kthread+0x10/0x10 [ 831.844897][ T39] ret_from_fork+0x514/0xb70 [ 831.844926][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 831.844952][ T39] ? __switch_to+0xc89/0x1420 [ 831.844976][ T39] ? __pfx_kthread+0x10/0x10 [ 831.845002][ T39] ret_from_fork_asm+0x1a/0x30 [ 831.845043][ T39] [ 831.845334][ T39] Kernel Offset: disabled