last executing test programs: 2m48.047210482s ago: executing program 1 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2m46.72688852s ago: executing program 1 (id=347): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1', 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000900)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xc0a80101}}) bind(r0, &(0x7f0000000a00)=@in={0x2, 0x4e23, @rand_addr=0xc0a80101}, 0x10) listen(r0, 0x5) write(r2, &(0x7f0000000b00)="0000080045000054000040004084b6d2c0a80102c0a8010110e24e230000000000000000010000380102030400010000000a000a00000000800200240102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20", 0x58) 2m45.634763929s ago: executing program 1 (id=360): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m45.449118912s ago: executing program 1 (id=362): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000020), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@RTM_NEWNSID={0x24, 0x58, 0x1, 0x0, 0x0, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r0}]}, 0x24}}, 0x0) unshare(0x40000000) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) 2m43.608315643s ago: executing program 1 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) 2m43.50042872s ago: executing program 1 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\x00', 0x2) close(r2) 2m41.904315232s ago: executing program 4 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1000}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r1, &(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xc0, 0xa8, 0x1, 0x1}}, 0x10) listen(r1, 0x5) write(r0, &(0x7f0000000300)="00000800450000540000400040840000c0a80102c0a8010110e24e230000000000000000010000380102030400010000000a000a00000000800200240102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20", 0x58) 2m41.614883485s ago: executing program 4 (id=400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="480000003700010000"], 0x48}], 0x1}, 0x0) 2m41.4717605s ago: executing program 4 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a24000000000a010400000000000000000200000a0800010073797a300000000258000000120a010400000000000000000200000a0800010073797a30000000020800020073797a300000000208000300000000073400040008000100020000000500020011000000200003801c0001000c0001001e000000000000000c00020000000000140000001100010000000000000000000200000a"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000130a010000000000000000000200000a0800010073797a30000000020800020073797a30000000020800030000000007"], 0x30}}, 0x0) 2m41.21337823s ago: executing program 4 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x0, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 2m40.998672307s ago: executing program 4 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r2, &(0x7f0000000400)='12345678901234567890', 0x14, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 2m40.681550823s ago: executing program 4 (id=410): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-3\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10) sendto(r4, &(0x7f00000002c0)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m39.361743801s ago: executing program 3 (id=420): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x170, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x1, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x40, [0x0]}}]}, 0x170}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@loopback, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000400)="000102030405060708090a0b0c0d0e0f", 0x10, 0x8000, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="000102030405060708090a0b0c0d0e0f", 0x10, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2m39.199672104s ago: executing program 3 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 2m39.032463743s ago: executing program 3 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newqdisc={0x0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 2m38.777978179s ago: executing program 3 (id=427): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) 2m38.594760599s ago: executing program 3 (id=428): syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010200010902370002010080320904000002ff00000007058102000200070502"], 0x0) 2m37.330571545s ago: executing program 3 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x108, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9) 2m28.28628599s ago: executing program 32 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\x00', 0x2) close(r2) 2m25.514889157s ago: executing program 33 (id=410): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-3\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10) sendto(r4, &(0x7f00000002c0)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m21.958429793s ago: executing program 34 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x108, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9) 1m58.234844539s ago: executing program 6 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='/bin/true\n\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='5\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='1\n\x00', 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1m42.7042319s ago: executing program 35 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='/bin/true\n\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='5\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='1\n\x00', 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 13.474757379s ago: executing program 0 (id=837): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xf4240) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000000, &(0x7f0000000100), &(0x7f0000000140)}) ioctl(r1, 0x4048aec9, &(0x7f0000000080)="02000000000000000100"/72) write(0x1, &(0x7f0000c02000)="1820000000000000010000000000000040420f000000000000000000", 0x1c) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x2a, {"48c7c01d00000048c7c70300000048c7c6002000000f01c1f4"}}], 0x2a}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.243994372s ago: executing program 5 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) 10.258682266s ago: executing program 8 (id=840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 10.205426552s ago: executing program 7 (id=841): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x17, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 10.076440145s ago: executing program 5 (id=842): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) 9.186199608s ago: executing program 5 (id=844): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 8.997586763s ago: executing program 0 (id=845): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = creat(0x0, 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x40, 0x8000, 0x3, 0x1, 0x10}) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x0, 0x4}) 8.955036936s ago: executing program 7 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0x80000300, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0xfffffb6e}) bind$rds(0xffffffffffffffff, 0x0, 0x0) 8.950769649s ago: executing program 2 (id=847): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}}, 0x0) 8.809570188s ago: executing program 5 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, &(0x7f0000000280)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xfffffffffffffff7, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private1, @in=@empty}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000040)=0xfffffffffffffeaa) lgetxattr(0x0, &(0x7f00000001c0)=ANY=[], &(0x7f0000000400)=""/203, 0xcb) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.698855565s ago: executing program 2 (id=849): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x17, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 8.587384154s ago: executing program 8 (id=850): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x17, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 7.584124714s ago: executing program 7 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 7.03889004s ago: executing program 5 (id=852): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) 5.024107529s ago: executing program 8 (id=853): r0 = socket$inet6(0xa, 0x1, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x8}, 0x52) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) close(r0) 5.023864171s ago: executing program 2 (id=854): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) 4.532732546s ago: executing program 0 (id=855): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'pcl726\x00', [0x5, 0x3ff, 0x1, 0x5, 0x3, 0x100, 0x1, 0x20000000, 0xb, 0xa, 0x7, 0x7, 0x1, 0x401, 0xa, 0xfffffffc, 0x1, 0x8, 0x8, 0x401, 0x17, 0x4, 0x4, 0x4, 0x400048, 0x800005, 0x80000001, 0x0, 0x82, 0x7, 0x9]}) 4.471355125s ago: executing program 7 (id=856): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x17, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3.23084603s ago: executing program 8 (id=857): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x0, 0x4}) read$msr(r0, &(0x7f00000001c0)=""/66, 0x42) 3.188256741s ago: executing program 7 (id=858): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="000000000100", 0x6) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 3.05686897s ago: executing program 0 (id=859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c001}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) connect$inet6(r0, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) futex(&(0x7f0000000100)=0x2, 0x0, 0x1, 0x0, &(0x7f0000000000)=0xffffffff, 0x3000000) socket$nl_generic(0x10, 0x3, 0x10) 3.055760124s ago: executing program 2 (id=860): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x17, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 3.035163222s ago: executing program 5 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) 2.791555151s ago: executing program 7 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0xfffffb6e}) 2.695290429s ago: executing program 0 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 2.650824145s ago: executing program 8 (id=864): r0 = socket(0x1000000000000010, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x8000) 1.513712956s ago: executing program 2 (id=865): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x17, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1.366806601s ago: executing program 8 (id=866): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000003142302"], 0x10}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) ioprio_get$pid(0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 1.366545858s ago: executing program 0 (id=867): r0 = socket$inet6(0xa, 0x1, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x8}, 0x52) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) getpid() socket$pppl2tp(0x18, 0x1, 0x1) 0s ago: executing program 2 (id=868): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.222' (ED25519) to the list of known hosts. [ 77.275320][ T5579] cgroup: Unknown subsys name 'net' [ 77.520383][ T5579] cgroup: Unknown subsys name 'cpuset' [ 77.601376][ T5579] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.311153][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.933269][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.936375][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.951778][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.969673][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.970315][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.971770][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.977517][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.979280][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.996391][ T4908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.997552][ T4908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.030314][ T4908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.055951][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.057474][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.063046][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.071189][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.116804][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.139696][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.145971][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.160291][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.175265][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.176041][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.177033][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.178917][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.180584][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.210848][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.103143][ T5605] Bluetooth: hci1: command tx timeout [ 85.250637][ T5605] Bluetooth: hci0: command tx timeout [ 85.250770][ T5605] Bluetooth: hci3: command tx timeout [ 85.250855][ T5605] Bluetooth: hci4: command tx timeout [ 85.332723][ T5596] Bluetooth: hci2: command tx timeout [ 85.739743][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.741640][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.741839][ T5591] bridge_slave_0: entered allmulticast mode [ 85.744498][ T5591] bridge_slave_0: entered promiscuous mode [ 85.774363][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.774453][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.774601][ T5597] bridge_slave_0: entered allmulticast mode [ 85.776721][ T5597] bridge_slave_0: entered promiscuous mode [ 85.819137][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.819246][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.819408][ T5591] bridge_slave_1: entered allmulticast mode [ 85.821213][ T5591] bridge_slave_1: entered promiscuous mode [ 85.847801][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.847890][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.848820][ T5597] bridge_slave_1: entered allmulticast mode [ 85.850154][ T5597] bridge_slave_1: entered promiscuous mode [ 85.876405][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.876532][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.877039][ T5594] bridge_slave_0: entered allmulticast mode [ 85.881258][ T5594] bridge_slave_0: entered promiscuous mode [ 85.929726][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.929839][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.929933][ T5592] bridge_slave_0: entered allmulticast mode [ 85.934065][ T5592] bridge_slave_0: entered promiscuous mode [ 85.937994][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.938108][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.938277][ T5594] bridge_slave_1: entered allmulticast mode [ 85.945074][ T5594] bridge_slave_1: entered promiscuous mode [ 85.992069][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.992193][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.992341][ T5593] bridge_slave_0: entered allmulticast mode [ 85.994065][ T5593] bridge_slave_0: entered promiscuous mode [ 86.014987][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.015118][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.019744][ T5592] bridge_slave_1: entered allmulticast mode [ 86.023325][ T5592] bridge_slave_1: entered promiscuous mode [ 86.055994][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.056235][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.056365][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.056515][ T5593] bridge_slave_1: entered allmulticast mode [ 86.058221][ T5593] bridge_slave_1: entered promiscuous mode [ 86.063880][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.112896][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.193423][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.218666][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.260393][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.268836][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.295336][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.327307][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.329160][ T5591] team0: Port device team_slave_0 added [ 86.334677][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.337444][ T5597] team0: Port device team_slave_0 added [ 86.378949][ T5591] team0: Port device team_slave_1 added [ 86.394846][ T5597] team0: Port device team_slave_1 added [ 86.396460][ T5594] team0: Port device team_slave_0 added [ 86.455573][ T5594] team0: Port device team_slave_1 added [ 86.458031][ T5592] team0: Port device team_slave_0 added [ 86.486850][ T5593] team0: Port device team_slave_0 added [ 86.516089][ T5592] team0: Port device team_slave_1 added [ 86.516942][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.516952][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.516965][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.520190][ T5593] team0: Port device team_slave_1 added [ 86.551364][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.551380][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.551404][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.601826][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.601841][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.601865][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.626928][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.626945][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.626968][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.630292][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.630306][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.630330][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.718182][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.718198][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.718222][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.720206][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.720219][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.720242][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.738630][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.738649][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.738674][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.767340][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.767355][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.767379][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.768805][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.768817][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.768841][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.033884][ T31] cfg80211: failed to load regulatory.db [ 87.066639][ T5597] hsr_slave_0: entered promiscuous mode [ 87.067669][ T5597] hsr_slave_1: entered promiscuous mode [ 87.082603][ T5591] hsr_slave_0: entered promiscuous mode [ 87.083538][ T5591] hsr_slave_1: entered promiscuous mode [ 87.084205][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 87.084290][ T5591] Cannot create hsr debugfs directory [ 87.148119][ T5594] hsr_slave_0: entered promiscuous mode [ 87.149021][ T5594] hsr_slave_1: entered promiscuous mode [ 87.149550][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 87.149565][ T5594] Cannot create hsr debugfs directory [ 87.171666][ T5596] Bluetooth: hci1: command tx timeout [ 87.330797][ T5605] Bluetooth: hci3: command tx timeout [ 87.330832][ T5605] Bluetooth: hci0: command tx timeout [ 87.331028][ T5596] Bluetooth: hci4: command tx timeout [ 87.410834][ T5596] Bluetooth: hci2: command tx timeout [ 87.588751][ T5592] hsr_slave_0: entered promiscuous mode [ 87.589560][ T5592] hsr_slave_1: entered promiscuous mode [ 87.590075][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 87.590098][ T5592] Cannot create hsr debugfs directory [ 87.602002][ T5593] hsr_slave_0: entered promiscuous mode [ 87.603364][ T5593] hsr_slave_1: entered promiscuous mode [ 87.604221][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 87.604243][ T5593] Cannot create hsr debugfs directory [ 88.356250][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.413183][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.418879][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.445268][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.467210][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.525148][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.549500][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.588280][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.726897][ T5591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.754659][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.768192][ T5591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.795617][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.808687][ T5591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.838453][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.875890][ T5591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.915819][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.081277][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.125924][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.139387][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.174372][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.177572][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.224549][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.249776][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.257358][ T5596] Bluetooth: hci1: command tx timeout [ 89.297118][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.420701][ T5596] Bluetooth: hci4: command tx timeout [ 89.420730][ T5596] Bluetooth: hci0: command tx timeout [ 89.420749][ T5596] Bluetooth: hci3: command tx timeout [ 89.424993][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.473434][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.490141][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.492541][ T59] Bluetooth: hci2: command tx timeout [ 89.514908][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.527987][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.554476][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.597019][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.627849][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.709117][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.778316][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.805863][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.823082][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.853404][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.874218][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.894498][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.899774][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.925182][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.929397][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.007421][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.009690][ T1420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.034605][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.086460][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.100441][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.182614][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.229941][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.238211][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.238332][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.303864][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.303968][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.414395][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.444773][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.498466][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.498684][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.582871][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.583133][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.652222][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.721754][ T1916] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.721875][ T1916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.728710][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.797229][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.797410][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.919230][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.032856][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.032985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.096383][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.096559][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.331588][ T59] Bluetooth: hci1: command tx timeout [ 91.490968][ T5596] Bluetooth: hci0: command tx timeout [ 91.490998][ T5596] Bluetooth: hci4: command tx timeout [ 91.491049][ T59] Bluetooth: hci3: command tx timeout [ 91.549865][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.570610][ T59] Bluetooth: hci2: command tx timeout [ 92.057272][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.098602][ T5597] veth0_vlan: entered promiscuous mode [ 92.221411][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.222411][ T5597] veth1_vlan: entered promiscuous mode [ 92.536925][ T5591] veth0_vlan: entered promiscuous mode [ 92.539516][ T5597] veth0_macvtap: entered promiscuous mode [ 92.568960][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.594804][ T5597] veth1_macvtap: entered promiscuous mode [ 92.638501][ T5591] veth1_vlan: entered promiscuous mode [ 92.696696][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.711999][ T5592] veth0_vlan: entered promiscuous mode [ 92.767978][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.807218][ T5592] veth1_vlan: entered promiscuous mode [ 92.819939][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.912290][ T1916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.933940][ T1916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.938483][ T1916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.959942][ T1916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.969849][ T5591] veth0_macvtap: entered promiscuous mode [ 93.084445][ T5591] veth1_macvtap: entered promiscuous mode [ 93.354342][ T5592] veth0_macvtap: entered promiscuous mode [ 93.360307][ T5594] veth0_vlan: entered promiscuous mode [ 93.404618][ T5592] veth1_macvtap: entered promiscuous mode [ 93.409504][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.448041][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.453687][ T5594] veth1_vlan: entered promiscuous mode [ 93.556410][ T5593] veth0_vlan: entered promiscuous mode [ 93.564461][ T1053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.579801][ T1053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.604987][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.610275][ T1053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.622216][ T1916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.622243][ T1916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.673360][ T1053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.698033][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.734839][ T5593] veth1_vlan: entered promiscuous mode [ 93.854684][ T1916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.867250][ T1916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.868595][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.868612][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.949361][ T1916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.008409][ T1916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.193567][ T5594] veth0_macvtap: entered promiscuous mode [ 94.430241][ T5594] veth1_macvtap: entered promiscuous mode [ 94.592674][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.592693][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.723531][ T5593] veth0_macvtap: entered promiscuous mode [ 94.790359][ T5593] veth1_macvtap: entered promiscuous mode [ 94.816300][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.821158][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.821177][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.897912][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.922190][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.922208][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.944121][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.945514][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.947892][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.949173][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.968083][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.039243][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.155362][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.155382][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.157437][ T2986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.252127][ T2986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.261434][ T2986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.286895][ T2986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.982331][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.982355][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.566271][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.566291][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.944710][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.944732][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.188737][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.188755][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.544522][ T5591] svc: failed to register nfsdv3 RPC service (errno 111). [ 97.553377][ T5591] svc: failed to register nfsaclv3 RPC service (errno 111). [ 97.553396][ T5591] failed to unregister tcp with rpcbind [ 97.554546][ T5591] svc: failed to register nfsdv3 RPC service (errno 97). [ 97.554564][ T5591] svc: failed to register nfsaclv3 RPC service (errno 97). [ 97.554576][ T5591] failed to unregister tcp with rpcbind [ 98.384776][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 98.385029][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 98.385128][ T5811] tipc: Started in network mode [ 98.385157][ T5811] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 98.460283][ T5811] tipc: New replicast peer: 127.0.0.1 [ 98.605529][ T5811] tipc: Enabled bearer , priority 10 [ 98.680564][ T5804] svc: failed to register lockdv1 RPC service (errno 512). [ 98.681080][ T5804] lockd_up: makesock failed, error=-512 [ 99.174477][ T5826] Zero length message leads to an empty skb [ 99.672113][ T31] tipc: Node number set to 3210880763 [ 99.750249][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 100.302460][ T5841] FAULT_INJECTION: forcing a failure. [ 100.302460][ T5841] name fail_futex, interval 1, probability 0, space 0, times 1 [ 100.302515][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.4.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.302541][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.302557][ T5841] Call Trace: [ 100.302563][ T5841] [ 100.302577][ T5841] dump_stack_lvl+0xe8/0x150 [ 100.302615][ T5841] should_fail_ex+0x467/0x600 [ 100.302651][ T5841] get_futex_key+0x1b3/0x1580 [ 100.302684][ T5841] ? __pfx_get_futex_key+0x10/0x10 [ 100.302707][ T5841] ? debug_object_free+0x29c/0x340 [ 100.302735][ T5841] futex_wake+0x119/0x600 [ 100.302763][ T5841] ? __pfx_futex_wait+0x10/0x10 [ 100.302791][ T5841] ? __pfx_futex_wake+0x10/0x10 [ 100.302820][ T5841] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 100.302852][ T5841] ? ktime_get+0x45/0x220 [ 100.302873][ T5841] do_futex+0x458/0x4e0 [ 100.302901][ T5841] ? __pfx_do_futex+0x10/0x10 [ 100.302924][ T5841] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.302946][ T5841] ? ktime_get+0x45/0x220 [ 100.302967][ T5841] __se_sys_futex+0x3a8/0x450 [ 100.302997][ T5841] ? __pfx___se_sys_futex+0x10/0x10 [ 100.303021][ T5841] ? rcu_is_watching+0x15/0xb0 [ 100.303051][ T5841] ? __x64_sys_futex+0x21/0xf0 [ 100.303073][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.303091][ T5841] do_syscall_64+0x174/0x580 [ 100.303113][ T5841] ? trace_irq_disable+0x3b/0x140 [ 100.303132][ T5841] ? clear_bhb_loop+0x40/0x90 [ 100.303156][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.303174][ T5841] RIP: 0033:0x7f2040e8de99 [ 100.303197][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.303212][ T5841] RSP: 002b:00007fff7ee25738 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 100.303237][ T5841] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2040e8de99 [ 100.303250][ T5841] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2041115fa8 [ 100.303263][ T5841] RBP: 0000000000001e51 R08: 0000000000000005 R09: 0000000000000000 [ 100.303274][ T5841] R10: 00007f2041115fa0 R11: 0000000000000246 R12: 0000000000000000 [ 100.303286][ T5841] R13: 00007f2041115fac R14: 00007f2041115fa8 R15: 00007f2041115fa0 [ 100.303315][ T5841] [ 100.306718][ T5845] netlink: 56 bytes leftover after parsing attributes in process `syz.1.23'. [ 100.983425][ T5851] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 101.032550][ T5804] svc: failed to register nfsdv3 RPC service (errno 512). [ 101.049809][ T5804] svc: failed to register nfsaclv3 RPC service (errno 512). [ 101.049830][ T5804] failed to unregister tcp with rpcbind [ 101.089530][ T5804] svc: failed to register nfsdv3 RPC service (errno 97). [ 101.089554][ T5804] svc: failed to register nfsaclv3 RPC service (errno 97). [ 101.089567][ T5804] failed to unregister tcp with rpcbind [ 101.620213][ T5865] netlink: 56 bytes leftover after parsing attributes in process `syz.2.30'. [ 103.222103][ T5892] tipc: Enabling of bearer rejected, already enabled [ 103.422132][ T5599] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.817363][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 103.850742][ T5599] usb 2-1: device descriptor read/64, error -71 [ 104.078488][ T5913] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 104.202031][ T5599] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.334754][ T5599] usb 2-1: device descriptor read/64, error -71 [ 104.449889][ T5599] usb usb2-port1: attempt power cycle [ 104.840876][ T5599] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.865007][ T5599] usb 2-1: device descriptor read/8, error -71 [ 105.105116][ T5599] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.143424][ T5599] usb 2-1: device descriptor read/8, error -71 [ 105.259412][ T5599] usb usb2-port1: unable to enumerate USB device [ 105.765692][ T5911] NFSD: Unable to initialize client recovery tracking! (-110) [ 105.765711][ T5911] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 105.765721][ T5911] NFSD: starting 90-second grace period (net f00003bf) [ 106.476767][ T5948] lo speed is unknown, defaulting to 1000 [ 106.496714][ T5948] lo speed is unknown, defaulting to 1000 [ 106.509359][ T5948] lo speed is unknown, defaulting to 1000 [ 106.894860][ T5953] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 107.185635][ T5948] infiniband syz1: set active [ 107.185651][ T5948] infiniband syz1: added lo [ 107.188373][ T5694] lo speed is unknown, defaulting to 1000 [ 107.229698][ T5948] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 107.229721][ T5948] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 107.229744][ T5948] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 107.389175][ T5948] RDS/IB: syz1: added [ 107.389936][ T5948] smc: adding ib device syz1 with port count 1 [ 107.390153][ T5948] smc: ib device syz1 port 1 has no pnetid [ 107.395808][ T10] lo speed is unknown, defaulting to 1000 [ 107.413904][ T5948] lo speed is unknown, defaulting to 1000 [ 107.663921][ T5948] lo speed is unknown, defaulting to 1000 [ 107.961326][ T5948] lo speed is unknown, defaulting to 1000 [ 108.147813][ T5948] lo speed is unknown, defaulting to 1000 [ 108.334489][ T5948] lo speed is unknown, defaulting to 1000 [ 108.538656][ T5947] infiniband syz0: set active [ 108.538816][ T5947] infiniband syz0: added veth0 [ 108.581666][ T5947] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 108.581703][ T5947] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 108.581739][ T5947] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 108.668400][ T5947] RDS/IB: syz0: added [ 108.668478][ T5947] smc: adding ib device syz0 with port count 1 [ 108.668500][ T5947] smc: ib device syz0 port 1 has no pnetid [ 109.185247][ C1] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated [ 109.692240][ T5923] svc: failed to register lockdv1 RPC service (errno 512). [ 110.545579][ T5923] svc: failed to register nfsdv3 RPC service (errno 111). [ 110.547745][ T5923] svc: failed to register nfsaclv3 RPC service (errno 512). [ 110.547768][ T5923] failed to unregister udp with rpcbind [ 110.554556][ T5923] svc: failed to register nfsdv3 RPC service (errno 97). [ 110.554576][ T5923] svc: failed to register nfsaclv3 RPC service (errno 97). [ 110.554588][ T5923] failed to unregister udp with rpcbind [ 110.988879][ T5793] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 111.011523][ T5968] ceph: No mds server is up or the cluster is laggy [ 111.048053][ T5592] svc: failed to register nfsdv3 RPC service (errno 111). [ 111.089500][ T5592] svc: failed to register nfsaclv3 RPC service (errno 111). [ 111.089520][ T5592] failed to unregister tcp with rpcbind [ 111.159845][ T5982] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 111.160004][ T5592] svc: failed to register nfsdv3 RPC service (errno 97). [ 111.160022][ T5592] svc: failed to register nfsaclv3 RPC service (errno 97). [ 111.160031][ T5592] failed to unregister tcp with rpcbind [ 111.271869][ T31] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 111.596939][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 111.596979][ T5988] openvswitch: netlink: Flow actions attr not present in new flow. [ 111.646557][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 111.646938][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 112.516150][ T6015] netlink: 32 bytes leftover after parsing attributes in process `syz.4.80'. [ 112.568942][ T6015] tipc: Enabled bearer , priority 10 [ 112.570019][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.83'. [ 113.005945][ T6039] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 114.420770][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'. [ 114.432100][ T6048] NFSD: Unable to initialize client recovery tracking! (-110) [ 114.432116][ T6048] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 114.432126][ T6048] NFSD: starting 90-second grace period (net f00003eb) [ 114.896380][ T6077] syz.1.101 (6077) used greatest stack depth: 19184 bytes left [ 114.975331][ T6082] syz.1.101 (6082) used greatest stack depth: 17512 bytes left [ 115.876800][ T6111] tipc: Started in network mode [ 115.876829][ T6111] tipc: Node identity 7f000001, cluster identity 4711 [ 115.877123][ T6111] tipc: New replicast peer: 127.0.0.1 [ 115.877745][ T6111] tipc: Enabled bearer , priority 10 [ 116.076223][ T6115] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 116.139160][ T6098] NFSD: Failed to start, no listeners configured. [ 116.918547][ T5694] tipc: Node number set to 2130706433 [ 117.284937][ T6155] netlink: 36 bytes leftover after parsing attributes in process `syz.4.130'. [ 117.494663][ T69] rpcbind: server 127.0.0.1 not responding, timed out [ 118.013324][ T6178] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 118.128880][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 118.478260][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.146'. [ 118.479520][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'. [ 118.491022][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 119.539747][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.159'. [ 119.539769][ T6231] openvswitch: netlink: Flow actions attr not present in new flow. [ 119.707302][ T6235] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 119.889880][ T6241] rdma_rxe: rxe_newlink: failed to add lo [ 120.323210][ T6213] NFSD: Unable to initialize client recovery tracking! (-110) [ 120.323229][ T6213] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 120.323240][ T6213] NFSD: starting 90-second grace period (net f00003eb) [ 121.912610][ T6291] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 123.370349][ T66] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.475744][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.476317][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.476334][ T6331] ksmbd: Unknown IPC event: 1, ignore. [ 123.476571][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.476587][ T6331] nbd: must specify at least one socket [ 123.476900][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.477188][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.477418][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.577594][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.578004][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.578711][ T6331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.578726][ T6331] ksmbd: Unknown IPC event: 1, ignore. [ 123.578966][ T6331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.578981][ T6331] nbd: must specify at least one socket [ 123.611202][ T66] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.617454][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.741240][ T6337] netlink: 'syz.1.199': attribute type 37 has an invalid length. [ 124.078578][ T6349] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 124.100782][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.241101][ T10] usb 3-1: device descriptor read/64, error -71 [ 124.480678][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.611656][ T241] rpcbind: server 127.0.0.1 not responding, timed out [ 124.620825][ T10] usb 3-1: device descriptor read/64, error -71 [ 124.730866][ T10] usb usb3-port1: attempt power cycle [ 125.070607][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.091303][ T10] usb 3-1: device descriptor read/8, error -71 [ 125.113953][ T6366] lo speed is unknown, defaulting to 1000 [ 125.363980][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.384949][ T10] usb 3-1: device descriptor read/8, error -71 [ 125.491552][ T10] usb usb3-port1: unable to enumerate USB device [ 125.880349][ T6396] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 127.821816][ T6441] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 127.836653][ T6440] rdma_rxe: rxe_newlink: failed to add lo [ 128.066188][ T5694] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.200620][ T5694] usb 2-1: device descriptor read/64, error -71 [ 128.460648][ T5694] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.590632][ T5694] usb 2-1: device descriptor read/64, error -71 [ 128.702385][ T5694] usb usb2-port1: attempt power cycle [ 128.941917][ T6463] __nla_validate_parse: 17 callbacks suppressed [ 128.941935][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 129.110606][ T5694] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.137937][ T5694] usb 2-1: device descriptor read/8, error -71 [ 129.380604][ T5694] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 129.412485][ T5694] usb 2-1: device descriptor read/8, error -71 [ 129.520894][ T5694] usb usb2-port1: unable to enumerate USB device [ 129.724384][ T6491] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 131.715207][ T6545] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 132.170614][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.403641][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.403656][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.403684][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.405197][ T9] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 132.405254][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 132.405264][ T9] usb 5-1: Product: syz [ 132.405271][ T9] usb 5-1: Manufacturer: syz [ 132.559491][ T6575] tipc: Enabling of bearer rejected, failed to enable media [ 132.873021][ T9] speedtch 5-1:1.0: speedtch_bind: data interface not found! [ 132.873050][ T9] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 132.876999][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877710][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.993009][ T9] usb 5-1: USB disconnect, device number 2 [ 133.295660][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 133.296089][ T6591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.295'. [ 133.804864][ T6607] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 133.897778][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 133.903465][ T6611] siw: device registration error -23 [ 134.514946][ T5694] lo speed is unknown, defaulting to 1000 [ 134.514981][ T5694] syz1: Port: 1 Link DOWN [ 134.515214][ T5694] lo speed is unknown, defaulting to 1000 [ 134.951162][ T5694] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.099062][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 135.145603][ T5694] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.145627][ T5694] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.145672][ T5694] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.157593][ T5694] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 135.157622][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 135.157783][ T5694] usb 2-1: Product: syz [ 135.157796][ T5694] usb 2-1: Manufacturer: syz [ 135.490699][ T5694] speedtch 2-1:1.0: speedtch_bind: data interface not found! [ 135.490720][ T5694] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 135.582378][ T5694] usb 2-1: USB disconnect, device number 10 [ 135.712719][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 135.715952][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 135.716271][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 135.723256][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 135.847171][ T6664] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 135.982031][ T197] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 136.014194][ T197] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 136.278725][ T197] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 136.513416][ T6659] ceph: No mds server is up or the cluster is laggy [ 136.981019][ T6695] netlink: 52 bytes leftover after parsing attributes in process `syz.4.338'. [ 137.106540][ T48] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 137.130804][ T48] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 137.216383][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 137.216878][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 137.430505][ T48] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 137.880636][ T6698] ceph: No mds server is up or the cluster is laggy [ 137.964813][ T48] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 138.293741][ T6736] netlink: 52 bytes leftover after parsing attributes in process `syz.0.351'. [ 138.894599][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.935826][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.041100][ T6756] bridge_slave_1: left allmulticast mode [ 139.041357][ T6756] bridge_slave_1: left promiscuous mode [ 139.135663][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.182900][ T6763] nfs: Bad value for 'source' [ 139.259987][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 139.333211][ T6770] netlink: 52 bytes leftover after parsing attributes in process `syz.2.363'. [ 139.465049][ T6756] bridge_slave_0: left allmulticast mode [ 139.465074][ T6756] bridge_slave_0: left promiscuous mode [ 139.465235][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.508195][ T6796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.371'. [ 140.512256][ T6796] tipc: Started in network mode [ 140.512275][ T6796] tipc: Node identity 1000001, cluster identity 4711 [ 140.512286][ T6796] tipc: Node number set to 16777217 [ 140.516927][ T6796] tipc: Enabled bearer , priority 10 [ 140.983788][ T821] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 141.166559][ T821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.166647][ T821] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.166673][ T821] usb 3-1: config 1 interface 1 has no altsetting 0 [ 141.168667][ T821] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 141.168694][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 141.168712][ T821] usb 3-1: Product: syz [ 141.168725][ T821] usb 3-1: Manufacturer: syz [ 141.609822][ T821] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 141.609979][ T821] usb 3-1: selecting invalid altsetting 0 [ 141.610023][ T821] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -71! [ 141.610076][ T821] speedtch 3-1:1.0: probe with driver speedtch failed with error -71 [ 141.650015][ T821] usb 3-1: selecting invalid altsetting 0 [ 141.650048][ T821] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 141.650405][ T821] usb 3-1: selecting invalid altsetting 0 [ 141.674236][ T821] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 141.695226][ T821] usb 3-1: USB disconnect, device number 6 [ 142.293532][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 142.321252][ T6851] lo speed is unknown, defaulting to 1000 [ 143.186423][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 143.240086][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.403'. [ 143.590615][ T821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 143.658168][ T6893] bridge0: port 3(syz_tun) entered blocking state [ 143.660070][ T6893] bridge0: port 3(syz_tun) entered disabled state [ 143.660308][ T6893] syz_tun: entered allmulticast mode [ 143.693353][ T6893] syz_tun: entered promiscuous mode [ 143.743187][ T6893] bridge0: port 3(syz_tun) entered blocking state [ 143.743296][ T6893] bridge0: port 3(syz_tun) entered forwarding state [ 143.784668][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.784693][ T821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.784740][ T821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.786493][ T821] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 143.786520][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 143.786537][ T821] usb 4-1: Product: syz [ 143.786550][ T821] usb 4-1: Manufacturer: syz [ 144.152832][ T821] speedtch 4-1:1.0: speedtch_bind: data interface not found! [ 144.152850][ T821] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 144.248450][ T821] usb 4-1: USB disconnect, device number 2 [ 145.422065][ T6930] tipc: Started in network mode [ 145.422095][ T6930] tipc: Node identity 7f000001, cluster identity 4711 [ 145.422421][ T6930] tipc: New replicast peer: 127.0.0.1 [ 145.499016][ T6930] tipc: Enabled bearer , priority 10 [ 145.853595][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 146.026978][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 146.243686][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.392700][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.392725][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 146.392781][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 146.396111][ T9] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 146.396140][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 146.396159][ T9] usb 4-1: Product: syz [ 146.396172][ T9] usb 4-1: Manufacturer: syz [ 146.634007][ T197] tipc: Node number set to 2130706433 [ 146.713031][ T9] speedtch 4-1:1.0: speedtch_bind: data interface not found! [ 146.713053][ T9] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 146.811388][ T9] usb 4-1: USB disconnect, device number 3 [ 146.975117][ T6961] rdma_rxe: rxe_newlink: failed to add lo [ 148.814812][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 149.460628][ T197] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.617420][ T197] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.617445][ T197] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 149.617490][ T197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 149.619095][ T197] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 149.619122][ T197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 149.619140][ T197] usb 1-1: Product: syz [ 149.619152][ T197] usb 1-1: Manufacturer: syz [ 149.885758][ T197] speedtch 1-1:1.0: speedtch_bind: data interface not found! [ 149.885772][ T197] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 149.939753][ T197] usb 1-1: USB disconnect, device number 2 [ 151.053418][ T7018] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 151.932656][ T5599] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 151.940284][ T5599] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 152.221263][ T5599] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 152.748319][ T5599] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 152.752571][ T7024] ceph: No mds server is up or the cluster is laggy [ 153.530619][ T821] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 153.682385][ T821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.682409][ T821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 153.684064][ T821] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 153.684089][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 153.684108][ T821] usb 3-1: Product: syz [ 153.684121][ T821] usb 3-1: Manufacturer: syz [ 153.928518][ T821] speedtch 3-1:1.0: speedtch_bind: data interface not found! [ 153.928540][ T821] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 153.970403][ T821] usb 3-1: USB disconnect, device number 7 [ 153.988068][ T7041] syz.0.461 uses obsolete (PF_INET,SOCK_PACKET) [ 154.321426][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 155.944697][ T7069] lo speed is unknown, defaulting to 1000 [ 156.565747][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.625402][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.644679][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.655320][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.656126][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.102506][ T5599] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.276144][ T5599] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.276170][ T5599] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.278120][ T5599] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 157.278148][ T5599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 157.278167][ T5599] usb 3-1: Product: syz [ 157.278180][ T5599] usb 3-1: Manufacturer: syz [ 157.463564][ T7073] lo speed is unknown, defaulting to 1000 [ 157.557919][ T5599] speedtch 3-1:1.0: speedtch_bind: data interface not found! [ 157.557940][ T5599] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 157.604090][ T5599] usb 3-1: USB disconnect, device number 8 [ 158.151396][ T7095] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 158.771692][ T5605] Bluetooth: hci5: command tx timeout [ 159.356208][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.398931][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.402118][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.431518][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 159.434892][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.804878][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.805068][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.805259][ T7073] bridge_slave_0: entered allmulticast mode [ 159.807720][ T7073] bridge_slave_0: entered promiscuous mode [ 159.811255][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.811415][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.811583][ T7073] bridge_slave_1: entered allmulticast mode [ 159.813749][ T7073] bridge_slave_1: entered promiscuous mode [ 159.873034][ T7073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.877539][ T7073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.969639][ T7073] team0: Port device team_slave_0 added [ 159.977823][ T7073] team0: Port device team_slave_1 added [ 160.086725][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.086736][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.086750][ T7073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.121590][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.121615][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.121642][ T7073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.385889][ T7133] rdma_rxe: rxe_newlink: failed to add veth0 [ 160.404421][ T7133] rdma_rxe: rxe_newlink: failed to add veth1 [ 160.484078][ T7073] hsr_slave_0: entered promiscuous mode [ 160.485049][ T7073] hsr_slave_1: entered promiscuous mode [ 160.485665][ T7073] debugfs: 'hsr0' already exists in 'hsr' [ 160.485687][ T7073] Cannot create hsr debugfs directory [ 160.631127][ T7115] lo speed is unknown, defaulting to 1000 [ 160.850617][ T59] Bluetooth: hci5: command tx timeout [ 161.666229][ T59] Bluetooth: hci6: command tx timeout [ 162.776043][ T7160] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 162.932170][ T59] Bluetooth: hci5: command tx timeout [ 163.196245][ T5605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.224121][ T5605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.234550][ T5605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.235914][ T5605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.236612][ T5605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.499309][ T7073] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.544261][ T7073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.629825][ T7073] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.668022][ T7073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.704856][ T7073] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.730602][ T5605] Bluetooth: hci6: command tx timeout [ 163.756229][ T7073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.757669][ T7073] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.800220][ T7073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.406242][ T7163] lo speed is unknown, defaulting to 1000 [ 165.199285][ T5605] Bluetooth: hci5: command tx timeout [ 165.505491][ T5605] Bluetooth: hci7: command tx timeout [ 165.618016][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.618217][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.618435][ T7115] bridge_slave_0: entered allmulticast mode [ 165.643608][ T7115] bridge_slave_0: entered promiscuous mode [ 165.656842][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.656984][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.657167][ T7115] bridge_slave_1: entered allmulticast mode [ 165.684996][ T7115] bridge_slave_1: entered promiscuous mode [ 165.820717][ T5605] Bluetooth: hci6: command tx timeout [ 165.882475][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.904928][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.171789][ T7115] team0: Port device team_slave_0 added [ 166.256260][ T7115] team0: Port device team_slave_1 added [ 166.578831][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.578848][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.578871][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.653872][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.653888][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.653912][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.737226][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.939446][ T7115] hsr_slave_0: entered promiscuous mode [ 166.940412][ T7115] hsr_slave_1: entered promiscuous mode [ 166.941998][ T7115] debugfs: 'hsr0' already exists in 'hsr' [ 166.942020][ T7115] Cannot create hsr debugfs directory [ 167.007378][ T7073] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.235777][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.235915][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.418269][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.428018][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.451509][ T5599] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.484848][ T7224] syzkaller0: entered promiscuous mode [ 167.484865][ T7224] syzkaller0: entered allmulticast mode [ 167.507106][ T7228] tipc: Enabled bearer , priority 0 [ 167.560808][ T7223] tipc: Resetting bearer [ 167.571031][ T5605] Bluetooth: hci7: command tx timeout [ 167.620549][ T5599] usb 3-1: Using ep0 maxpacket: 8 [ 167.635444][ T5599] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 167.635473][ T5599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.635492][ T5599] usb 3-1: Product: syz [ 167.635505][ T5599] usb 3-1: Manufacturer: 픷쓴绂競⩛댚此䡙ㄨꎍ옗뉓ᡥ௤榭駖ꈣ赩㌦￳ῃǥ訝잌ᐸ垌込纫৔䌿ｰ屒뤰ꂗ䢢耪ꮦ䤭蜿琚嶈↮ᠭ雮⼌ⶲ콊풗᯴꩑蟙䓒◦㽄䢪䧨㐉红宕峓⑫쎎Ꙍ觤跔鉈ꓢ櫦ᒡ息 [ 167.635529][ T5599] usb 3-1: SerialNumber: syz [ 167.752652][ T7223] tipc: Disabling bearer [ 167.900686][ T5605] Bluetooth: hci6: command tx timeout [ 167.936316][ T5599] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 167.960222][ T5599] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 168.200128][ T5599] usb 3-1: USB disconnect, device number 9 [ 169.189779][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.517711][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.517804][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.518028][ T7163] bridge_slave_0: entered allmulticast mode [ 169.520159][ T7163] bridge_slave_0: entered promiscuous mode [ 169.762779][ T5605] Bluetooth: hci7: command tx timeout [ 170.788708][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.791366][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.791626][ T7163] bridge_slave_1: entered allmulticast mode [ 170.833822][ T7163] bridge_slave_1: entered promiscuous mode [ 171.900598][ T5605] Bluetooth: hci7: command tx timeout [ 171.945726][ T7163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.997375][ T7163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.104353][ T7163] team0: Port device team_slave_0 added [ 172.108637][ T7163] team0: Port device team_slave_1 added [ 172.160601][ T5694] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 172.168470][ T7115] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.221357][ T7115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.278765][ T7115] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.320633][ T5694] usb 1-1: Using ep0 maxpacket: 8 [ 172.328369][ T5694] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 172.328398][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.337912][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 172.400700][ T7115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.402647][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.402660][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.402679][ T7163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.415300][ T7115] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.477962][ T5694] pvrusb2: Hardware description: Terratec Grabster AV400 [ 172.477979][ T5694] pvrusb2: ********** [ 172.477985][ T5694] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 172.477995][ T5694] pvrusb2: Important functionality might not be entirely working. [ 172.478003][ T5694] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 172.478012][ T5694] pvrusb2: ********** [ 172.563477][ T7115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.580292][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.580310][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.580334][ T7163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.622829][ T7115] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.738268][ T7115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.926826][ T7163] hsr_slave_0: entered promiscuous mode [ 172.929705][ T7163] hsr_slave_1: entered promiscuous mode [ 172.935445][ T7163] debugfs: 'hsr0' already exists in 'hsr' [ 172.935472][ T7163] Cannot create hsr debugfs directory [ 172.956308][ T7272] syzkaller0: entered promiscuous mode [ 172.956333][ T7272] syzkaller0: entered allmulticast mode [ 173.214048][ T5694] usb 1-1: USB disconnect, device number 3 [ 173.217730][ T5694] pvrusb2: Device being rendered inoperable [ 173.592348][ T5694] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 173.749333][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.762069][ T5694] usb 1-1: not running at top speed; connect to a high speed hub [ 173.767091][ T5694] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.767123][ T5694] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.767201][ T5694] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 173.827766][ T5694] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 173.827795][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.827813][ T5694] usb 1-1: Product: syz [ 173.827827][ T5694] usb 1-1: Manufacturer: syz [ 173.827840][ T5694] usb 1-1: SerialNumber: syz [ 174.059151][ T7286] lo speed is unknown, defaulting to 1000 [ 174.243803][ T5694] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 174.243822][ T5694] usb 1-1: 1:1 : format type 50 is not supported yet [ 174.249311][ T5694] usb 1-1: 0:2 : does not exist [ 174.296051][ T7073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.606515][ T5694] usb 1-1: USB disconnect, device number 4 [ 174.756033][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.928987][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.077769][ T7115] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.131457][ T7289] lo speed is unknown, defaulting to 1000 [ 176.161366][ T7304] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 176.161380][ T7304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.520'. [ 176.276337][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.276525][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.312893][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.313087][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.437326][ T7163] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 176.486939][ T7163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.501137][ T7163] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 176.550017][ T7163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.567995][ T7163] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 176.640220][ T7163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.662270][ T7163] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 176.722039][ T7163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.897079][ T7073] veth0_vlan: entered promiscuous mode [ 176.999464][ T7073] veth1_vlan: entered promiscuous mode [ 178.872493][ T7073] veth0_macvtap: entered promiscuous mode [ 179.355186][ T7073] veth1_macvtap: entered promiscuous mode [ 179.392818][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.612720][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.648475][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.681141][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.714489][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.718006][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.720102][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.776618][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.806217][ T7163] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.135964][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.137675][ T1420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.290374][ T7302] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.293363][ T7302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.848284][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.848304][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.106455][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.106475][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.117890][ T7115] veth0_vlan: entered promiscuous mode [ 181.198963][ T7115] veth1_vlan: entered promiscuous mode [ 181.476919][ T7115] veth0_macvtap: entered promiscuous mode [ 181.538978][ T7115] veth1_macvtap: entered promiscuous mode [ 181.754066][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.760729][ T7372] syzkaller0: entered promiscuous mode [ 181.761044][ T7372] syzkaller0: entered allmulticast mode [ 181.831379][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.300836][ T66] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.301794][ T66] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.303011][ T66] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.304660][ T66] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.317702][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.074159][ T1420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.074179][ T1420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.484821][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.484839][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.518852][ T7163] veth0_vlan: entered promiscuous mode [ 185.608950][ T7163] veth1_vlan: entered promiscuous mode [ 185.913593][ T7163] veth0_macvtap: entered promiscuous mode [ 185.961395][ T7163] veth1_macvtap: entered promiscuous mode [ 186.410849][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.467068][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.536987][ T66] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.542010][ T66] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.562459][ T66] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.582317][ T241] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.280223][ T7446] bridge_slave_0: default FDB implementation only supports local addresses [ 188.723776][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.723796][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.193825][ T7451] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 189.194680][ T7451] netlink: 'syz.0.547': attribute type 2 has an invalid length. [ 191.900631][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.900649][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.065942][ T7463] tipc: Enabled bearer , priority 0 [ 192.068613][ T7463] syzkaller0: entered promiscuous mode [ 192.068634][ T7463] syzkaller0: entered allmulticast mode [ 192.094517][ T7463] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 192.264204][ T7463] tipc: Resetting bearer [ 192.315132][ T7461] tipc: Resetting bearer [ 192.563097][ T7461] tipc: Disabling bearer [ 192.906577][ T7477] comedi comedi0: dt2815: I/O base address or length out of range [ 193.176895][ T7483] lo speed is unknown, defaulting to 1000 [ 194.305383][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.305456][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.599252][ T7486] siw: device registration error -23 [ 197.032507][ T7518] gfs2: error -5 reading superblock [ 197.045397][ T7522] comedi comedi0: Minor 3 could not be opened [ 197.748914][ T7541] tipc: Started in network mode [ 197.748953][ T7541] tipc: Node identity 1e9979ee608, cluster identity 4711 [ 197.749126][ T7541] tipc: Enabled bearer , priority 0 [ 197.797283][ T7538] syzkaller0: entered promiscuous mode [ 197.797317][ T7538] syzkaller0: entered allmulticast mode [ 199.262640][ T7553] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5591] was attempted by "\x07  ./binderfs/binder0"[7553] [ 199.405029][ T7546] tipc: Resetting bearer [ 199.409209][ T10] tipc: Node number set to 2115598830 [ 200.761044][ T7537] tipc: Resetting bearer [ 202.183351][ T7537] tipc: Disabling bearer [ 202.833619][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 202.887772][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 202.915327][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 202.916772][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 202.918652][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 203.590523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 203.610512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 203.620469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 203.630452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 203.640459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 203.650458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 203.660448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 203.670471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 203.680453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 203.690462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 205.423833][ T5608] Bluetooth: hci8: command tx timeout [ 206.781282][ T7581] lo speed is unknown, defaulting to 1000 [ 207.128512][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 207.128548][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 207.128569][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 207.128592][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 207.491610][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 207.491902][ T59] Bluetooth: hci8: command tx timeout [ 208.134760][ T7643] netlink: 64 bytes leftover after parsing attributes in process `syz.5.605'. [ 208.201353][ T5793] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 208.276010][ T7646] syzkaller1: entered promiscuous mode [ 208.276034][ T7646] syzkaller1: entered allmulticast mode [ 208.352999][ T5793] usb 1-1: Using ep0 maxpacket: 32 [ 208.356426][ T5793] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.356451][ T5793] usb 1-1: config 0 has no interface number 0 [ 208.362987][ T5793] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 208.363015][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.363033][ T5793] usb 1-1: Product: syz [ 208.363045][ T5793] usb 1-1: Manufacturer: syz [ 208.363057][ T5793] usb 1-1: SerialNumber: syz [ 208.448514][ T5793] usb 1-1: config 0 descriptor?? [ 208.486791][ T5793] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 208.486830][ T5793] usb 1-1: selecting invalid altsetting 1 [ 208.486844][ T5793] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 208.760297][ T5793] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.769789][ T5793] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 208.769885][ T5793] usb 1-1: media controller created [ 208.817265][ T5793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.542937][ T5793] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 209.542993][ T5793] zl10353_read_register: readreg error (reg=127, ret==-71) [ 209.574326][ T5601] Bluetooth: hci8: command tx timeout [ 209.688582][ T5793] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 209.985773][ T7683] capability: warning: `syz.2.618' uses deprecated v2 capabilities in a way that may be insecure [ 210.731888][ T5793] usb 1-1: USB disconnect, device number 5 [ 211.653579][ T5601] Bluetooth: hci8: command tx timeout [ 212.151601][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.151796][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.152005][ T7581] bridge_slave_0: entered allmulticast mode [ 212.154828][ T7581] bridge_slave_0: entered promiscuous mode [ 212.157920][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.158118][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.217552][ T7581] bridge_slave_1: entered allmulticast mode [ 212.230049][ T7581] bridge_slave_1: entered promiscuous mode [ 212.352302][ T7581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.433352][ T7581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.829670][ T7581] team0: Port device team_slave_0 added [ 212.846780][ T7581] team0: Port device team_slave_1 added [ 218.111447][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.111464][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.111488][ T7581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.184776][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.184792][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.184817][ T7581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.499741][ T7581] hsr_slave_0: entered promiscuous mode [ 218.513056][ T7581] hsr_slave_1: entered promiscuous mode [ 218.514008][ T7581] debugfs: 'hsr0' already exists in 'hsr' [ 218.514031][ T7581] Cannot create hsr debugfs directory [ 219.347369][ T7787] netlink: 'syz.0.645': attribute type 20 has an invalid length. [ 221.260101][ T7581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 221.485571][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.489697][ T7581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 222.275042][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.477815][ T7581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 222.544683][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.552717][ T7581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 222.650523][ T197] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 222.820567][ T197] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.820591][ T197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 222.820633][ T197] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 222.820654][ T197] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.600523][ T48] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 223.762213][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 223.792613][ T197] usb 8-1: config 0 descriptor?? [ 223.818496][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.818528][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.818569][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 223.818591][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.818976][ T197] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 223.837309][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.842587][ T7825] netlink: 40 bytes leftover after parsing attributes in process `syz.5.658'. [ 223.890381][ T197] dvb-usb: bulk message failed: -22 (3/0) [ 223.938471][ T48] usb 3-1: config 0 descriptor?? [ 224.011282][ T197] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 224.015166][ T197] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 224.015222][ T197] usb 8-1: media controller created [ 224.020999][ T7809] dvb-usb: bulk message failed: -22 (2/0) [ 224.033855][ T48] hub 3-1:0.0: USB hub found [ 224.055971][ T197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.112933][ T197] dvb-usb: bulk message failed: -22 (6/0) [ 224.142474][ T197] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 224.173592][ T48] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 224.177315][ T197] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input5 [ 224.277162][ T197] dvb-usb: schedule remote query interval to 150 msecs. [ 224.277187][ T197] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 224.443410][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 224.443535][ T10] dvb-usb: error while querying for an remote control event. [ 224.532975][ T197] usb 8-1: USB disconnect, device number 2 [ 225.301941][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.694739][ T7581] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.839125][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.839299][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.889780][ T197] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 225.970578][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 225.970698][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 226.723728][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.723906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.956961][ T48] usb 3-1: USB disconnect, device number 10 [ 229.170604][ T5793] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 230.375010][ T5793] usb 8-1: not running at top speed; connect to a high speed hub [ 230.394289][ T5793] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 230.394321][ T5793] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 230.394358][ T5793] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 144, changing to 4 [ 230.446085][ T5793] usb 8-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 230.446112][ T5793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.446128][ T5793] usb 8-1: Product: syz [ 230.446138][ T5793] usb 8-1: Manufacturer: syz [ 230.446150][ T5793] usb 8-1: SerialNumber: syz [ 231.928747][ T5793] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 231.929197][ T5793] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 232.329763][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.765614][ T5793] usb 8-1: USB disconnect, device number 3 [ 235.842731][ T7406] udevd[7406]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.922012][ T7581] veth0_vlan: entered promiscuous mode [ 235.929671][ T7581] veth1_vlan: entered promiscuous mode [ 236.364650][ T7398] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 236.710589][ T7398] usb 6-1: Using ep0 maxpacket: 16 [ 236.713289][ T7398] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 236.713319][ T7398] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 236.716579][ T7398] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 236.716616][ T7398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.716784][ T7398] usb 6-1: Product: syz [ 236.716798][ T7398] usb 6-1: Manufacturer: syz [ 236.716812][ T7398] usb 6-1: SerialNumber: syz [ 236.795467][ T7398] usb 6-1: config 0 descriptor?? [ 236.799271][ T7398] hub 6-1:0.0: bad descriptor, ignoring hub [ 236.799302][ T7398] hub 6-1:0.0: probe with driver hub failed with error -5 [ 236.823907][ T7398] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.258295][ T7581] veth0_macvtap: entered promiscuous mode [ 237.260558][ T5611] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 237.425278][ T7988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.469119][ T5611] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.472481][ T5611] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 237.472508][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 237.472528][ T5611] usb 3-1: Product: syz [ 237.472541][ T5611] usb 3-1: Manufacturer: syz [ 238.301737][ T5611] usb 3-1: selecting invalid altsetting 1 [ 238.301761][ T5611] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 238.301831][ T5611] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22! [ 238.301887][ T5611] speedtch 3-1:1.0: probe with driver speedtch failed with error -22 [ 238.389077][ T5611] usb 3-1: selecting invalid altsetting 1 [ 238.389100][ T5611] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 238.673631][ T7581] veth1_macvtap: entered promiscuous mode [ 238.698660][ T5611] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22! [ 238.698728][ T5611] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 238.788224][ T5611] usb 3-1: USB disconnect, device number 11 [ 238.909492][ T7398] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 238.931930][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.019529][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.039530][ T7398] usb 6-1: USB disconnect, device number 2 [ 239.052129][ T7455] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.043706][ T1916] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.044294][ T1916] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.047511][ T1916] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.404710][ T7400] udevd[7400]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.789344][ T8045] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 245.084924][ T8045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.351373][ T8047] veth3: entered allmulticast mode [ 245.368763][ T8047] bond1: (slave veth3): Enslaving as an active interface with a down link [ 245.633771][ T8042] bond1: entered promiscuous mode [ 245.633800][ T8042] bond1: entered allmulticast mode [ 245.651849][ T8045] macvlan2: entered promiscuous mode [ 245.651875][ T8045] macvlan2: entered allmulticast mode [ 245.664643][ T8045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.851145][ T7702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.851164][ T7702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.882833][ T7702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.882851][ T7702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.929288][ T8090] syzkaller0: entered promiscuous mode [ 250.929312][ T8090] syzkaller0: entered allmulticast mode [ 251.353614][ T8098] netlink: 132 bytes leftover after parsing attributes in process `syz.7.726'. [ 254.380745][ T5611] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 255.032426][ T8122] dvmrp0: entered allmulticast mode [ 255.385050][ T8122] netlink: 'syz.5.732': attribute type 10 has an invalid length. [ 256.928131][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.928203][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.282654][ T5611] usb 6-1: unable to get BOS descriptor or descriptor too short [ 257.283716][ T5611] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 257.283749][ T5611] usb 6-1: can't read configurations, error -71 [ 267.880154][ T7353] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 269.454045][ T7353] usb 9-1: Using ep0 maxpacket: 16 [ 269.458829][ T7353] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 269.458859][ T7353] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 269.809259][ T7353] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.809289][ T7353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.187347][ T7353] usb 9-1: can't set config #1, error -71 [ 271.503142][ T7353] usb 9-1: USB disconnect, device number 2 [ 272.716232][ T8295] netlink: 40 bytes leftover after parsing attributes in process `syz.8.784'. [ 273.176470][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.789'. [ 278.006923][ T8340] netlink: 40 bytes leftover after parsing attributes in process `syz.5.798'. [ 284.168009][ T5596] Bluetooth: hci5: command 0x0406 tx timeout [ 284.173605][ T5601] Bluetooth: hci6: command 0x0406 tx timeout [ 288.532203][ T5605] Bluetooth: hci7: command 0x0406 tx timeout [ 301.389343][ T8540] comedi comedi3: pcl726: I/O base address or length out of range [ 304.937169][ T37] INFO: task syz.1.381:6822 blocked for more than 145 seconds. [ 304.937196][ T37] Tainted: G L syzkaller #0 [ 304.937216][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.937225][ T37] task:syz.1.381 state:D stack:27304 pid:6822 tgid:6817 ppid:5594 task_flags:0x400040 flags:0x00080002 [ 304.937301][ T37] Call Trace: [ 304.937308][ T37] [ 304.937338][ T37] __schedule+0x16dc/0x5500 [ 304.937383][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 304.937418][ T37] ? __pfx_sched_clock_cpu+0x10/0x10 [ 304.937456][ T37] ? __pfx___schedule+0x10/0x10 [ 304.937475][ T37] ? rt_mutex_slowlock_block+0x33a/0x680 [ 304.937521][ T37] rt_mutex_schedule+0x76/0xf0 [ 304.937544][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 304.937544][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 304.937582][ T37] ? rt_mutex_slowlock_block+0x33a/0x680 [ 304.937615][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 304.937647][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 304.937678][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 304.937718][ T37] ? write_threads+0x3a0/0x5a0 [ 304.937751][ T37] ? write_threads+0x3a0/0x5a0 [ 304.937784][ T37] ? write_threads+0x3a0/0x5a0 [ 304.937809][ T37] mutex_lock_nested+0x168/0x1d0 [ 304.937843][ T37] write_threads+0x3a0/0x5a0 [ 304.937870][ T37] ? __might_fault+0xaf/0x130 [ 304.937894][ T37] ? __pfx_write_threads+0x10/0x10 [ 304.937941][ T37] ? _copy_from_user+0x94/0xb0 [ 304.937966][ T37] ? simple_transaction_get+0x130/0x170 [ 304.937991][ T37] nfsctl_transaction_write+0x112/0x160 [ 304.938021][ T37] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 304.938051][ T37] vfs_write+0x29f/0xbb0 [ 304.938085][ T37] ? __pfx_vfs_write+0x10/0x10 [ 304.938113][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.938137][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.938161][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.938184][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 304.938219][ T37] ? fdget_pos+0x252/0x320 [ 304.938249][ T37] ksys_write+0x156/0x270 [ 304.938276][ T37] ? __pfx_ksys_write+0x10/0x10 [ 304.938308][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.938330][ T37] do_syscall_64+0x174/0x580 [ 304.938354][ T37] ? trace_irq_disable+0x3b/0x140 [ 304.938374][ T37] ? clear_bhb_loop+0x40/0x90 [ 304.938399][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.938419][ T37] RIP: 0033:0x7fb6de41de99 [ 304.938444][ T37] RSP: 002b:00007fb6dc655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.938465][ T37] RAX: ffffffffffffffda RBX: 00007fb6de6a6090 RCX: 00007fb6de41de99 [ 304.938480][ T37] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 304.938492][ T37] RBP: 00007fb6de4b3eaf R08: 0000000000000000 R09: 0000000000000000 [ 304.938504][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.938516][ T37] R13: 00007fb6de6a6128 R14: 00007fb6de6a6090 R15: 00007fff22cb5db8 [ 304.938573][ T37] [ 304.938582][ T37] INFO: task syz.1.381:6826 blocked for more than 145 seconds. [ 304.938598][ T37] Tainted: G L syzkaller #0 [ 304.938608][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.938617][ T37] task:syz.1.381 state:D stack:27416 pid:6826 tgid:6817 ppid:5594 task_flags:0x400040 flags:0x00080002 [ 304.938668][ T37] Call Trace: [ 304.938674][ T37] [ 304.938686][ T37] __schedule+0x16dc/0x5500 [ 304.938731][ T37] ? __pfx___schedule+0x10/0x10 [ 304.938767][ T37] rt_mutex_schedule+0x76/0xf0 [ 304.938789][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 304.938832][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 304.938864][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 304.938895][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 304.938936][ T37] ? write_threads+0x3a0/0x5a0 [ 304.938968][ T37] ? write_threads+0x3a0/0x5a0 [ 304.939002][ T37] ? write_threads+0x3a0/0x5a0 [ 304.939028][ T37] mutex_lock_nested+0x168/0x1d0 [ 304.939062][ T37] write_threads+0x3a0/0x5a0 [ 304.939089][ T37] ? __might_fault+0xaf/0x130 [ 304.939112][ T37] ? __pfx_write_threads+0x10/0x10 [ 304.939176][ T37] ? _copy_from_user+0x94/0xb0 [ 304.939222][ T37] ? simple_transaction_get+0x130/0x170 [ 304.939247][ T37] nfsctl_transaction_write+0x112/0x160 [ 304.939277][ T37] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 304.939305][ T37] vfs_write+0x29f/0xbb0 [ 304.939337][ T37] ? __pfx_vfs_write+0x10/0x10 [ 304.939365][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.939388][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.939411][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.939434][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 304.939461][ T37] ? fdget_pos+0x252/0x320 [ 304.939491][ T37] ksys_write+0x156/0x270 [ 304.939519][ T37] ? __pfx_ksys_write+0x10/0x10 [ 304.939553][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.939575][ T37] do_syscall_64+0x174/0x580 [ 304.939598][ T37] ? trace_irq_disable+0x3b/0x140 [ 304.939617][ T37] ? clear_bhb_loop+0x40/0x90 [ 304.939642][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.939661][ T37] RIP: 0033:0x7fb6de41de99 [ 304.939678][ T37] RSP: 002b:00007fb6dc634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.939697][ T37] RAX: ffffffffffffffda RBX: 00007fb6de6a6180 RCX: 00007fb6de41de99 [ 304.939711][ T37] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 304.939723][ T37] RBP: 00007fb6de4b3eaf R08: 0000000000000000 R09: 0000000000000000 [ 304.939735][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.939747][ T37] R13: 00007fb6de6a6218 R14: 00007fb6de6a6180 R15: 00007fff22cb5db8 [ 304.939779][ T37] [ 304.939787][ T37] INFO: task syz.4.410:6898 blocked for more than 145 seconds. [ 304.939803][ T37] Tainted: G L syzkaller #0 [ 304.939813][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.939821][ T37] task:syz.4.410 state:D stack:27304 pid:6898 tgid:6897 ppid:5593 task_flags:0x400140 flags:0x00080002 [ 304.939872][ T37] Call Trace: [ 304.939878][ T37] [ 304.939889][ T37] __schedule+0x16dc/0x5500 [ 304.939937][ T37] ? __pfx___schedule+0x10/0x10 [ 304.939974][ T37] rt_mutex_schedule+0x76/0xf0 [ 304.939996][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 304.940041][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 304.940073][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 304.940104][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 304.940145][ T37] ? write_versions+0x95/0xe30 [ 304.940178][ T37] ? write_versions+0x95/0xe30 [ 304.940218][ T37] ? write_versions+0x95/0xe30 [ 304.940244][ T37] mutex_lock_nested+0x168/0x1d0 [ 304.940278][ T37] write_versions+0x95/0xe30 [ 304.940313][ T37] ? __pfx_write_versions+0x10/0x10 [ 304.940351][ T37] ? _copy_from_user+0x94/0xb0 [ 304.945964][ T37] ? simple_transaction_get+0x130/0x170 [ 304.946002][ T37] nfsctl_transaction_write+0x112/0x160 [ 304.946035][ T37] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 304.946066][ T37] vfs_write+0x29f/0xbb0 [ 304.946114][ T37] ? __pfx_vfs_write+0x10/0x10 [ 304.946143][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.946168][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.946193][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.947699][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 304.947734][ T37] ? fdget_pos+0x252/0x320 [ 304.947765][ T37] ksys_write+0x156/0x270 [ 304.947801][ T37] ? __pfx_ksys_write+0x10/0x10 [ 304.947835][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.947869][ T37] do_syscall_64+0x174/0x580 [ 304.947894][ T37] ? trace_irq_disable+0x3b/0x140 [ 304.947915][ T37] ? clear_bhb_loop+0x40/0x90 [ 304.947940][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.947960][ T37] RIP: 0033:0x7f2040e8de99 [ 304.947978][ T37] RSP: 002b:00007f203f0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.948000][ T37] RAX: ffffffffffffffda RBX: 00007f2041115fa0 RCX: 00007f2040e8de99 [ 304.948015][ T37] RDX: 0000000000000003 RSI: 0000200000000140 RDI: 0000000000000004 [ 304.948028][ T37] RBP: 00007f2040f23eaf R08: 0000000000000000 R09: 0000000000000000 [ 304.948041][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.948053][ T37] R13: 00007f2041116038 R14: 00007f2041115fa0 R15: 00007fff7ee255d8 [ 304.948086][ T37] [ 304.948095][ T37] INFO: task syz.4.410:6899 blocked for more than 145 seconds. [ 304.948113][ T37] Tainted: G L syzkaller #0 [ 304.948124][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.948133][ T37] task:syz.4.410 state:D stack:26320 pid:6899 tgid:6897 ppid:5593 task_flags:0x400040 flags:0x00080002 [ 304.948187][ T37] Call Trace: [ 304.948193][ T37] [ 304.948204][ T37] __schedule+0x16dc/0x5500 [ 304.948256][ T37] ? __pfx___schedule+0x10/0x10 [ 304.948291][ T37] rt_mutex_schedule+0x76/0xf0 [ 304.948313][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 304.948356][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 304.948389][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 304.948420][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 304.948462][ T37] ? write_ports+0xb5/0xd20 [ 304.948497][ T37] ? write_ports+0xb5/0xd20 [ 304.948531][ T37] ? write_ports+0xb5/0xd20 [ 304.948557][ T37] mutex_lock_nested+0x168/0x1d0 [ 304.948593][ T37] write_ports+0xb5/0xd20 [ 304.948625][ T37] ? __pfx_write_ports+0x10/0x10 [ 304.948654][ T37] ? __might_fault+0xaf/0x130 [ 304.948696][ T37] ? _copy_from_user+0x94/0xb0 [ 304.948722][ T37] ? simple_transaction_get+0x130/0x170 [ 304.948747][ T37] nfsctl_transaction_write+0x112/0x160 [ 304.948784][ T37] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 304.948813][ T37] vfs_write+0x29f/0xbb0 [ 304.948845][ T37] ? __pfx_vfs_write+0x10/0x10 [ 304.948873][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.948898][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.948922][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.948946][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 304.948975][ T37] ? fdget_pos+0x252/0x320 [ 304.949005][ T37] ksys_write+0x156/0x270 [ 304.949033][ T37] ? __pfx_ksys_write+0x10/0x10 [ 304.949067][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.953661][ T37] do_syscall_64+0x174/0x580 [ 304.953693][ T37] ? trace_irq_disable+0x3b/0x140 [ 304.953715][ T37] ? clear_bhb_loop+0x40/0x90 [ 304.953739][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.953759][ T37] RIP: 0033:0x7f2040e8de99 [ 304.953785][ T37] RSP: 002b:00007f203f0c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.953807][ T37] RAX: ffffffffffffffda RBX: 00007f2041116090 RCX: 00007f2040e8de99 [ 304.953822][ T37] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000005 [ 304.953834][ T37] RBP: 00007f2040f23eaf R08: 0000000000000000 R09: 0000000000000000 [ 304.953847][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.953870][ T37] R13: 00007f2041116128 R14: 00007f2041116090 R15: 00007fff7ee255d8 [ 304.953903][ T37] [ 304.953912][ T37] INFO: task syz.4.410:6900 blocked for more than 145 seconds. [ 304.953930][ T37] Tainted: G L syzkaller #0 [ 304.953940][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.953949][ T37] task:syz.4.410 state:D stack:27304 pid:6900 tgid:6897 ppid:5593 task_flags:0x400040 flags:0x00080002 [ 304.954002][ T37] Call Trace: [ 304.954009][ T37] [ 304.954020][ T37] __schedule+0x16dc/0x5500 [ 304.954071][ T37] ? __pfx___schedule+0x10/0x10 [ 304.954133][ T37] rt_mutex_schedule+0x76/0xf0 [ 304.954158][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 304.954202][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 304.954234][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 304.954266][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 304.954306][ T37] ? write_threads+0x3a0/0x5a0 [ 304.954340][ T37] ? write_threads+0x3a0/0x5a0 [ 304.954374][ T37] ? write_threads+0x3a0/0x5a0 [ 304.954401][ T37] mutex_lock_nested+0x168/0x1d0 [ 304.954436][ T37] write_threads+0x3a0/0x5a0 [ 304.954464][ T37] ? __might_fault+0xaf/0x130 [ 304.954488][ T37] ? __pfx_write_threads+0x10/0x10 [ 304.954535][ T37] ? _copy_from_user+0x94/0xb0 [ 304.954559][ T37] ? simple_transaction_get+0x130/0x170 [ 304.954585][ T37] nfsctl_transaction_write+0x112/0x160 [ 304.954616][ T37] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 304.954645][ T37] vfs_write+0x29f/0xbb0 [ 304.954679][ T37] ? __pfx_vfs_write+0x10/0x10 [ 304.954705][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.954730][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.954754][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.954783][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 304.954811][ T37] ? fdget_pos+0x252/0x320 [ 304.954842][ T37] ksys_write+0x156/0x270 [ 304.954870][ T37] ? __pfx_ksys_write+0x10/0x10 [ 304.954904][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.954926][ T37] do_syscall_64+0x174/0x580 [ 304.954949][ T37] ? trace_irq_disable+0x3b/0x140 [ 304.954969][ T37] ? clear_bhb_loop+0x40/0x90 [ 304.954994][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.955013][ T37] RIP: 0033:0x7f2040e8de99 [ 304.955030][ T37] RSP: 002b:00007f203f0a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.955049][ T37] RAX: ffffffffffffffda RBX: 00007f2041116180 RCX: 00007f2040e8de99 [ 304.955064][ T37] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000006 [ 304.955077][ T37] RBP: 00007f2040f23eaf R08: 0000000000000000 R09: 0000000000000000 [ 304.955089][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.955101][ T37] R13: 00007f2041116218 R14: 00007f2041116180 R15: 00007fff7ee255d8 [ 304.955134][ T37] [ 304.955142][ T37] INFO: task syz.3.437:6974 blocked for more than 145 seconds. [ 304.955158][ T37] Tainted: G L syzkaller #0 [ 304.955169][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.955177][ T37] task:syz.3.437 state:D stack:27304 pid:6974 tgid:6973 ppid:5597 task_flags:0x400140 flags:0x00080002 [ 304.959590][ T37] Call Trace: [ 304.959601][ T37] [ 304.959614][ T37] __schedule+0x16dc/0x5500 [ 304.959670][ T37] ? __pfx___schedule+0x10/0x10 [ 304.959707][ T37] rt_mutex_schedule+0x76/0xf0 [ 304.959731][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 304.959784][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 304.959817][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 304.959849][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 304.959890][ T37] ? write_ports+0xb5/0xd20 [ 304.959925][ T37] ? write_ports+0xb5/0xd20 [ 304.959959][ T37] ? write_ports+0xb5/0xd20 [ 304.959985][ T37] mutex_lock_nested+0x168/0x1d0 [ 304.960020][ T37] write_ports+0xb5/0xd20 [ 304.960051][ T37] ? __pfx_write_ports+0x10/0x10 [ 304.960079][ T37] ? __might_fault+0xaf/0x130 [ 304.960120][ T37] ? _copy_from_user+0x94/0xb0 [ 304.960145][ T37] ? simple_transaction_get+0x130/0x170 [ 304.960171][ T37] nfsctl_transaction_write+0x112/0x160 [ 304.960202][ T37] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 304.960232][ T37] vfs_write+0x29f/0xbb0 [ 304.960266][ T37] ? __pfx_vfs_write+0x10/0x10 [ 304.960294][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.960318][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.960342][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.960774][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 304.960805][ T37] ? fdget_pos+0x252/0x320 [ 304.960836][ T37] ksys_write+0x156/0x270 [ 304.960864][ T37] ? __pfx_ksys_write+0x10/0x10 [ 304.960899][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.960921][ T37] do_syscall_64+0x174/0x580 [ 304.960945][ T37] ? trace_irq_disable+0x3b/0x140 [ 304.960965][ T37] ? clear_bhb_loop+0x40/0x90 [ 304.960990][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.961010][ T37] RIP: 0033:0x7f25b58ede99 [ 304.961027][ T37] RSP: 002b:00007f25b3b46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.961053][ T37] RAX: ffffffffffffffda RBX: 00007f25b5b75fa0 RCX: 00007f25b58ede99 [ 304.961068][ T37] RDX: 0000000000000009 RSI: 0000200000000100 RDI: 0000000000000003 [ 304.961079][ T37] RBP: 00007f25b5983eaf R08: 0000000000000000 R09: 0000000000000000 [ 304.961091][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.961103][ T37] R13: 00007f25b5b76038 R14: 00007f25b5b75fa0 R15: 00007ffd83db0b28 [ 304.961147][ T37] [ 304.961214][ T37] [ 304.961214][ T37] Showing all locks held in the system: [ 304.961228][ T37] 7 locks held by ktimers/1/29: [ 304.961241][ T37] 1 lock held by khungtaskd/37: [ 304.961251][ T37] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 304.961306][ T37] 2 locks held by kworker/u8:4/66: [ 304.961317][ T37] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 304.961369][ T37] #1: ffffc9000151fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 305.750862][ T37] 2 locks held by getty/5347: [ 305.750878][ T37] #0: ffff8880287360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 305.750936][ T37] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 305.750992][ T37] 1 lock held by syz-executor/5591: [ 305.751003][ T37] #0: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xdc/0x720 [ 305.751046][ T37] 1 lock held by syz-executor/5592: [ 305.751057][ T37] #0: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xdc/0x720 [ 305.751107][ T37] 3 locks held by syz.1.381/6818: [ 305.751117][ T37] #0: ffff88803d960928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.751162][ T37] #1: ffff888030f98500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.751214][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 305.751267][ T37] 3 locks held by syz.1.381/6822: [ 305.751276][ T37] #0: ffff88803d926328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.751321][ T37] #1: ffff888030f98500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.751372][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 305.751423][ T37] 3 locks held by syz.1.381/6826: [ 305.751433][ T37] #0: ffff888033c44f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.751477][ T37] #1: ffff888030f98500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.751527][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 305.751578][ T37] 3 locks held by syz.4.410/6898: [ 305.751588][ T37] #0: ffff88802969cf28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.751639][ T37] #1: ffff88806049a500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.751690][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 305.751741][ T37] 3 locks held by syz.4.410/6899: [ 305.751751][ T37] #0: ffff88802833bf28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.751810][ T37] #1: ffff88806049a500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.751861][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 305.751912][ T37] 3 locks held by syz.4.410/6900: [ 305.751921][ T37] #0: ffff88803a95b128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.755014][ T37] #1: ffff88806049a500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.755079][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 305.755133][ T37] 3 locks held by syz.3.437/6974: [ 305.755144][ T37] #0: ffff88803c945928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.755189][ T37] #1: ffff8880382e8500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.755240][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 305.755294][ T37] 3 locks held by syz-executor/7163: [ 305.755308][ T37] 2 locks held by kworker/u8:14/7302: [ 305.755344][ T37] 3 locks held by syz.6.481/7428: [ 305.755355][ T37] #0: ffff8880332fcf28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.755404][ T37] #1: ffff88803ad7c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.755455][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 305.755506][ T37] 3 locks held by syz.6.481/7429: [ 305.755516][ T37] #0: ffff88802b8e6f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.755561][ T37] #1: ffff88803ad7c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.755609][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 305.755668][ T37] 3 locks held by syz.6.481/7430: [ 305.755678][ T37] #0: ffff88803bd46328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 305.755721][ T37] #1: ffff88803ad7c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 305.755772][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 305.755822][ T37] 1 lock held by syz-executor/7581: [ 305.755832][ T37] #0: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xdc/0x720 [ 305.755878][ T37] 2 locks held by kworker/u8:19/8019: [ 305.755889][ T37] 1 lock held by syz.7.862/8552: [ 305.755898][ T37] #0: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x7c8/0x2360 [ 305.755939][ T37] 1 lock held by syz.7.862/8560: [ 305.755949][ T37] #0: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x7c8/0x2360 [ 305.755990][ T37] 6 locks held by syz.7.862/8562: [ 305.756001][ T37] 1 lock held by syz.5.861/8554: [ 305.756011][ T37] #0: ffff88803783ba30 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 305.756062][ T37] 2 locks held by syz.5.861/8563: [ 305.756073][ T37] 1 lock held by syz.8.866/8569: [ 305.756083][ T37] #0: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x7c8/0x2360 [ 305.756124][ T37] 2 locks held by syz.2.868/8575: [ 305.756134][ T37] #0: ffffffff8e203270 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x288e/0x4390 [ 305.756182][ T37] #1: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: copy_process+0x2994/0x4390 [ 305.756231][ T37] [ 305.756235][ T37] ============================================= [ 305.756235][ T37] [ 305.756258][ T37] NMI backtrace for cpu 0 [ 305.756277][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.756308][ T37] Tainted: [L]=SOFTLOCKUP [ 305.756314][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.756325][ T37] Call Trace: [ 305.756332][ T37] [ 305.756339][ T37] dump_stack_lvl+0xe8/0x150 [ 305.756369][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 305.756389][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 305.756421][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 305.756470][ T37] sys_info+0x135/0x170 [ 305.756496][ T37] watchdog+0xfd7/0x1030 [ 305.756521][ T37] ? watchdog+0x1c7/0x1030 [ 305.756544][ T37] kthread+0x388/0x470 [ 305.756573][ T37] ? __pfx_watchdog+0x10/0x10 [ 305.756589][ T37] ? __pfx_kthread+0x10/0x10 [ 305.756626][ T37] ret_from_fork+0x514/0xb70 [ 305.756658][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 305.756687][ T37] ? __switch_to+0xc89/0x1420 [ 305.756715][ T37] ? __pfx_kthread+0x10/0x10 [ 305.756744][ T37] ret_from_fork_asm+0x1a/0x30 [ 305.756777][ T37] [ 305.756789][ T37] Sending NMI from CPU 0 to CPUs 1: [ 305.756814][ C1] NMI backtrace for cpu 1 [ 305.756830][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.756852][ C1] Tainted: [L]=SOFTLOCKUP [ 305.756858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.756868][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 305.756896][ C1] Code: e8 ae bd 6f fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 2f d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 305.756910][ C1] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 305.756925][ C1] RAX: 1ffffffff33c9500 RBX: 00000000000003fd RCX: 0000000000000000 [ 305.756937][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 305.756947][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.756958][ C1] R10: dffffc0000000000 R11: ffffffff85560cf0 R12: dffffc0000000000 [ 305.756970][ C1] R13: 0000000000000000 R14: ffffffff99e4ad40 R15: 0000000000000000 [ 305.756982][ C1] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 305.756996][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.757007][ C1] CR2: 0000200000000140 CR3: 000000006dc1a000 CR4: 00000000003526f0 [ 305.757023][ C1] Call Trace: [ 305.757029][ C1] [ 305.757036][ C1] wait_for_lsr+0x190/0x300 [ 305.757063][ C1] serial8250_console_write+0x113a/0x1b40 [ 305.757093][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 305.757122][ C1] ? console_flush_one_record+0xfa/0xb50 [ 305.757143][ C1] ? console_flush_one_record+0x472/0xb50 [ 305.757162][ C1] console_flush_one_record+0x642/0xb50 [ 305.757181][ C1] ? console_flush_one_record+0xfa/0xb50 [ 305.757200][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 305.757218][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 305.757241][ C1] legacy_kthread_func+0x1b6/0x250 [ 305.757259][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 305.757275][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 305.757302][ C1] ? __kthread_parkme+0x71/0x1f0 [ 305.757326][ C1] ? __kthread_parkme+0x196/0x1f0 [ 305.757350][ C1] kthread+0x388/0x470 [ 305.757375][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 305.757390][ C1] ? __pfx_kthread+0x10/0x10 [ 305.757416][ C1] ret_from_fork+0x514/0xb70 [ 305.757443][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 305.757468][ C1] ? __switch_to+0xc89/0x1420 [ 305.757491][ C1] ? __pfx_kthread+0x10/0x10 [ 305.757516][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.757541][ C1] [ 305.757817][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 305.757833][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.757858][ T37] Tainted: [L]=SOFTLOCKUP [ 305.757864][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.757874][ T37] Call Trace: [ 305.757881][ T37] [ 305.757888][ T37] vpanic+0x56c/0xa60 [ 305.757910][ T37] ? __pfx_vpanic+0x10/0x10 [ 305.757938][ T37] panic+0xc5/0xd0 [ 305.757956][ T37] ? __pfx_panic+0x10/0x10 [ 305.757976][ T37] ? wq_watchdog_touch+0xf9/0x160 [ 305.758000][ T37] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 305.758033][ T37] watchdog+0x1030/0x1030 [ 305.758058][ T37] ? watchdog+0x1c7/0x1030 [ 305.758081][ T37] kthread+0x388/0x470 [ 305.758109][ T37] ? __pfx_watchdog+0x10/0x10 [ 305.758124][ T37] ? __pfx_kthread+0x10/0x10 [ 305.758153][ T37] ret_from_fork+0x514/0xb70 [ 305.758184][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 305.758213][ T37] ? __switch_to+0xc89/0x1420 [ 305.758240][ T37] ? __pfx_kthread+0x10/0x10 [ 305.758270][ T37] ret_from_fork_asm+0x1a/0x30 [ 305.758301][ T37] [ 305.758542][ T37] Kernel Offset: disabled