last executing test programs: 2m12.838145685s ago: executing program 32 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='2\x00', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="000000010000000000000002000186a30000000300000000deadbeef00"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) recvfrom$inet(r2, &(0x7f0000000300), 0x100, 0x40, 0x0, 0x0) 2m10.004032523s ago: executing program 33 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='udp 2049\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\x00', 0x2) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r2, &(0x7f0000000400)='hello\x00', 0x5, 0x0, &(0x7f0000000500)={0x2, 0x8008, @loopback}, 0x10) 2m9.064348686s ago: executing program 34 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x7f08, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 2m8.067522176s ago: executing program 35 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2 -3\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) 1m54.046356022s ago: executing program 36 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) 1m48.573670334s ago: executing program 37 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='2049\n', 0x5) 1m47.51038576s ago: executing program 38 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x8008, @loopback}, 0x10) sendto(r3, &(0x7f0000000280)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m46.562041382s ago: executing program 39 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x299, @loopback}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000120)={0x2, 0x29a, @loopback}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x29b, @loopback}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000160)={0x2, 0x29c, @loopback}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='tcp 2049\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='1\x00', 0x1) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m46.519340024s ago: executing program 40 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='./rec\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r2, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='3\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='8\n\x00', 0x2) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m26.829027922s ago: executing program 41 (id=462): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000040)={0x2, 0x108, @loopback}, 0x10) listen(r1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='tcp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\n\x00', 0x2) 1m24.588093408s ago: executing program 42 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r2) r3 = socket(0x2, 0x1, 0x6) connect(r3, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10) write(r3, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r3, &(0x7f0000000800)=""/100, 0x100) close(r3) 1m22.535111073s ago: executing program 43 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)="013030303030302032303030303030303030203020302030206b726235200030303030303066666666666666663030303030303030303030303030303031323030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303020636c69656e740a", 0x8a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74) 1m19.987891163s ago: executing program 44 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x204e, @loopback}, 0x10) write(r4, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x204e, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m19.677458774s ago: executing program 45 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)="013030303030302032303030303030303030203020302030206b726235200030303030303066666666666666663030303030303030303030303030303031323030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303020636c69656e740a", 0x96) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74) 1m11.058949188s ago: executing program 3 (id=575): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) 1m10.878544941s ago: executing program 3 (id=577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x48}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r2, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) 1m10.702589492s ago: executing program 3 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) close(r4) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r6, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m3.436831121s ago: executing program 46 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='3\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='4\n\x00', 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) 57.458364621s ago: executing program 47 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000800)=""/256, 0x100) 55.691417435s ago: executing program 48 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) close(r4) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r6, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 53.322734277s ago: executing program 49 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1\n', 0x2) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="123456780000000000000002000186a30000000300000001000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='nfsd 127.0.0.1 9999999 domain\n', 0x1d) close(r2) 51.480393721s ago: executing program 1 (id=697): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/20/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/21/smp_affinity\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/22/smp_affinity\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/23/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/24/smp_affinity\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/25/smp_affinity\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/26/smp_affinity\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/27/smp_affinity\x00', 0x1, 0x0) write(r8, &(0x7f0000000300)='1\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/28/smp_affinity\x00', 0x1, 0x0) write(r9, &(0x7f0000000300)='1\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0) write(r10, &(0x7f0000000300)='1\x00', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/30/smp_affinity\x00', 0x1, 0x0) write(r11, &(0x7f0000000300)='1\x00', 0x2) 51.214901086s ago: executing program 1 (id=699): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x1388, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r1, &(0x7f0000000100)=@in={0x2, 0x1388, @loopback}, 0x10) accept(r0, 0x0, 0x0) 50.286782752s ago: executing program 1 (id=702): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000040)={'syzkaller0\x00', @ifru_hwaddr=@random="0242ac110002"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000000000000000001142420300"/33], 0x0) 50.02276008s ago: executing program 1 (id=703): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) (async) r1 = accept$inet(r0, 0x0, 0x0) close(r0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) read(r1, &(0x7f0000000100), 0x70) write(r1, &(0x7f0000000300), 0x100) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 49.115320082s ago: executing program 1 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='8\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000200)="000000020000000000000002000186a30000000400"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000200)="000000030000000000000002000186a3000000030000000100"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 47.450947004s ago: executing program 2 (id=717): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0), 0x3a0) 47.450600298s ago: executing program 2 (id=718): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000010)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x2}, 0x10) syz_emit_ethernet(0x1b, &(0x7f0000000020)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x3, 'c'}}}}}, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000040)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x2, "0002"}}}}}, 0x0) 47.377619762s ago: executing program 2 (id=720): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @empty}}, 0x24) sendto$rxrpc(r0, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) 47.294200835s ago: executing program 2 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x30, 0x30, 0x405, 0x0, 0x0, {}, [{0x14, 0x1, [@m_gact={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x0, 0x1}]}}}]}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}]}]}, 0x30}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/200, 0x200}], 0x1}, 0x0) 47.2645485s ago: executing program 2 (id=722): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000300)=[@sndrcv={0x20, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x20}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) recvfrom(r2, &(0x7f0000000500), 0x100, 0x0, 0x0, 0x0) 46.388377395s ago: executing program 2 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async) close(r3) 40.41173973s ago: executing program 50 (id=671): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-3\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10) sendto(r4, &(0x7f00000002c0)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 37.582606943s ago: executing program 0 (id=763): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x8000) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x18, 0x110, 0x2, "0100000000000000"}], 0x30}, 0x0) shutdown(r0, 0x2) close(r0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 37.366378345s ago: executing program 0 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./dummy_mnt\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mnt/module/lockd/parameters/nlm_register\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0\n', 0x2) close(r0) 37.289150209s ago: executing program 0 (id=766): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.198928227s ago: executing program 0 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='1\x00', 0x1) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='1\x00', 0x1) close(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 37.153154993s ago: executing program 0 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x1234, 0x4e20, 0x100, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x11223344}]}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x0, 0x0}, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x1234, 0x4e20, r2, r3, 0x0, 0x0, 0xd, 0x10, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x11223345, 0x11223344}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x1122334455667788, [0x8877665544332211]}]}}}}}}}, 0x0) 37.093593196s ago: executing program 0 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./nfs_mnt\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 34.442453296s ago: executing program 51 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='/bin/true\n\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='5\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='1\n\x00', 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 33.407380634s ago: executing program 52 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='8\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000200)="000000020000000000000002000186a30000000400"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000200)="000000030000000000000002000186a3000000030000000100"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 31.323651843s ago: executing program 53 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async) close(r3) 25.692642176s ago: executing program 3 (id=790): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24, &(0x7f0000000100)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "f0debc9a78563412"}], 0x18}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4, 0x10}], 0x1, &(0x7f0000000600)=""/4, 0x100}, 0x40) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001000000f0debc9a785634121400000000000000100100000200000001000000"], 0x2c}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) 25.603057641s ago: executing program 4 (id=829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000100000000000000000000000000000000001c0012800b00010076657468300000000c000280140001000b0001007665746831000000"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001000000000000000000000000000100000001000000100003800b0001007665746830000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001000000000000000000000000000100000001000000100003800b0001007665746831000000"], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x28}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}, 0x1000002}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x8b88) bind$packet(r4, &(0x7f0000000100)={0x11, 0x8b88, 0x3, 0x1, 0x0, 0x6, @broadcast}, 0x14) recvfrom(r4, &(0x7f0000000800)=""/512, 0x200, 0x40, 0x0, 0x0) 25.416639919s ago: executing program 4 (id=830): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='hello', 0x5}], 0x1, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000700)={0x2, 0x4321, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000800)="00000000000000000000000100000000000000010202000001000000000000000000000100000000000000000100", 0x2a, 0x0, &(0x7f0000000900)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 25.262895836s ago: executing program 3 (id=832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x10, 0x1, 0x0, 0x0, {0x3}, [@generic='ovs_datapath\x00']}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x10, 0x1, 0x0, 0x0, {0x3}, [@generic='ovs_vport\x00']}, 0x20}}, 0x0) 25.058875622s ago: executing program 4 (id=835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)}}, 0x0) 25.05855687s ago: executing program 3 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='+tcp 2049\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\n\x00', 0x2) 24.996068716s ago: executing program 4 (id=837): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n\x00', 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) accept(r2, 0x0, 0x0) write(r3, &(0x7f0000000600)="0123456789", 0xa) 24.916945931s ago: executing program 4 (id=838): r0 = socket$netlink(0x10, 0x80003, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x18, 0x605, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x3}, [@RTA_GATEWAY={0x8, 0x5, @loopback}]}, 0x24}}, 0x0) 24.842789236s ago: executing program 4 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 22.455267949s ago: executing program 5 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x2}, 0x1c) (async) 21.63496836s ago: executing program 5 (id=856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0x60, "00112233445566778899aabbccddeeff00112233"}}]}, 0x150}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @loopback, @loopback, {[], "04040000000012340000000100112233445566778899aabb"}}}}}, 0x0) 21.609852282s ago: executing program 54 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./nfs_mnt\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 21.563111887s ago: executing program 5 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="54010000240005060100"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000300102800800010072656400240102801c000100e803000064000000f40100000a0a0a00000004010200", @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32]}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x301, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 21.510644676s ago: executing program 5 (id=859): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs/cache/nfs_dns/flush\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) 21.416556508s ago: executing program 5 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n\x00', 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) accept(r2, 0x0, 0x0) write(r3, &(0x7f0000000600)="0123456789", 0xa) 21.29902493s ago: executing program 5 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 15.750769054s ago: executing program 6 (id=884): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) syz_emit_ethernet(0x13, &(0x7f0000000040)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x2, "0202", 'S'}}}}}, 0x0) 15.75052377s ago: executing program 6 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_LINK={0x8, 0x5, 0x1}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x2}}]}}}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x34, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}}, 0x0) syz_emit_ethernet(0x28, &(0x7f0000000240)={@random="0180c2000021", @random="fe1234567890", @void, {@generic={0x8022, "42420300000101040100"}}}, 0x0) 15.688181623s ago: executing program 6 (id=886): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x100, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@private=0xa010101, 0x12345678, 0x32}, @in=@private=0xa010101, {}, {}, {}, 0x0, 0x0, 0x2}}, 0x100}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="a00000002900010000000000000000000a010101000000000000000000000000785634120000000000000000020032000a0101020000000000000000000000000a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0xa0}], 0x1}, 0x0) 15.63081946s ago: executing program 6 (id=887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='mon_addr\x00', &(0x7f0000000180)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4, 0x0, 0x0, 0x0) 14.651941574s ago: executing program 6 (id=891): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @random="525400123456"}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @random="525400123456"}, 0x10) 13.746714645s ago: executing program 6 (id=893): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./nfsd\x00', &(0x7f0000000540)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000780)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f00000007c0)={0x2}, 0x0) read(r1, &(0x7f0000000800)=""/1000, 0x3e8) read(r1, &(0x7f0000000c00)=""/1000, 0x3e8) 12.828106865s ago: executing program 8 (id=898): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n\x00', 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) accept(r2, 0x0, 0x0) write(r3, &(0x7f0000000600)="0123456789", 0xa) 11.95768709s ago: executing program 8 (id=899): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000500)='\x00'/16, 0x10, 0x0, &(0x7f0000000600)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 11.878951777s ago: executing program 8 (id=900): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) sendto$inet6(r0, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000100)={0xa, 0x1f40, 0x0, @mcast2}, 0x1c) 11.878555364s ago: executing program 8 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x10000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x8}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x10000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x8}, {0x10, 0x2, [@TCA_GRED_PARMS={0x2c, 0x1, {0x1000, 0x10, 0x20}}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 11.822565603s ago: executing program 8 (id=902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x10, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000200)={0x11, 0x3, r3}, 0x14) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 11.599477657s ago: executing program 8 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x80) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000800)=""/256, 0x100) 9.585310312s ago: executing program 55 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 9.542772112s ago: executing program 56 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='+tcp 2049\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\n\x00', 0x2) 5.84453016s ago: executing program 57 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 4.97491172s ago: executing program 7 (id=910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x3}, {0x5, 0xa}}, [@filter_kind_options=@f_u32={{0x4}, {0x54, 0x2, [@TCA_U32_ACT={0x50, 0x1, [@m_sample={0x4c, 0x1, 0x0, 0x0, {{0xe}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x1, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x3, 0x20000000, 0x1, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x5}}}]}]}}]}, 0x90}}, 0x0) write(r0, &(0x7f0000000400)="4500001c00000000401176cc0a0000010a0000021234123400080000", 0x1c) 3.353795038s ago: executing program 7 (id=915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x1, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x1, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x2, 0x1, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 3.126727327s ago: executing program 7 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0) 3.076895113s ago: executing program 9 (id=918): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="180200"/12, @ANYRES32=r2, @ANYBLOB="b701000000000000b70300000000000085000000330000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340)="01000000", &(0x7f0000000380)=@tcp=r1}, 0x20) write(r1, &(0x7f0000000700)='hello world\x00', 0xc) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) 3.021296466s ago: executing program 7 (id=919): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) 2.195799035s ago: executing program 9 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 2.117862241s ago: executing program 7 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/100, 0x64) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x20, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x20}}, 0x0) 1.963601097s ago: executing program 7 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 1.851883695s ago: executing program 9 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r2, &(0x7f0000000100)="00003c200000000000000000010000020100000200"/60, 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0000282200000001000000000100000200000000000000000100000200"/40, 0x28, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000500)=@tipc=@name={0x1e, 0x1, 0x0, {{0x3e8, 0x1}, 0x1000002}}, 0x10) 1.757788213s ago: executing program 9 (id=924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x208, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='mountport\x00', &(0x7f0000000300)='2049\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) accept4(r0, &(0x7f0000000400)=@in={0x2, 0x0, @loopback}, &(0x7f0000000500)=0x10, 0x0) 1.029238487s ago: executing program 1 (id=906): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) 878.135556ms ago: executing program 9 (id=925): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x1ff) r1 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000600)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='addr\x00', &(0x7f0000000800)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='nfsvers\x00', &(0x7f0000000a00)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b00)='proto\x00', &(0x7f0000000c00)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000d00)='port\x00', &(0x7f0000000e00)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000f00)='mountport\x00', &(0x7f0000001000)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='mountproto\x00', &(0x7f0000001200)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000001300)='ro\x00', 0x0, 0x0) syz_clone(0x511, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000500)='127.0.0.1:/export\x00', &(0x7f0000001400)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,nfsvers=3,proto=tcp,port=2049,mountport=2049,nolock\x00']) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000100)=""/256, 0x100, 0x0, 0x0, 0x0) getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000108), &(0x7f0000000120)=0x4) write(r2, &(0x7f0000000100), 0x40) recvfrom$inet(r2, &(0x7f0000000100)=""/256, 0x100, 0x0, 0x0, 0x0) getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000108), &(0x7f0000000120)=0x4) write(r2, &(0x7f0000000100), 0x40) recvfrom$inet(r2, &(0x7f0000000100)=""/256, 0x100, 0x0, 0x0, 0x0) getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000108), &(0x7f0000000120)=0x4) write(r2, &(0x7f0000000100), 0x40) r3 = fsmount(r1, 0x0, 0x0) move_mount(r3, &(0x7f0000001500)='\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x4) getxattr(&(0x7f0000001400)='./mnt/file\x00', &(0x7f0000001600)=@known='system.posix_acl_access\x00', &(0x7f0000001700)=""/256, 0x100) 0s ago: executing program 9 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x6) setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="01000000", 0x4) bind(r0, &(0x7f0000000200)=@in={0x2, 0x81f, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='3\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000500)=@in={0x2, 0x81f, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) close(r0) kernel console output (not intermixed with test programs): e batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.303506][ T7259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.315935][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.322886][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.351419][ T7259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.403548][ T7226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.527365][ T7261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.557974][ T7259] hsr_slave_0: entered promiscuous mode [ 141.576018][ T7259] hsr_slave_1: entered promiscuous mode [ 141.597612][ T7259] debugfs: 'hsr0' already exists in 'hsr' [ 141.607850][ T7259] Cannot create hsr debugfs directory [ 141.645478][ T7261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.682872][ T7226] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.702921][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.710091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.748225][ T7261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.765323][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.772473][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.812481][ T7261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.824536][ T5623] Bluetooth: hci10: command tx timeout [ 141.959770][ T7259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.063049][ T5623] Bluetooth: hci13: command tx timeout [ 142.063192][ T5620] Bluetooth: hci12: command tx timeout [ 142.107670][ T7259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.190084][ T30] audit: type=1400 audit(1785173129.534:338): avc: denied { shutdown } for pid=7356 comm="syz.9.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.205612][ T7259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.303747][ T7259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.333917][ T7226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.492226][ T7261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.509695][ T7261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.521617][ T7261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.536883][ T7261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.545359][ T7261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.553941][ T7261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.568727][ T7261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.578236][ T7261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.656940][ T7259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.666623][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.678867][ T7259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.691000][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.706639][ T7259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.717308][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.728066][ T7226] veth0_vlan: entered promiscuous mode [ 142.738313][ T7259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.748400][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.766174][ T7226] veth1_vlan: entered promiscuous mode [ 142.841421][ T7226] veth0_macvtap: entered promiscuous mode [ 142.851811][ T7226] veth1_macvtap: entered promiscuous mode [ 142.864635][ T5620] Bluetooth: hci11: command tx timeout [ 142.877267][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.900089][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.917607][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.932078][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.946466][ T3331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.956310][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.973264][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.980457][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.997918][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.008142][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.031978][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.039189][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.061113][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.136324][ T7259] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.173433][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.180682][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.253950][ T906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.262506][ T906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.288292][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.295453][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.320380][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.328559][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.880467][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.894763][ T5620] Bluetooth: hci10: command tx timeout [ 144.031857][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.043292][ T7261] veth0_vlan: entered promiscuous mode [ 144.072795][ T7261] veth1_vlan: entered promiscuous mode [ 144.134666][ T5620] Bluetooth: hci12: command tx timeout [ 144.135554][ T5623] Bluetooth: hci13: command tx timeout [ 144.192665][ T7261] veth0_macvtap: entered promiscuous mode [ 144.200432][ T7429] atomic_op ffff88807b43c998 conn xmit_atomic 0000000000000000 [ 144.229408][ T7259] veth0_vlan: entered promiscuous mode [ 144.241065][ T7261] veth1_macvtap: entered promiscuous mode [ 144.266349][ T7259] veth1_vlan: entered promiscuous mode [ 144.305930][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.343294][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.396123][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.405126][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.417331][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.426645][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.443935][ T7259] veth0_macvtap: entered promiscuous mode [ 144.459661][ T7259] veth1_macvtap: entered promiscuous mode [ 144.506121][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.529148][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.557757][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.569807][ T906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.572034][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.583963][ T906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.612981][ T906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.665921][ T906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.712646][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.753359][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.810108][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.830003][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.892452][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.902397][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.934681][ T5623] Bluetooth: hci11: command tx timeout [ 145.622607][ T7469] tipc: Started in network mode [ 145.633195][ T7469] tipc: Node identity 7f000001, cluster identity 4711 [ 145.649964][ T7469] tipc: New replicast peer: 127.0.0.1 [ 145.656528][ T7469] tipc: Enabled bearer , priority 10 [ 145.733087][ T7474] bridge0: port 3(gretap0) entered blocking state [ 145.743830][ T7474] bridge0: port 3(gretap0) entered disabled state [ 145.752450][ T7474] gretap0: entered allmulticast mode [ 145.763346][ T7474] gretap0: entered promiscuous mode [ 145.771821][ T7474] bridge0: port 3(gretap0) entered blocking state [ 145.778386][ T7474] bridge0: port 3(gretap0) entered forwarding state [ 145.804701][ T7477] bridge0: port 4(erspan0) entered blocking state [ 145.811319][ T7477] bridge0: port 4(erspan0) entered disabled state [ 145.819601][ T7477] erspan0: entered allmulticast mode [ 145.826379][ T7477] erspan0: entered promiscuous mode [ 145.832146][ T7477] bridge0: port 4(erspan0) entered blocking state [ 145.838685][ T7477] bridge0: port 4(erspan0) entered forwarding state [ 145.850037][ T7478] tipc: Enabling of bearer rejected, failed to enable media [ 145.912901][ T7483] tipc: Enabling of bearer rejected, failed to enable media [ 145.960552][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 145.973847][ T7486] netlink: 60 bytes leftover after parsing attributes in process `syz.2.493'. [ 146.020075][ T30] audit: type=1400 audit(1785173133.364:339): avc: denied { setopt } for pid=7487 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.215255][ T5623] Bluetooth: hci13: command tx timeout [ 146.224227][ T5623] Bluetooth: hci12: command tx timeout [ 146.299939][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 146.310735][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.497'. [ 146.355775][ T7496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.498'. [ 146.501522][ T30] audit: type=1400 audit(1785173133.844:340): avc: denied { create } for pid=7497 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.506232][ T7498] x_tables: duplicate underflow at hook 3 [ 146.521781][ T30] audit: type=1400 audit(1785173133.844:341): avc: denied { setopt } for pid=7497 comm="syz.2.499" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.654940][ T5707] tipc: Node number set to 2130706433 [ 147.551904][ T30] audit: type=1400 audit(1785173134.894:342): avc: denied { accept } for pid=7511 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.561342][ T7510] netlink: 56 bytes leftover after parsing attributes in process `syz.0.505'. [ 148.566963][ T7531] netlink: 'syz.0.513': attribute type 13 has an invalid length. [ 157.249539][ T5620] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 157.259700][ T5620] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 157.267911][ T5620] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 157.276873][ T5620] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 157.285177][ T5620] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 157.756728][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.763881][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.771274][ T7550] bridge_slave_0: entered allmulticast mode [ 157.778788][ T7550] bridge_slave_0: entered promiscuous mode [ 157.786535][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.793658][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.800970][ T7550] bridge_slave_1: entered allmulticast mode [ 157.807819][ T7550] bridge_slave_1: entered promiscuous mode [ 157.830540][ T7550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.841905][ T7550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.867465][ T7550] team0: Port device team_slave_0 added [ 157.875013][ T7550] team0: Port device team_slave_1 added [ 157.893171][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.900860][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.927437][ T7550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.939734][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.950009][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.976703][ T7550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.009476][ T7550] hsr_slave_0: entered promiscuous mode [ 158.016125][ T7550] hsr_slave_1: entered promiscuous mode [ 158.022081][ T7550] debugfs: 'hsr0' already exists in 'hsr' [ 158.027843][ T7550] Cannot create hsr debugfs directory [ 158.123578][ T7550] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.169414][ T7550] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.259351][ T7550] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.317060][ T7550] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.430244][ T7550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.439054][ T7550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.447283][ T7550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.456072][ T7550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.466062][ T7550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.475317][ T7550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.483028][ T7550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.491997][ T7550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.512124][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.519231][ T7550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.526617][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.533693][ T7550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.577624][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.590366][ T906] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.599567][ T906] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.613721][ T7550] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.628459][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.635555][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.649252][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.656361][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.891936][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.034712][ T7550] veth0_vlan: entered promiscuous mode [ 159.043843][ T7550] veth1_vlan: entered promiscuous mode [ 159.066428][ T7550] veth0_macvtap: entered promiscuous mode [ 159.080423][ T7550] veth1_macvtap: entered promiscuous mode [ 159.094825][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.109850][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.121861][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.131074][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.141257][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.150854][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.216890][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.231389][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.252708][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.261025][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.312557][ T30] audit: type=1400 audit(1785173146.654:343): avc: denied { create } for pid=7590 comm="syz.5.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.349020][ T5620] Bluetooth: hci14: command tx timeout [ 159.363338][ T30] audit: type=1400 audit(1785173146.654:344): avc: denied { setopt } for pid=7590 comm="syz.5.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.393945][ T30] audit: type=1400 audit(1785173146.654:345): avc: denied { ioctl } for pid=7590 comm="syz.5.517" path="socket:[21849]" dev="sockfs" ino=21849 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.420598][ T30] audit: type=1400 audit(1785173146.664:346): avc: denied { write } for pid=7590 comm="syz.5.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.509944][ T5623] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 159.519387][ T5623] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 159.527799][ T5623] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 159.536820][ T5623] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 159.544694][ T5623] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 159.615559][ T5342] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.781590][ T5342] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.802253][ T5342] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.811711][ T5342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 159.822317][ T5342] usb 6-1: SerialNumber: syz [ 160.131798][ T7596] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.139663][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.147280][ T7596] bridge_slave_0: entered allmulticast mode [ 160.154726][ T7596] bridge_slave_0: entered promiscuous mode [ 160.164822][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.171993][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.179378][ T7596] bridge_slave_1: entered allmulticast mode [ 160.187550][ T7596] bridge_slave_1: entered promiscuous mode [ 160.218631][ T7596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.231457][ T7596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.260282][ T7596] team0: Port device team_slave_0 added [ 160.268875][ T7596] team0: Port device team_slave_1 added [ 160.290298][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.298747][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.327059][ T7596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.339831][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.346905][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.372999][ T7596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.418970][ T7596] hsr_slave_0: entered promiscuous mode [ 160.425384][ T7596] hsr_slave_1: entered promiscuous mode [ 160.431409][ T7596] debugfs: 'hsr0' already exists in 'hsr' [ 160.437496][ T7596] Cannot create hsr debugfs directory [ 160.467389][ T5342] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 160.588019][ T7596] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.703913][ T7596] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.791766][ T7596] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.828078][ T30] audit: type=1400 audit(1785173148.174:347): avc: denied { write } for pid=7614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.880832][ T7596] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.922954][ T30] audit: type=1400 audit(1785173148.264:348): avc: denied { write } for pid=7625 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.152381][ T7596] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.163438][ T7596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.172457][ T7596] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.183230][ T7596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.193026][ T7596] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.203240][ T7596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.211492][ T7596] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.232881][ T7596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.342854][ T7596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.361230][ T29] usb 6-1: USB disconnect, device number 2 [ 161.373236][ T7596] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.392005][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.399178][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.408137][ T29] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 161.425133][ T30] audit: type=1400 audit(1785173148.754:349): avc: denied { write } for pid=7632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.451664][ T5620] Bluetooth: hci14: command tx timeout [ 161.468399][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.475599][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.528132][ T30] audit: type=1400 audit(1785173148.874:350): avc: denied { write } for pid=7649 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.585096][ T5620] Bluetooth: hci15: command tx timeout [ 161.602777][ T5623] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 161.613963][ T5623] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 161.622798][ T5623] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 161.639684][ T5623] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 161.649573][ T5623] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 162.129033][ T30] audit: type=1400 audit(1785173149.474:351): avc: denied { write } for pid=7654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.300526][ T30] audit: type=1400 audit(1785173149.644:352): avc: denied { write } for pid=7685 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.430395][ T7596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.859457][ T7596] veth0_vlan: entered promiscuous mode [ 162.905424][ T7596] veth1_vlan: entered promiscuous mode [ 163.155755][ T7596] veth0_macvtap: entered promiscuous mode [ 163.188519][ T7596] veth1_macvtap: entered promiscuous mode [ 163.233076][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.268380][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.290427][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.299592][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.316180][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.328706][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.494631][ T5623] Bluetooth: hci14: command tx timeout [ 163.654623][ T5623] Bluetooth: hci15: command tx timeout [ 163.734986][ T5620] Bluetooth: hci16: command tx timeout [ 163.781466][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.799144][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.056935][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.065269][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.187787][ T5623] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 164.206483][ T5623] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 164.221185][ T5623] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 164.245595][ T5623] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 164.254798][ T5623] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 164.566305][ T5623] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 164.577349][ T5623] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 164.586521][ T5623] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 164.600646][ T5623] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 164.611331][ T5623] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 164.889061][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.897449][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.904921][ T7652] bridge_slave_0: entered allmulticast mode [ 164.920684][ T7652] bridge_slave_0: entered promiscuous mode [ 164.941690][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.950881][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.959714][ T7652] bridge_slave_1: entered allmulticast mode [ 164.972024][ T7652] bridge_slave_1: entered promiscuous mode [ 165.023209][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.037609][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.077848][ T7652] team0: Port device team_slave_0 added [ 165.088049][ T7652] team0: Port device team_slave_1 added [ 165.149166][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.164284][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.233964][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.277149][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.305740][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.341710][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.429744][ T7652] hsr_slave_0: entered promiscuous mode [ 165.436692][ T7652] hsr_slave_1: entered promiscuous mode [ 165.443076][ T7652] debugfs: 'hsr0' already exists in 'hsr' [ 165.451517][ T7652] Cannot create hsr debugfs directory [ 165.575340][ T5620] Bluetooth: hci14: command tx timeout [ 165.703007][ T7652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.735098][ T5620] Bluetooth: hci15: command tx timeout [ 165.824918][ T5620] Bluetooth: hci16: command tx timeout [ 165.840996][ T7652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.956916][ T7652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.022777][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.030317][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.041538][ T7724] bridge_slave_0: entered allmulticast mode [ 166.049457][ T7724] bridge_slave_0: entered promiscuous mode [ 166.066288][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.073511][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.081403][ T7724] bridge_slave_1: entered allmulticast mode [ 166.088496][ T7724] bridge_slave_1: entered promiscuous mode [ 166.105972][ T7652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.188994][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.213040][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.238724][ T7780] tipc: Started in network mode [ 166.252530][ T7780] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 166.265318][ T7780] tipc: New replicast peer: 127.0.0.1 [ 166.276498][ T7780] tipc: Enabled bearer , priority 10 [ 166.302019][ T7724] team0: Port device team_slave_0 added [ 166.331393][ T7724] team0: Port device team_slave_1 added [ 166.376918][ T5620] Bluetooth: hci17: command tx timeout [ 166.390140][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.397193][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.423632][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.436729][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.443742][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.474111][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.570343][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.582690][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.602504][ T7735] bridge_slave_0: entered allmulticast mode [ 166.611068][ T7735] bridge_slave_0: entered promiscuous mode [ 166.619760][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.629139][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.636474][ T7735] bridge_slave_1: entered allmulticast mode [ 166.644340][ T7735] bridge_slave_1: entered promiscuous mode [ 166.693397][ T7794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.531'. [ 166.702485][ T5620] Bluetooth: hci18: command tx timeout [ 166.740646][ T7724] hsr_slave_0: entered promiscuous mode [ 166.756286][ T7724] hsr_slave_1: entered promiscuous mode [ 166.762766][ T7724] debugfs: 'hsr0' already exists in 'hsr' [ 166.769642][ T7724] Cannot create hsr debugfs directory [ 166.782327][ T7652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.792049][ T7652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.807123][ T7735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.816946][ T7652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.826088][ T7652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.834019][ T7652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.842623][ T7652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.851948][ T7735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.877183][ T7652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.887759][ T7652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.912698][ T7735] team0: Port device team_slave_0 added [ 166.930998][ T7735] team0: Port device team_slave_1 added [ 166.972992][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.980254][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.006291][ T7735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.030971][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.038536][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.067310][ T7735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.141637][ T7735] hsr_slave_0: entered promiscuous mode [ 167.149016][ T7735] hsr_slave_1: entered promiscuous mode [ 167.155381][ T7735] debugfs: 'hsr0' already exists in 'hsr' [ 167.164446][ T7735] Cannot create hsr debugfs directory [ 167.238235][ T7724] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.323677][ T7724] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.389432][ T7724] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.409435][ T7652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.418603][ T5707] tipc: Node number set to 3210880763 [ 167.435446][ T7652] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.452410][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.459528][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.472626][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.479814][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.506749][ T7724] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.737090][ T7724] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 167.751534][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.759539][ T7724] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 167.769313][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.781342][ T7724] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 167.790296][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.828554][ T5620] Bluetooth: hci15: command tx timeout [ 167.839228][ T7735] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.859400][ T7724] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 167.868314][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.894757][ T5620] Bluetooth: hci16: command tx timeout [ 167.949610][ T7735] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.018271][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.041008][ T7735] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.101644][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.130979][ T7735] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.162361][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.169555][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.183869][ T7652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.199460][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.206564][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.327092][ T7652] veth0_vlan: entered promiscuous mode [ 168.369491][ T7652] veth1_vlan: entered promiscuous mode [ 168.423162][ T7735] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 168.433397][ T7735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.441665][ T7735] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 168.451921][ T7735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.459883][ T5620] Bluetooth: hci17: command tx timeout [ 168.470511][ T7735] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 168.481390][ T7735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.503362][ T7735] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 168.526414][ T7735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.633173][ T7652] veth0_macvtap: entered promiscuous mode [ 168.668811][ T7652] veth1_macvtap: entered promiscuous mode [ 168.758895][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.774571][ T5620] Bluetooth: hci18: command tx timeout [ 168.809105][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.851680][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.886541][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.912803][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.942364][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.950959][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.018888][ T7735] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.028850][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.060339][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.067557][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.130016][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.137196][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.159698][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.178930][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.292936][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.323822][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.512190][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 169.512206][ T30] audit: type=1400 audit(1785173156.854:357): avc: denied { write } for pid=7860 comm="syz.6.539" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.560614][ T7724] veth0_vlan: entered promiscuous mode [ 169.657014][ T7724] veth1_vlan: entered promiscuous mode [ 169.768826][ T7724] veth0_macvtap: entered promiscuous mode [ 169.823053][ T7724] veth1_macvtap: entered promiscuous mode [ 169.848948][ T7871] tipc: Enabled bearer , priority 1 [ 169.873600][ T7870] tipc: Resetting bearer [ 169.919603][ T7870] tipc: Disabling bearer [ 169.961127][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.974720][ T5620] Bluetooth: hci16: command tx timeout [ 170.001773][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.047214][ T82] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.098671][ T82] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.124980][ T82] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.182998][ T82] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.265688][ T5747] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 170.315802][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.397395][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.434177][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.487052][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.495661][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.545003][ T5620] Bluetooth: hci17: command tx timeout [ 170.555425][ T5746] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 170.702578][ T7735] veth0_vlan: entered promiscuous mode [ 170.722184][ T7735] veth1_vlan: entered promiscuous mode [ 170.783046][ T7735] veth0_macvtap: entered promiscuous mode [ 170.797976][ T7735] veth1_macvtap: entered promiscuous mode [ 170.819491][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.836152][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.859761][ T5620] Bluetooth: hci18: command tx timeout [ 170.871345][ T82] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.881214][ T82] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.891733][ T82] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.903405][ T82] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.006917][ T7890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.023860][ T7890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.065398][ T7888] ceph: No mds server is up or the cluster is laggy [ 171.105610][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.8.551'. [ 171.105932][ T1034] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.116973][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.148620][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.431461][ T30] audit: type=1400 audit(1785173158.774:358): avc: denied { shutdown } for pid=7922 comm="syz.6.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.544888][ T7935] tipc: Started in network mode [ 171.549878][ T7935] tipc: Node identity 7f000001, cluster identity 4711 [ 171.559569][ T7935] tipc: New replicast peer: 127.0.0.1 [ 171.570531][ T7935] tipc: Enabled bearer , priority 10 [ 171.625970][ T7939] rdma_rxe: rxe_newlink: failed to add veth0 [ 171.632671][ T7939] rdma_rxe: rxe_newlink: failed to add lo [ 172.583503][ T7962] netlink: 108 bytes leftover after parsing attributes in process `syz.7.567'. [ 172.614752][ T5620] Bluetooth: hci17: command tx timeout [ 172.677020][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'. [ 172.684210][ T9] tipc: Node number set to 2130706433 [ 172.686083][ T7966] openvswitch: netlink: Flow actions attr not present in new flow. [ 172.934822][ T5620] Bluetooth: hci18: command tx timeout [ 172.951097][ T30] audit: type=1400 audit(1785173160.294:359): avc: denied { mount } for pid=7978 comm="syz.7.574" name="/" dev="configfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 172.975623][ T30] audit: type=1400 audit(1785173160.294:360): avc: denied { search } for pid=7978 comm="syz.7.574" name="/" dev="configfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.001962][ T30] audit: type=1400 audit(1785173160.294:361): avc: denied { search } for pid=7978 comm="syz.7.574" name="/" dev="configfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.027605][ T30] audit: type=1400 audit(1785173160.294:362): avc: denied { search } for pid=7978 comm="syz.7.574" name="/" dev="configfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.069218][ T30] audit: type=1400 audit(1785173160.354:363): avc: denied { unmount } for pid=7735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 173.117508][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.7.576'. [ 175.290600][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.586'. [ 175.852984][ T8033] No such timeout policy "syz0" [ 176.436302][ T30] audit: type=1400 audit(1785173163.784:364): avc: denied { write } for pid=8045 comm="syz.7.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.625530][ C0] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated [ 177.191537][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.602'. [ 178.660336][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.7.611'. [ 178.669397][ T8075] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.686406][ T5623] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 180.696263][ T5623] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 180.705636][ T5623] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 180.713383][ T5623] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 180.720055][ T8095] netlink: 'syz.7.618': attribute type 37 has an invalid length. [ 180.731953][ T5623] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 181.255542][ T1034] rpcbind: server 127.0.0.1 not responding, timed out [ 181.325425][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.332587][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.340331][ T8093] bridge_slave_0: entered allmulticast mode [ 181.347700][ T8093] bridge_slave_0: entered promiscuous mode [ 181.355408][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.362551][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.370000][ T8093] bridge_slave_1: entered allmulticast mode [ 181.377176][ T8093] bridge_slave_1: entered promiscuous mode [ 181.406512][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.422578][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.447807][ T8093] team0: Port device team_slave_0 added [ 181.456639][ T8093] team0: Port device team_slave_1 added [ 181.476075][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.483032][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.514340][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.528251][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.535436][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.561612][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.597042][ T8093] hsr_slave_0: entered promiscuous mode [ 181.607284][ T8093] hsr_slave_1: entered promiscuous mode [ 181.613489][ T8093] debugfs: 'hsr0' already exists in 'hsr' [ 181.619300][ T8093] Cannot create hsr debugfs directory [ 181.720846][ T8093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.833878][ T8093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.991992][ T8093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.025094][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.622'. [ 182.034588][ T8120] netlink: 60 bytes leftover after parsing attributes in process `syz.7.622'. [ 182.071205][ T8093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.378819][ T8093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.390590][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.399463][ T8093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.424181][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.432141][ T8093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.443367][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.451430][ T8093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.460829][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.561589][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.577625][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.588142][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.595303][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.609559][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.616698][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.775273][ T5620] Bluetooth: hci19: command tx timeout [ 182.889501][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.923592][ T8093] veth0_vlan: entered promiscuous mode [ 182.943407][ T8093] veth1_vlan: entered promiscuous mode [ 182.968494][ T8093] veth0_macvtap: entered promiscuous mode [ 182.977089][ T8093] veth1_macvtap: entered promiscuous mode [ 182.993243][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.009280][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.032162][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.045716][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.056549][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.066612][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.146396][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.159111][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.191445][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.199663][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.257353][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 183.268257][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 183.277473][ T8154] ksmbd: Unknown IPC event: 1, ignore. [ 183.283390][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 183.294020][ T8154] nbd: must specify at least one socket [ 183.300503][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 183.309864][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 183.319437][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 183.328871][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 183.343701][ T8154] ksmbd: Unknown IPC event: 1, ignore. [ 183.349821][ T8154] nbd: must specify at least one socket [ 183.356983][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.582562][ T8176] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=8176 comm=syz.1.636 [ 184.864558][ T5620] Bluetooth: hci19: command tx timeout [ 186.131475][ T8201] __nla_validate_parse: 9 callbacks suppressed [ 186.131496][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 186.149297][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 186.158741][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 186.168142][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 186.534441][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.542734][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.578692][ T8209] bridge_slave_1: left allmulticast mode [ 186.585000][ T8209] bridge_slave_1: left promiscuous mode [ 186.592246][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.609420][ T8209] bridge_slave_0: left allmulticast mode [ 186.623830][ T8209] bridge_slave_0: left promiscuous mode [ 186.630031][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.667912][ T5623] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 186.680443][ T5623] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 186.688967][ T5623] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 186.702324][ T5623] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 186.714536][ T5623] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 186.934822][ T5623] Bluetooth: hci19: command tx timeout [ 187.566419][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.573587][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.581399][ T8212] bridge_slave_0: entered allmulticast mode [ 187.588639][ T8212] bridge_slave_0: entered promiscuous mode [ 187.598226][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.605538][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.612855][ T8212] bridge_slave_1: entered allmulticast mode [ 187.621533][ T8212] bridge_slave_1: entered promiscuous mode [ 187.706718][ T8212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.738315][ T8212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.821090][ T8212] team0: Port device team_slave_0 added [ 187.840559][ T8212] team0: Port device team_slave_1 added [ 187.907852][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.915706][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.943964][ T8212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.966259][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.973306][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.003296][ T8212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.058736][ T8212] hsr_slave_0: entered promiscuous mode [ 188.066607][ T8212] hsr_slave_1: entered promiscuous mode [ 188.078086][ T8212] debugfs: 'hsr0' already exists in 'hsr' [ 188.093586][ T8212] Cannot create hsr debugfs directory [ 188.310439][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 188.332364][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.667'. [ 188.450302][ T8212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.533161][ T5620] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 188.546836][ T5620] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 188.558938][ T5620] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 188.572189][ T5620] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 188.584501][ T5620] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 188.678194][ T8212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.757187][ T8212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.789725][ T5620] Bluetooth: hci20: command tx timeout [ 188.798243][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.809590][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.899660][ T8212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.014702][ T5626] Bluetooth: hci19: command tx timeout [ 189.098358][ T8212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.109183][ T8212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.117663][ T8212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.128702][ T8212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.138602][ T8212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.150061][ T8212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.160647][ T8212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.171637][ T8212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.271727][ T8212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.304389][ T8212] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.319611][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.326768][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.345690][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.352820][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.748429][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.756044][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.763327][ T8281] bridge_slave_0: entered allmulticast mode [ 189.770392][ T8281] bridge_slave_0: entered promiscuous mode [ 189.778546][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.785909][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.800176][ T8281] bridge_slave_1: entered allmulticast mode [ 189.808286][ T8281] bridge_slave_1: entered promiscuous mode [ 189.842083][ T8281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.854860][ T8281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.881550][ T8281] team0: Port device team_slave_0 added [ 189.889163][ T8212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.913313][ T8281] team0: Port device team_slave_1 added [ 189.961046][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.968774][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.002219][ T8281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.019158][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.027289][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.053640][ T8281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.158591][ T8281] hsr_slave_0: entered promiscuous mode [ 190.166117][ T8281] hsr_slave_1: entered promiscuous mode [ 190.172565][ T8281] debugfs: 'hsr0' already exists in 'hsr' [ 190.184158][ T8281] Cannot create hsr debugfs directory [ 190.298305][ T8212] veth0_vlan: entered promiscuous mode [ 190.365632][ T8212] veth1_vlan: entered promiscuous mode [ 190.430857][ T8212] veth0_macvtap: entered promiscuous mode [ 190.460413][ T8281] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.480340][ T8212] veth1_macvtap: entered promiscuous mode [ 190.498308][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.526899][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.558709][ T8281] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.579176][ T82] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.588568][ T82] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.599881][ T82] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.608894][ T82] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.620186][ T5626] Bluetooth: hci21: command tx timeout [ 190.654027][ T8281] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.791320][ T8281] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.847304][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.855362][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 190.855422][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 190.855455][ T5619] Bluetooth: hci20: command tx timeout [ 190.855937][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 190.869985][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 190.886757][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 190.893336][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.906732][ T5622] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 190.923152][ T5622] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 190.932815][ T5622] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 190.941340][ T5622] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 190.949172][ T5622] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 191.051937][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.063163][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.171169][ T8281] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 191.195587][ T8281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.207493][ T8281] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 191.316103][ T8281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.325210][ T8281] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 191.418157][ T8281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.474346][ T8281] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 191.512591][ T8281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.717533][ T8379] rdma_rxe: rxe_newlink: failed to add dummy0 [ 191.755969][ T8379] smc: net device dummy0 applied user defined pnetid SYZ0 [ 191.781659][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.690'. [ 191.807830][ T8281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.867053][ T8281] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.881717][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.888877][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.915249][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.922402][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.020976][ T30] audit: type=1400 audit(1785173179.364:365): avc: denied { listen } for pid=8384 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 192.028160][ T8281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.686997][ T8281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.694300][ T4926] Bluetooth: hci21: command tx timeout [ 192.707274][ T8356] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.713679][ T30] audit: type=1400 audit(1785173180.054:366): avc: denied { read write } for pid=8212 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.715572][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.754459][ T8356] bridge_slave_0: entered allmulticast mode [ 192.777144][ T8356] bridge_slave_0: entered promiscuous mode [ 192.795307][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.802460][ T8356] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.813893][ T8356] bridge_slave_1: entered allmulticast mode [ 192.831212][ T30] audit: type=1400 audit(1785173180.054:367): avc: denied { open } for pid=8212 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.837541][ T8356] bridge_slave_1: entered promiscuous mode [ 192.876935][ T30] audit: type=1400 audit(1785173180.054:368): avc: denied { ioctl } for pid=8212 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.934783][ T4926] Bluetooth: hci20: command tx timeout [ 192.960725][ T8356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.987778][ T8356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.017332][ T4926] Bluetooth: hci22: command tx timeout [ 193.081919][ T8356] team0: Port device team_slave_0 added [ 193.098188][ T8356] team0: Port device team_slave_1 added [ 193.158168][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.165201][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.196697][ T8356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.209369][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.216819][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.242854][ T8356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.306946][ T8356] hsr_slave_0: entered promiscuous mode [ 193.313341][ T8356] hsr_slave_1: entered promiscuous mode [ 193.319602][ T8356] debugfs: 'hsr0' already exists in 'hsr' [ 193.325906][ T8356] Cannot create hsr debugfs directory [ 193.405252][ T8281] veth0_vlan: entered promiscuous mode [ 193.448424][ T8281] veth1_vlan: entered promiscuous mode [ 193.483061][ T8356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.520039][ T8281] veth0_macvtap: entered promiscuous mode [ 193.528796][ T8281] veth1_macvtap: entered promiscuous mode [ 193.548870][ T8281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.578788][ T8356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.604486][ T8281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.619767][ T82] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.632244][ T82] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.641662][ T82] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.652929][ T82] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.705919][ T8356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.782473][ T8356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.875720][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.903421][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.037576][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.050236][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.054556][ T30] audit: type=1400 audit(1785173181.394:369): avc: denied { ioctl } for pid=8441 comm="syz.4.704" path="socket:[28130]" dev="sockfs" ino=28130 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.249201][ T8356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.284717][ T8356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.293615][ T8356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.328219][ T8356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.336543][ T8356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.347760][ T8356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.356970][ T8356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.380611][ T8356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.530235][ T30] audit: type=1400 audit(1785173181.874:370): avc: denied { read } for pid=8468 comm="syz.4.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 194.557388][ T8356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.583259][ T8356] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.616718][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.623928][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.641388][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.648600][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.774320][ T4926] Bluetooth: hci21: command tx timeout [ 194.861116][ T8479] rdma_rxe: rxe_newlink: failed to add veth0 [ 194.874747][ T8479] rdma_rxe: rxe_newlink: failed to add veth1 [ 195.021302][ T4926] Bluetooth: hci20: command tx timeout [ 195.051252][ T8356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.082139][ T8356] veth0_vlan: entered promiscuous mode [ 195.093240][ T8356] veth1_vlan: entered promiscuous mode [ 195.101019][ T4926] Bluetooth: hci22: command tx timeout [ 195.134073][ T8356] veth0_macvtap: entered promiscuous mode [ 195.142813][ T8356] veth1_macvtap: entered promiscuous mode [ 195.160772][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.173213][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.193332][ T7890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.202295][ T7890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.212484][ T7890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.231235][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.299285][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.307810][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.348430][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.356974][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.727651][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 195.748476][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 195.758670][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 195.768296][ T8495] rdma_rxe: rxe_newlink: failed to add veth0 [ 195.776943][ T8495] rdma_rxe: rxe_newlink: failed to add veth1 [ 195.785400][ T8495] smc: net device veth0 applied user defined pnetid SYZ0 [ 195.950780][ T8498] siw: device registration error -23 [ 196.693047][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 196.703420][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.721'. [ 196.716124][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'. [ 196.726714][ T8513] tc_dump_action: action bad kind [ 196.854298][ T4926] Bluetooth: hci21: command tx timeout [ 197.174435][ T4926] Bluetooth: hci22: command tx timeout [ 197.498181][ T30] audit: type=1400 audit(1785173184.844:371): avc: denied { mount } for pid=8517 comm="syz.4.723" name="/" dev="rpc_pipefs" ino=29789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 197.528687][ T30] audit: type=1400 audit(1785173184.864:372): avc: denied { unmount } for pid=8212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 199.265685][ T4926] Bluetooth: hci22: command tx timeout [ 199.655667][ T82] rpcbind: server 127.0.0.1 not responding, timed out [ 200.571407][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.732'. [ 201.018781][ T5746] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 201.285243][ T5746] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 201.797900][ T804] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 201.831376][ T8551] ceph: No mds server is up or the cluster is laggy [ 201.968592][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 202.892184][ T8566] rdma_rxe: rxe_newlink: failed to add lo [ 202.984006][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 203.008938][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 203.409877][ T8578] tipc: Started in network mode [ 203.420827][ T8578] tipc: Node identity 7f000001, cluster identity 4711 [ 203.428219][ T8578] tipc: New replicast peer: 127.0.0.1 [ 203.433851][ T8578] tipc: Enabled bearer , priority 10 [ 203.647970][ T8583] bridge0: port 3(syz_tun) entered blocking state [ 203.659558][ T8583] bridge0: port 3(syz_tun) entered disabled state [ 203.667945][ T8583] syz_tun: entered allmulticast mode [ 203.675558][ T8583] syz_tun: entered promiscuous mode [ 203.681387][ T8583] bridge0: port 3(syz_tun) entered blocking state [ 203.688011][ T8583] bridge0: port 3(syz_tun) entered forwarding state [ 203.720215][ T5626] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 203.737103][ T5626] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 203.748054][ T5626] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 203.764018][ T5626] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 203.772881][ T5626] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 204.332007][ T8611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8611 comm=syz.4.757 [ 204.564877][ T9] tipc: Node number set to 2130706433 [ 204.607205][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.614862][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.622158][ T8585] bridge_slave_0: entered allmulticast mode [ 204.629324][ T8585] bridge_slave_0: entered promiscuous mode [ 204.636769][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.647946][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.655457][ T8585] bridge_slave_1: entered allmulticast mode [ 204.662532][ T8585] bridge_slave_1: entered promiscuous mode [ 204.684780][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.698222][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.725241][ T8585] team0: Port device team_slave_0 added [ 204.732823][ T8585] team0: Port device team_slave_1 added [ 204.759567][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.766664][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.797461][ T8585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.809546][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.817018][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.843183][ T8585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.882523][ T8585] hsr_slave_0: entered promiscuous mode [ 204.888901][ T8585] hsr_slave_1: entered promiscuous mode [ 204.895155][ T8585] debugfs: 'hsr0' already exists in 'hsr' [ 204.900890][ T8585] Cannot create hsr debugfs directory [ 205.001699][ T8585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.071964][ T8585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.140484][ T8585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.221206][ T8585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.313181][ T804] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 205.353357][ T8585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.369021][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.376897][ T8585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.386691][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.394646][ T8585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.403748][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.412728][ T8585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.433278][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.453293][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.460464][ T8585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.467891][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.474982][ T8585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.523283][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.538432][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.546477][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.565550][ T8585] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.576027][ T5747] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 205.587756][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.594895][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.603940][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.611073][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.814996][ T5626] Bluetooth: hci23: command tx timeout [ 205.867380][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.906399][ T8585] veth0_vlan: entered promiscuous mode [ 205.917720][ T8585] veth1_vlan: entered promiscuous mode [ 205.939934][ T8585] veth0_macvtap: entered promiscuous mode [ 205.948708][ T8585] veth1_macvtap: entered promiscuous mode [ 205.966182][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.996878][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.016393][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.025668][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.037346][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.047385][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.085372][ T5747] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 206.118659][ T8625] ceph: No mds server is up or the cluster is laggy [ 206.161464][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.189124][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.232030][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.243447][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.348374][ T8651] netlink: 32 bytes leftover after parsing attributes in process `syz.4.761'. [ 206.378067][ T8651] tipc: Enabled bearer , priority 10 [ 206.400710][ T30] audit: type=1400 audit(1785173193.744:373): avc: denied { read } for pid=8650 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.686462][ T8663] nfs: Bad value for 'source' [ 207.192408][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 207.211559][ T8680] openvswitch: netlink: Flow actions attr not present in new flow. [ 207.894483][ T5626] Bluetooth: hci23: command tx timeout [ 208.658955][ T5747] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 208.670424][ T5747] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 208.934786][ T5747] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 209.466044][ T5746] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 209.481704][ T8693] ceph: No mds server is up or the cluster is laggy [ 209.671028][ T4926] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 209.682950][ T4926] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 209.691303][ T4926] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 209.699280][ T4926] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 209.707350][ T4926] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 209.974507][ T5626] Bluetooth: hci23: command tx timeout [ 210.247786][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.254987][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.262221][ T8704] bridge_slave_0: entered allmulticast mode [ 210.269369][ T8704] bridge_slave_0: entered promiscuous mode [ 210.282202][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.289494][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.297530][ T8704] bridge_slave_1: entered allmulticast mode [ 210.304635][ T8704] bridge_slave_1: entered promiscuous mode [ 210.326738][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.338325][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.362581][ T8704] team0: Port device team_slave_0 added [ 210.370194][ T8704] team0: Port device team_slave_1 added [ 210.399040][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.406167][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.432687][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.444805][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.451760][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.482560][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.516508][ T8704] hsr_slave_0: entered promiscuous mode [ 210.523072][ T8704] hsr_slave_1: entered promiscuous mode [ 210.529839][ T8704] debugfs: 'hsr0' already exists in 'hsr' [ 210.538188][ T8704] Cannot create hsr debugfs directory [ 210.748753][ T29] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 210.804863][ T4926] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 210.807879][ T8704] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.815112][ T4926] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 210.831045][ T4926] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 210.841221][ T4926] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 210.848936][ T4926] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 210.951041][ T8704] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.025603][ T5746] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 211.049954][ T8704] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.143465][ T8704] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.329856][ T8704] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.345590][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.353523][ T8704] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.363352][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.374523][ T8704] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.388479][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.408263][ T8704] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.420067][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.525592][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.547275][ T5747] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 211.554959][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.562286][ T8728] ceph: No mds server is up or the cluster is laggy [ 211.571583][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.578740][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.610012][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.617658][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.726044][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 211.737940][ T5626] Bluetooth: hci24: command tx timeout [ 212.040026][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.048916][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.058097][ T8731] bridge_slave_0: entered allmulticast mode [ 212.065118][ T5626] Bluetooth: hci23: command tx timeout [ 212.066122][ T8731] bridge_slave_0: entered promiscuous mode [ 212.078573][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.086077][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.093415][ T8731] bridge_slave_1: entered allmulticast mode [ 212.101785][ T8731] bridge_slave_1: entered promiscuous mode [ 212.178953][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.207253][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.293899][ T8731] team0: Port device team_slave_0 added [ 212.302644][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.317152][ T8731] team0: Port device team_slave_1 added [ 212.356036][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.363463][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.390084][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.406475][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.413466][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.443639][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.567324][ T8731] hsr_slave_0: entered promiscuous mode [ 212.577915][ T8731] hsr_slave_1: entered promiscuous mode [ 212.585172][ T8731] debugfs: 'hsr0' already exists in 'hsr' [ 212.590947][ T8731] Cannot create hsr debugfs directory [ 212.683940][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 212.721315][ T8785] siw: device registration error -23 [ 212.811668][ T8704] veth0_vlan: entered promiscuous mode [ 212.872003][ T4926] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 212.883970][ T4926] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 212.895082][ T8704] veth1_vlan: entered promiscuous mode [ 212.900705][ T4926] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 212.911059][ T4926] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 212.919472][ T4926] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 212.938062][ T50] Bluetooth: hci25: command tx timeout [ 212.953399][ T8731] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.003965][ T8704] veth0_macvtap: entered promiscuous mode [ 213.020924][ T8704] veth1_macvtap: entered promiscuous mode [ 213.079864][ T8731] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.111689][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.126726][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.169362][ T8731] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.202223][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.219708][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.232213][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.279857][ T8731] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.297455][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.422696][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.454191][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.533661][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.552814][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.613322][ T8731] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 213.630866][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.641271][ T8731] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 213.681503][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.695889][ T8731] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 213.708247][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.726375][ T8731] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 213.745728][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.815385][ T5626] Bluetooth: hci24: command tx timeout [ 213.848577][ T8811] tipc: Enabling of bearer rejected, already enabled [ 213.864346][ T30] audit: type=1400 audit(1785173201.204:374): avc: denied { connect } for pid=8810 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.007078][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.096375][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.111749][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.118905][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.176081][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.183262][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.520149][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.531834][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.546828][ T8787] bridge_slave_0: entered allmulticast mode [ 214.555157][ T8787] bridge_slave_0: entered promiscuous mode [ 214.571864][ T8787] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.596708][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.606936][ T8787] bridge_slave_1: entered allmulticast mode [ 214.617230][ T8787] bridge_slave_1: entered promiscuous mode [ 214.669815][ T8787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.689228][ T8787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.729469][ T8787] team0: Port device team_slave_0 added [ 214.739056][ T8787] team0: Port device team_slave_1 added [ 214.762995][ T8787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.784284][ T8787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.810425][ T8787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.828308][ T8787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.835828][ T8787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.867614][ T8787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.925611][ T30] audit: type=1400 audit(1785173202.264:375): avc: denied { create } for pid=8840 comm="syz.5.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 214.951753][ T8787] hsr_slave_0: entered promiscuous mode [ 214.962688][ T8787] hsr_slave_1: entered promiscuous mode [ 214.978453][ T8787] debugfs: 'hsr0' already exists in 'hsr' [ 215.002772][ T8787] Cannot create hsr debugfs directory [ 215.016581][ T5626] Bluetooth: hci26: command tx timeout [ 215.016892][ T4926] Bluetooth: hci25: command tx timeout [ 215.131007][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.357867][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 215.383251][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 215.401627][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 215.418385][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 215.431763][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 215.452519][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 215.489319][ T8787] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.526361][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 215.661884][ T8787] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.767395][ T8787] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.787665][ T8731] veth0_vlan: entered promiscuous mode [ 215.799338][ T8731] veth1_vlan: entered promiscuous mode [ 215.829845][ T8731] veth0_macvtap: entered promiscuous mode [ 215.853803][ T8787] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.871532][ T8731] veth1_macvtap: entered promiscuous mode [ 215.887322][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.896954][ T4926] Bluetooth: hci24: command tx timeout [ 215.918851][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.932554][ T7890] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.944820][ T7890] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.959783][ T7890] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.979587][ T7890] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.101160][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.123178][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.162308][ T8787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.175555][ T8787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.185955][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.186978][ T8787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.193938][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.224631][ T8787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.232472][ T8787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.243882][ T8787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.252636][ T8787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.263156][ T8787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.374578][ T8787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.396427][ T8787] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.409287][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.416476][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.434726][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.441832][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.904457][ T8787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.095413][ T4926] Bluetooth: hci26: command tx timeout [ 217.095421][ T5626] Bluetooth: hci25: command tx timeout [ 217.156990][ T8787] veth0_vlan: entered promiscuous mode [ 217.193768][ T8787] veth1_vlan: entered promiscuous mode [ 217.262678][ T8787] veth0_macvtap: entered promiscuous mode [ 217.283222][ T8787] veth1_macvtap: entered promiscuous mode [ 217.311794][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.816'. [ 217.324577][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.5.816'. [ 217.354408][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.816'. [ 217.358437][ T8787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.409154][ T8787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.451693][ T906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.486335][ T906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.536661][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.593998][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.743717][ T8916] netlink: 36 bytes leftover after parsing attributes in process `syz.8.820'. [ 217.823658][ T906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.835326][ T8921] tipc: Enabling of bearer rejected, already enabled [ 217.862144][ T906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.976062][ T4926] Bluetooth: hci24: command tx timeout [ 218.022703][ T906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.080210][ T906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.443263][ T8937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.829'. [ 218.458879][ T8937] tipc: Enabling of bearer rejected, already enabled [ 218.842294][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.832'. [ 218.890416][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 219.153921][ T8968] netlink: 'syz.8.839': attribute type 48 has an invalid length. [ 219.174714][ T5626] Bluetooth: hci26: command tx timeout [ 219.186183][ T4926] Bluetooth: hci25: command tx timeout [ 219.677714][ T8953] ceph: No mds server is up or the cluster is laggy [ 219.677822][ T10] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 220.045118][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 220.220334][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 220.238283][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.249784][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.258586][ T10] usb 6-1: SerialNumber: syz [ 220.985132][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 221.004523][ T10] usb 6-1: USB disconnect, device number 3 [ 221.254684][ T4926] Bluetooth: hci26: command tx timeout [ 222.517096][ T5626] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1 [ 222.530433][ T5626] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9 [ 222.540724][ T5626] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9 [ 222.549778][ T5626] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4 [ 222.559144][ T5626] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2 [ 223.243084][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.250555][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.264713][ T9028] bridge_slave_0: entered allmulticast mode [ 223.273394][ T9028] bridge_slave_0: entered promiscuous mode [ 223.296013][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.303287][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.313024][ T9028] bridge_slave_1: entered allmulticast mode [ 223.323268][ T9028] bridge_slave_1: entered promiscuous mode [ 223.376177][ T9028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.391147][ T9028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.419575][ T9028] team0: Port device team_slave_0 added [ 223.427221][ T9028] team0: Port device team_slave_1 added [ 223.446576][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.448056][ T5715] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 223.453520][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.470372][ T9035] ceph: No mds server is up or the cluster is laggy [ 223.492818][ T9028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.514449][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.521423][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.548360][ T9028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.627836][ T9028] hsr_slave_0: entered promiscuous mode [ 223.642937][ T9028] hsr_slave_1: entered promiscuous mode [ 223.649490][ T9028] debugfs: 'hsr0' already exists in 'hsr' [ 223.659543][ T9028] Cannot create hsr debugfs directory [ 223.675814][ T9061] tipc: Started in network mode [ 223.680724][ T9061] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 223.695542][ T9061] tipc: Enabled bearer , priority 10 [ 223.777516][ T9064] tipc: Enabled bearer , priority 0 [ 223.837536][ T9028] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.859885][ T9063] tipc: Disabling bearer [ 223.918845][ T9028] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.973633][ T9028] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.047303][ T9028] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.150644][ T9028] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 224.160163][ T9028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.168289][ T9028] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 224.180071][ T9028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.188230][ T9028] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.197231][ T9028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.210679][ T9028] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.222646][ T9028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.271368][ T9028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.287913][ T9028] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.310651][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.317820][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.331530][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.338687][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.591738][ T9028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.618460][ T4926] Bluetooth: hci27: command tx timeout [ 224.778566][ T9028] veth0_vlan: entered promiscuous mode [ 224.797946][ T9028] veth1_vlan: entered promiscuous mode [ 224.824304][ T5722] tipc: Node number set to 11709098 [ 224.861927][ T9028] veth0_macvtap: entered promiscuous mode [ 224.873769][ T9028] veth1_macvtap: entered promiscuous mode [ 224.898196][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.910935][ T9094] tipc: New replicast peer: 172.20.20.170 [ 224.923596][ T9094] tipc: Enabled bearer , priority 10 [ 224.934128][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.947854][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.956805][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.968230][ T82] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.977653][ T82] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.055064][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.063286][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.093782][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.103916][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.171515][ T9096] netlink: 48 bytes leftover after parsing attributes in process `syz.6.857'. [ 225.504255][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 225.658221][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 225.669372][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 225.680717][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 225.693259][ T10] usb 7-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 225.702495][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.710957][ T10] usb 7-1: Product: syz [ 225.715193][ T10] usb 7-1: Manufacturer: syz [ 225.719894][ T10] usb 7-1: SerialNumber: syz [ 225.730611][ T9098] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 225.743780][ T9098] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 225.796959][ T9100] netlink: ct family unspecified [ 225.801969][ T9100] openvswitch: netlink: Actions may not be safe on all matching packets [ 226.464594][ T10] ax88179_178a 7-1:1.0: probe with driver ax88179_178a failed with error -71 [ 226.480773][ T10] usb 7-1: USB disconnect, device number 2 [ 226.695302][ T4926] Bluetooth: hci27: command tx timeout [ 227.865540][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.8.878'. [ 228.274510][ T9142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9142 comm=syz.6.885 [ 228.290369][ T9142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9142 comm=syz.6.885 [ 228.341404][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.6.886'. [ 228.353364][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.886'. [ 228.774574][ T4926] Bluetooth: hci27: command tx timeout [ 229.240738][ T5715] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 229.250244][ T9147] ceph: No mds server is up or the cluster is laggy [ 230.422788][ T9171] netlink: 56 bytes leftover after parsing attributes in process `syz.8.894'. [ 230.433023][ T9171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=97 sclass=netlink_route_socket pid=9171 comm=syz.8.894 [ 230.860600][ T4926] Bluetooth: hci27: command tx timeout [ 231.105167][ T9183] netlink: 56 bytes leftover after parsing attributes in process `syz.8.897'. [ 232.153215][ T9193] netlink: 20 bytes leftover after parsing attributes in process `syz.8.901'. [ 232.165639][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.8.901'. [ 234.551820][ T5626] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1 [ 234.563376][ T5626] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9 [ 234.571787][ T5626] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9 [ 234.584867][ T5620] Bluetooth: hci29: unexpected cc 0x0c03 length: 249 > 1 [ 234.587567][ T5626] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4 [ 234.596116][ T5620] Bluetooth: hci29: unexpected cc 0x1003 length: 249 > 9 [ 234.601374][ T5626] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2 [ 234.607584][ T5620] Bluetooth: hci29: unexpected cc 0x1001 length: 249 > 9 [ 234.626627][ T5620] Bluetooth: hci29: unexpected cc 0x0c23 length: 249 > 4 [ 234.634956][ T5620] Bluetooth: hci29: unexpected cc 0x0c38 length: 249 > 2 [ 235.512075][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.519939][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.527421][ T9209] bridge_slave_0: entered allmulticast mode [ 235.534596][ T9209] bridge_slave_0: entered promiscuous mode [ 235.542353][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.549541][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.556907][ T9209] bridge_slave_1: entered allmulticast mode [ 235.563919][ T9209] bridge_slave_1: entered promiscuous mode [ 235.597235][ T9209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.612688][ T9209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.650208][ T9209] team0: Port device team_slave_0 added [ 235.659188][ T9209] team0: Port device team_slave_1 added [ 235.707697][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.715123][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.742091][ T9209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.758236][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.765300][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.796047][ T9209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.861387][ T9209] hsr_slave_0: entered promiscuous mode [ 235.868053][ T9209] hsr_slave_1: entered promiscuous mode [ 235.880892][ T9209] debugfs: 'hsr0' already exists in 'hsr' [ 235.886690][ T9209] Cannot create hsr debugfs directory [ 235.921684][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.929150][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.936616][ T9207] bridge_slave_0: entered allmulticast mode [ 235.943574][ T9207] bridge_slave_0: entered promiscuous mode [ 235.962810][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.970166][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.985325][ T9207] bridge_slave_1: entered allmulticast mode [ 235.992252][ T9207] bridge_slave_1: entered promiscuous mode [ 236.030479][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.045650][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.088459][ T9207] team0: Port device team_slave_0 added [ 236.102275][ T9207] team0: Port device team_slave_1 added [ 236.142588][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.149731][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.176353][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.195767][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.202713][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.230250][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.297574][ T9209] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.321572][ T9207] hsr_slave_0: entered promiscuous mode [ 236.328650][ T9207] hsr_slave_1: entered promiscuous mode [ 236.335107][ T9207] debugfs: 'hsr0' already exists in 'hsr' [ 236.340844][ T9207] Cannot create hsr debugfs directory [ 236.370610][ T9209] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.469923][ T9209] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.539769][ T9209] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.638547][ T9209] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 236.647572][ T9209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.655422][ T9209] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 236.664644][ T9209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.695641][ T5626] Bluetooth: hci28: command tx timeout [ 236.700446][ T9207] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.705221][ T5626] Bluetooth: hci29: command tx timeout [ 236.726433][ T9209] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 236.737000][ T9209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.745001][ T9209] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 236.753859][ T9209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.785929][ T9207] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.848399][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.874666][ T9207] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.906283][ T9209] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.918791][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.925896][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.939457][ T5626] Bluetooth: hci6: command 0x0406 tx timeout [ 236.939490][ T4926] Bluetooth: hci5: command 0x0406 tx timeout [ 236.964070][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.971177][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.992915][ T9207] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.159387][ T9207] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 237.171327][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.186670][ T9207] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 237.196495][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.212639][ T9207] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 237.222930][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.233168][ T9207] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 237.241894][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.358683][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.380647][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.396927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.405364][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.438112][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.445251][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.541997][ T9209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.803831][ T9209] veth0_vlan: entered promiscuous mode [ 237.847521][ T9209] veth1_vlan: entered promiscuous mode [ 237.879485][ T9209] veth0_macvtap: entered promiscuous mode [ 237.888737][ T9209] veth1_macvtap: entered promiscuous mode [ 237.901387][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.928810][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.943730][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.961364][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.981519][ T906] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.003600][ T906] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.037966][ T906] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.095707][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.114194][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.190326][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.207095][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.275930][ T9207] veth0_vlan: entered promiscuous mode [ 238.295367][ T9207] veth1_vlan: entered promiscuous mode [ 238.325249][ T50] Bluetooth: hci30: unexpected cc 0x0c03 length: 249 > 1 [ 238.346700][ T50] Bluetooth: hci30: unexpected cc 0x1003 length: 249 > 9 [ 238.359889][ T50] Bluetooth: hci30: unexpected cc 0x1001 length: 249 > 9 [ 238.370117][ T50] Bluetooth: hci30: unexpected cc 0x0c23 length: 249 > 4 [ 238.372699][ T9207] veth0_macvtap: entered promiscuous mode [ 238.390596][ T50] Bluetooth: hci30: unexpected cc 0x0c38 length: 249 > 2 [ 238.401521][ T9289] rdma_rxe: rxe_newlink: failed to add veth0 [ 238.426078][ T9207] veth1_macvtap: entered promiscuous mode [ 238.452497][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.471923][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.518038][ T906] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.531316][ T906] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.548913][ T906] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.567316][ T906] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.723388][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.746245][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.775426][ T50] Bluetooth: hci29: command tx timeout [ 238.784187][ T5620] Bluetooth: hci28: command tx timeout [ 238.787773][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.798216][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.121147][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.910'. [ 240.467541][ T5620] Bluetooth: hci30: command tx timeout [ 240.854373][ T5620] Bluetooth: hci28: command tx timeout [ 240.854833][ T5626] Bluetooth: hci29: command tx timeout [ 241.115774][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.123507][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.131103][ T9286] bridge_slave_0: entered allmulticast mode [ 241.138727][ T9286] bridge_slave_0: entered promiscuous mode [ 241.147295][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.154985][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.162293][ T9286] bridge_slave_1: entered allmulticast mode [ 241.169653][ T9286] bridge_slave_1: entered promiscuous mode [ 241.193627][ T9286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.210756][ T9286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.236489][ T9286] team0: Port device team_slave_0 added [ 241.244011][ T9286] team0: Port device team_slave_1 added [ 241.273202][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.280217][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.310433][ T9286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.322594][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.329645][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.357638][ T9286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.395684][ T9286] hsr_slave_0: entered promiscuous mode [ 241.408617][ T9286] hsr_slave_1: entered promiscuous mode [ 241.415809][ T9286] debugfs: 'hsr0' already exists in 'hsr' [ 241.421730][ T9286] Cannot create hsr debugfs directory [ 241.522949][ T9286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.597110][ T9286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.652719][ T9286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.698830][ T9286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.947406][ T9286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.968391][ T9286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.969082][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.921'. [ 241.983299][ T9286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.996414][ T9286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.005116][ T9286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.022106][ T9286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.031228][ T9286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.042760][ T9286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.056815][ T5626] Bluetooth: hci8: command 0x0406 tx timeout [ 242.058294][ T5620] Bluetooth: hci7: command 0x0406 tx timeout [ 242.182661][ T9349] tipc: Started in network mode [ 242.188946][ T9349] tipc: Node identity 1000001, cluster identity 4711 [ 242.196646][ T9349] tipc: Node number set to 16777217 [ 242.205964][ T9349] tipc: New replicast peer: 127.0.0.1 [ 242.211621][ T9349] tipc: Enabled bearer , priority 10 [ 242.247961][ T9286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.275489][ T9286] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.289144][ T906] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.296313][ T906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.309999][ T906] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.317148][ T906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.557192][ T50] Bluetooth: hci30: command tx timeout [ 242.639549][ T9286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.673966][ T9286] veth0_vlan: entered promiscuous mode [ 242.685386][ T9286] veth1_vlan: entered promiscuous mode [ 242.709821][ T9286] veth0_macvtap: entered promiscuous mode [ 242.718419][ T9286] veth1_macvtap: entered promiscuous mode [ 242.738570][ T9286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.752681][ T9286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.766980][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.779176][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.788723][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.797817][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.886835][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.895088][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.925231][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.933198][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.941914][ T50] Bluetooth: hci28: command tx timeout [ 242.944479][ T50] Bluetooth: hci29: command tx timeout [ 244.624527][ T50] Bluetooth: hci30: command tx timeout [ 245.104650][ T31] INFO: task syz.1.264:6507 blocked for more than 143 seconds. [ 245.114641][ T31] Not tainted syzkaller #0 [ 245.120656][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.129845][ T31] task:syz.1.264 state:D stack:28776 pid:6507 tgid:6504 ppid:5606 task_flags:0x400040 flags:0x00080002 [ 245.141951][ T31] Call Trace: [ 245.145372][ T31] [ 245.148314][ T31] __schedule+0x125c/0x6730 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 245.152813][ T31] ? do_raw_spin_lock+0x128/0x260 [ 245.158152][ T31] ? __pfx___schedule+0x10/0x10 [ 245.163632][ T31] ? find_held_lock+0x2b/0x80 [ 245.168476][ T31] ? schedule+0x225/0x2c0 [ 245.172822][ T31] schedule+0xdd/0x2c0 [ 245.178314][ T31] schedule_preempt_disabled+0x13/0x30 [ 245.183809][ T31] __mutex_lock+0xccc/0x1bd0 [ 245.188461][ T31] ? write_threads+0x278/0x570 [ 245.226592][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 245.241323][ T31] ? simple_strntoull+0xdf/0x170 [ 245.250081][ T31] ? __lock_acquire+0x49f/0x1a40 [ 245.257942][ T31] ? write_threads+0x278/0x570 [ 245.262761][ T31] write_threads+0x278/0x570 [ 245.267609][ T31] ? __pfx_write_threads+0x10/0x10 [ 245.272774][ T31] ? __might_fault+0xc5/0x140 [ 245.277526][ T31] ? _copy_from_user+0x59/0xd0 [ 245.282333][ T31] ? __pfx_write_threads+0x10/0x10 [ 245.287505][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 245.313093][ T31] vfs_write+0x2aa/0x1050 [ 245.318209][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 245.324543][ T31] ? __pfx_vfs_write+0x10/0x10 [ 245.329347][ T31] ? __fget_files+0x215/0x3d0 [ 245.334007][ T31] ? __fget_files+0x21f/0x3d0 [ 245.339563][ T31] ksys_write+0x12a/0x250 [ 245.343908][ T31] ? __pfx_ksys_write+0x10/0x10 [ 245.348848][ T31] do_syscall_64+0x115/0x870 [ 245.353456][ T31] ? clear_bhb_loop+0x40/0x90 [ 245.358286][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.364289][ T31] RIP: 0033:0x7f21fe99de99 [ 245.368697][ T31] RSP: 002b:00007f21ff918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.377325][ T31] RAX: ffffffffffffffda RBX: 00007f21fec26090 RCX: 00007f21fe99de99 [ 245.385338][ T31] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000004 [ 245.393288][ T31] RBP: 00007f21fea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 245.405220][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.413231][ T31] R13: 00007f21fec26128 R14: 00007f21fec26090 R15: 00007ffee1c6afc8 [ 245.422100][ T31] [ 245.425751][ T31] INFO: task syz.4.293:6633 blocked for more than 143 seconds. [ 245.433315][ T31] Not tainted syzkaller #0 [ 245.439477][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.448385][ T31] task:syz.4.293 state:D stack:28752 pid:6633 tgid:6631 ppid:5607 task_flags:0x400140 flags:0x00080002 [ 245.460379][ T31] Call Trace: [ 245.463656][ T31] [ 245.466707][ T31] __schedule+0x125c/0x6730 [ 245.471230][ T31] ? do_raw_spin_lock+0x128/0x260 [ 245.476290][ T31] ? __pfx___schedule+0x10/0x10 [ 245.481144][ T31] ? find_held_lock+0x2b/0x80 [ 245.485947][ T31] ? schedule+0x225/0x2c0 [ 245.490287][ T31] schedule+0xdd/0x2c0 [ 245.495205][ T31] schedule_preempt_disabled+0x13/0x30 [ 245.506105][ T31] __mutex_lock+0xccc/0x1bd0 [ 245.510827][ T31] ? write_ports+0xa5/0xcc0 [ 245.515389][ T31] ? nfsctl_transaction_write+0xcd/0x1a0 [ 245.521033][ T31] ? ksys_write+0x12a/0x250 [ 245.525671][ T31] ? do_syscall_64+0x115/0x870 [ 245.530458][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 245.535518][ T31] ? write_ports+0xa5/0xcc0 [ 245.540034][ T31] ? __lock_acquire+0x49f/0x1a40 [ 245.545087][ T31] write_ports+0xa5/0xcc0 [ 245.549439][ T31] ? __pfx_write_ports+0x10/0x10 [ 245.554559][ T31] ? find_held_lock+0x2b/0x80 [ 245.559278][ T31] ? __might_fault+0xc5/0x140 [ 245.563951][ T31] ? __might_fault+0xc5/0x140 [ 245.568785][ T31] ? __pfx_write_ports+0x10/0x10 [ 245.573746][ T31] ? _copy_from_user+0x59/0xd0 [ 245.579332][ T31] ? __pfx_write_ports+0x10/0x10 [ 245.585829][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 245.591504][ T31] vfs_write+0x2aa/0x1050 [ 245.596027][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 245.607328][ T31] ? __pfx_vfs_write+0x10/0x10 [ 245.612149][ T31] ? __fget_files+0x215/0x3d0 [ 245.616852][ T31] ? __fget_files+0x21f/0x3d0 [ 245.621527][ T31] ksys_write+0x12a/0x250 [ 245.625950][ T31] ? __pfx_ksys_write+0x10/0x10 [ 245.630818][ T31] do_syscall_64+0x115/0x870 [ 245.635431][ T31] ? clear_bhb_loop+0x40/0x90 [ 245.640113][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.646151][ T31] RIP: 0033:0x7fb194b9de99 [ 245.650582][ T31] RSP: 002b:00007fb195a35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.659678][ T31] RAX: ffffffffffffffda RBX: 00007fb194e25fa0 RCX: 00007fb194b9de99 [ 245.668067][ T31] RDX: 0000000000000009 RSI: 0000200000000240 RDI: 0000000000000003 [ 245.676198][ T31] RBP: 00007fb194c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 245.684259][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.692211][ T31] R13: 00007fb194e26038 R14: 00007fb194e25fa0 R15: 00007fffe04173f8 [ 245.700284][ T31] [ 245.708609][ T31] INFO: task syz.4.293:6637 blocked for more than 143 seconds. [ 245.716287][ T31] Not tainted syzkaller #0 [ 245.721306][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.730030][ T31] task:syz.4.293 state:D stack:28776 pid:6637 tgid:6631 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 245.744692][ T31] Call Trace: [ 245.748143][ T31] [ 245.751095][ T31] __schedule+0x125c/0x6730 [ 245.755685][ T31] ? do_raw_spin_lock+0x128/0x260 [ 245.760731][ T31] ? __pfx___schedule+0x10/0x10 [ 245.765660][ T31] ? find_held_lock+0x2b/0x80 [ 245.770364][ T31] ? schedule+0x225/0x2c0 [ 245.774880][ T31] schedule+0xdd/0x2c0 [ 245.778972][ T31] schedule_preempt_disabled+0x13/0x30 [ 245.784713][ T31] __mutex_lock+0xccc/0x1bd0 [ 245.789331][ T31] ? write_threads+0x278/0x570 [ 245.794162][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 245.799203][ T31] ? simple_strntoull+0xdf/0x170 [ 245.809745][ T31] ? __lock_acquire+0x49f/0x1a40 [ 245.815188][ T31] ? write_threads+0x278/0x570 [ 245.820058][ T31] write_threads+0x278/0x570 [ 245.824909][ T31] ? __pfx_write_threads+0x10/0x10 [ 245.830039][ T31] ? __might_fault+0xc5/0x140 [ 245.834784][ T31] ? _copy_from_user+0x59/0xd0 [ 245.839553][ T31] ? __pfx_write_threads+0x10/0x10 [ 245.844792][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 245.850353][ T31] vfs_write+0x2aa/0x1050 [ 245.854719][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 245.860801][ T31] ? __pfx_vfs_write+0x10/0x10 [ 245.865688][ T31] ? __fget_files+0x215/0x3d0 [ 245.870371][ T31] ? __fget_files+0x21f/0x3d0 [ 245.875077][ T31] ksys_write+0x12a/0x250 [ 245.879408][ T31] ? __pfx_ksys_write+0x10/0x10 [ 245.884328][ T31] do_syscall_64+0x115/0x870 [ 245.888932][ T31] ? clear_bhb_loop+0x40/0x90 [ 245.893589][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.901105][ T31] RIP: 0033:0x7fb194b9de99 [ 245.905643][ T31] RSP: 002b:00007fb195a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.918213][ T31] RAX: ffffffffffffffda RBX: 00007fb194e26090 RCX: 00007fb194b9de99 [ 245.926425][ T31] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 245.934468][ T31] RBP: 00007fb194c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 245.942438][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.950438][ T31] R13: 00007fb194e26128 R14: 00007fb194e26090 R15: 00007fffe04173f8 [ 245.958473][ T31] [ 245.961510][ T31] INFO: task syz.2.308:6674 blocked for more than 144 seconds. [ 245.971078][ T31] Not tainted syzkaller #0 [ 245.976641][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.985358][ T31] task:syz.2.308 state:D stack:28104 pid:6674 tgid:6673 ppid:5608 task_flags:0x400140 flags:0x00080002 [ 245.997279][ T31] Call Trace: [ 246.000556][ T31] [ 246.003466][ T31] __schedule+0x125c/0x6730 [ 246.008019][ T31] ? do_raw_spin_lock+0x128/0x260 [ 246.018211][ T31] ? __pfx___schedule+0x10/0x10 [ 246.023080][ T31] ? find_held_lock+0x2b/0x80 [ 246.027817][ T31] ? schedule+0x225/0x2c0 [ 246.032137][ T31] schedule+0xdd/0x2c0 [ 246.036422][ T31] schedule_preempt_disabled+0x13/0x30 [ 246.041888][ T31] __mutex_lock+0xccc/0x1bd0 [ 246.046517][ T31] ? write_versions+0x9d/0xba0 [ 246.051284][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 246.057106][ T31] ? __lock_acquire+0x49f/0x1a40 [ 246.062090][ T31] ? write_versions+0x9d/0xba0 [ 246.066901][ T31] write_versions+0x9d/0xba0 [ 246.071549][ T31] ? find_held_lock+0x2b/0x80 [ 246.076437][ T31] ? __pfx_write_versions+0x10/0x10 [ 246.081667][ T31] ? __pfx_write_versions+0x10/0x10 [ 246.086957][ T31] ? _copy_from_user+0x59/0xd0 [ 246.091771][ T31] ? __pfx_write_versions+0x10/0x10 [ 246.097008][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 246.102554][ T31] vfs_write+0x2aa/0x1050 [ 246.106924][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 246.118324][ T31] ? __pfx_vfs_write+0x10/0x10 [ 246.124497][ T31] ? __fget_files+0x215/0x3d0 [ 246.129216][ T31] ? __fget_files+0x21f/0x3d0 [ 246.133892][ T31] ksys_write+0x12a/0x250 [ 246.138550][ T31] ? __pfx_ksys_write+0x10/0x10 [ 246.143709][ T31] do_syscall_64+0x115/0x870 [ 246.148521][ T31] ? clear_bhb_loop+0x40/0x90 [ 246.153227][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.159357][ T31] RIP: 0033:0x7fb97219de99 [ 246.163785][ T31] RSP: 002b:00007fb9703f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.172324][ T31] RAX: ffffffffffffffda RBX: 00007fb972425fa0 RCX: 00007fb97219de99 [ 246.180538][ T31] RDX: 000000000000000d RSI: 0000200000000240 RDI: 0000000000000003 [ 246.188674][ T31] RBP: 00007fb972233eaf R08: 0000000000000000 R09: 0000000000000000 [ 246.196728][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.204764][ T31] R13: 00007fb972426038 R14: 00007fb972425fa0 R15: 00007fffe7512868 [ 246.212747][ T31] [ 246.223869][ T31] INFO: task syz.2.308:6679 blocked for more than 144 seconds. [ 246.231789][ T31] Not tainted syzkaller #0 [ 246.236781][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.245516][ T31] task:syz.2.308 state:D stack:28776 pid:6679 tgid:6673 ppid:5608 task_flags:0x400040 flags:0x00080002 [ 246.257710][ T31] Call Trace: [ 246.261002][ T31] [ 246.263914][ T31] __schedule+0x125c/0x6730 [ 246.268465][ T31] ? do_raw_spin_lock+0x128/0x260 [ 246.273494][ T31] ? __pfx___schedule+0x10/0x10 [ 246.278376][ T31] ? find_held_lock+0x2b/0x80 [ 246.283054][ T31] ? schedule+0x225/0x2c0 [ 246.287433][ T31] schedule+0xdd/0x2c0 [ 246.291492][ T31] schedule_preempt_disabled+0x13/0x30 [ 246.297278][ T31] __mutex_lock+0xccc/0x1bd0 [ 246.301880][ T31] ? write_ports+0xa5/0xcc0 [ 246.306696][ T31] ? nfsctl_transaction_write+0xcd/0x1a0 [ 246.312358][ T31] ? ksys_write+0x12a/0x250 [ 246.322528][ T31] ? do_syscall_64+0x115/0x870 [ 246.327428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 246.332489][ T31] ? write_ports+0xa5/0xcc0 [ 246.337904][ T31] ? __lock_acquire+0x49f/0x1a40 [ 246.342878][ T31] write_ports+0xa5/0xcc0 [ 246.347281][ T31] ? __pfx_write_ports+0x10/0x10 [ 246.352236][ T31] ? find_held_lock+0x2b/0x80 [ 246.356979][ T31] ? __might_fault+0xc5/0x140 [ 246.361660][ T31] ? __might_fault+0xc5/0x140 [ 246.366504][ T31] ? __pfx_write_ports+0x10/0x10 [ 246.371497][ T31] ? _copy_from_user+0x59/0xd0 [ 246.381362][ T31] ? __pfx_write_ports+0x10/0x10 [ 246.386388][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 246.391953][ T31] vfs_write+0x2aa/0x1050 [ 246.396328][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 246.402413][ T31] ? __pfx_vfs_write+0x10/0x10 [ 246.407232][ T31] ? __fget_files+0x215/0x3d0 [ 246.411908][ T31] ? __fget_files+0x21f/0x3d0 [ 246.416645][ T31] ksys_write+0x12a/0x250 [ 246.426237][ T31] ? __pfx_ksys_write+0x10/0x10 [ 246.431204][ T31] do_syscall_64+0x115/0x870 [ 246.435886][ T31] ? clear_bhb_loop+0x40/0x90 [ 246.440572][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.446753][ T31] RIP: 0033:0x7fb97219de99 [ 246.451191][ T31] RSP: 002b:00007fb9703d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.460628][ T31] RAX: ffffffffffffffda RBX: 00007fb972426090 RCX: 00007fb97219de99 [ 246.468706][ T31] RDX: 0000000000000009 RSI: 00002000000002c0 RDI: 0000000000000003 [ 246.476813][ T31] RBP: 00007fb972233eaf R08: 0000000000000000 R09: 0000000000000000 [ 246.484915][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.492883][ T31] R13: 00007fb972426128 R14: 00007fb972426090 R15: 00007fffe7512868 [ 246.500911][ T31] [ 246.503941][ T31] INFO: task syz.2.308:6681 blocked for more than 144 seconds. [ 246.512889][ T31] Not tainted syzkaller #0 [ 246.517852][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.532663][ T31] task:syz.2.308 state:D stack:28776 pid:6681 tgid:6673 ppid:5608 task_flags:0x400040 flags:0x00080002 [ 246.545149][ T31] Call Trace: [ 246.548445][ T31] [ 246.551358][ T31] __schedule+0x125c/0x6730 [ 246.556360][ T31] ? do_raw_spin_lock+0x128/0x260 [ 246.561417][ T31] ? __pfx___schedule+0x10/0x10 [ 246.566372][ T31] ? find_held_lock+0x2b/0x80 [ 246.571055][ T31] ? schedule+0x225/0x2c0 [ 246.575414][ T31] schedule+0xdd/0x2c0 [ 246.579486][ T31] schedule_preempt_disabled+0x13/0x30 [ 246.584976][ T31] __mutex_lock+0xccc/0x1bd0 [ 246.589571][ T31] ? write_threads+0x278/0x570 [ 246.594373][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 246.599401][ T31] ? simple_strntoull+0xdf/0x170 [ 246.604430][ T31] ? __lock_acquire+0x49f/0x1a40 [ 246.609401][ T31] ? write_threads+0x278/0x570 [ 246.614429][ T31] write_threads+0x278/0x570 [ 246.619025][ T31] ? __pfx_write_threads+0x10/0x10 [ 246.629601][ T31] ? __might_fault+0xc5/0x140 [ 246.634362][ T31] ? _copy_from_user+0x59/0xd0 [ 246.639190][ T31] ? __pfx_write_threads+0x10/0x10 [ 246.644355][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 246.649910][ T31] vfs_write+0x2aa/0x1050 [ 246.654271][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 246.660359][ T31] ? __pfx_vfs_write+0x10/0x10 [ 246.665296][ T31] ? __fget_files+0x215/0x3d0 [ 246.669992][ T31] ? __fget_files+0x21f/0x3d0 [ 246.675179][ T31] ksys_write+0x12a/0x250 [ 246.679533][ T31] ? __pfx_ksys_write+0x10/0x10 [ 246.684617][ T31] do_syscall_64+0x115/0x870 [ 246.689209][ T31] ? clear_bhb_loop+0x40/0x90 [ 246.693867][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.700056][ T50] Bluetooth: hci30: command tx timeout [ 246.705969][ T31] RIP: 0033:0x7fb97219de99 [ 246.710401][ T31] RSP: 002b:00007fb9703b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.718871][ T31] RAX: ffffffffffffffda RBX: 00007fb972426180 RCX: 00007fb97219de99 [ 246.732835][ T31] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 246.741082][ T31] RBP: 00007fb972233eaf R08: 0000000000000000 R09: 0000000000000000 [ 246.749098][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.757095][ T31] R13: 00007fb972426218 R14: 00007fb972426180 R15: 00007fffe7512868 [ 246.765279][ T31] [ 246.768304][ T31] INFO: task syz.0.314:6696 blocked for more than 145 seconds. [ 246.776135][ T31] Not tainted syzkaller #0 [ 246.781077][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.789828][ T31] task:syz.0.314 state:D stack:28776 pid:6696 tgid:6695 ppid:5609 task_flags:0x400140 flags:0x00080002 [ 246.801811][ T31] Call Trace: [ 246.805120][ T31] [ 246.808057][ T31] __schedule+0x125c/0x6730 [ 246.812554][ T31] ? do_raw_spin_lock+0x128/0x260 [ 246.817623][ T31] ? __pfx___schedule+0x10/0x10 [ 246.822463][ T31] ? find_held_lock+0x2b/0x80 [ 246.827172][ T31] ? schedule+0x225/0x2c0 [ 246.836730][ T31] schedule+0xdd/0x2c0 [ 246.840861][ T31] schedule_preempt_disabled+0x13/0x30 [ 246.846380][ T31] __mutex_lock+0xccc/0x1bd0 [ 246.850962][ T31] ? write_versions+0x9d/0xba0 [ 246.856881][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 246.861978][ T31] ? __lock_acquire+0x49f/0x1a40 [ 246.867373][ T31] ? write_versions+0x9d/0xba0 [ 246.872241][ T31] write_versions+0x9d/0xba0 [ 246.877095][ T31] ? find_held_lock+0x2b/0x80 [ 246.881793][ T31] ? __pfx_write_versions+0x10/0x10 [ 246.887215][ T31] ? __pfx_write_versions+0x10/0x10 [ 246.892461][ T31] ? _copy_from_user+0x59/0xd0 [ 246.897264][ T31] ? __pfx_write_versions+0x10/0x10 [ 246.902468][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 246.908068][ T31] vfs_write+0x2aa/0x1050 [ 246.912414][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 246.918554][ T31] ? __pfx_vfs_write+0x10/0x10 [ 246.923322][ T31] ? __fget_files+0x215/0x3d0 [ 246.928055][ T31] ? __fget_files+0x21f/0x3d0 [ 246.938836][ T31] ksys_write+0x12a/0x250 [ 246.943231][ T31] ? __pfx_ksys_write+0x10/0x10 [ 246.948162][ T31] do_syscall_64+0x115/0x870 [ 246.952762][ T31] ? clear_bhb_loop+0x40/0x90 [ 246.957465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.963353][ T31] RIP: 0033:0x7f1cdbb9de99 [ 246.967811][ T31] RSP: 002b:00007f1cdcab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.976258][ T31] RAX: ffffffffffffffda RBX: 00007f1cdbe25fa0 RCX: 00007f1cdbb9de99 [ 246.984270][ T31] RDX: 0000000000000006 RSI: 00002000000001c0 RDI: 0000000000000004 [ 246.992243][ T31] RBP: 00007f1cdbc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 247.000433][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.008460][ T31] R13: 00007f1cdbe26038 R14: 00007f1cdbe25fa0 R15: 00007ffda770e538 [ 247.019724][ T31] [ 247.022814][ T31] INFO: task syz.0.314:6700 blocked for more than 145 seconds. [ 247.049421][ T31] Not tainted syzkaller #0 [ 247.068312][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.077153][ T31] task:syz.0.314 state:D stack:28776 pid:6700 tgid:6695 ppid:5609 task_flags:0x400040 flags:0x00080002 [ 247.089158][ T31] Call Trace: [ 247.092428][ T31] [ 247.095812][ T31] __schedule+0x125c/0x6730 [ 247.100349][ T31] ? do_raw_spin_lock+0x128/0x260 [ 247.105716][ T31] ? __pfx___schedule+0x10/0x10 [ 247.110588][ T31] ? find_held_lock+0x2b/0x80 [ 247.115442][ T31] ? schedule+0x225/0x2c0 [ 247.119792][ T31] schedule+0xdd/0x2c0 [ 247.123873][ T31] schedule_preempt_disabled+0x13/0x30 [ 247.129474][ T31] __mutex_lock+0xccc/0x1bd0 [ 247.134157][ T31] ? write_ports+0xa5/0xcc0 [ 247.144784][ T31] ? nfsctl_transaction_write+0xcd/0x1a0 [ 247.150489][ T31] ? ksys_write+0x12a/0x250 [ 247.155277][ T31] ? do_syscall_64+0x115/0x870 [ 247.160059][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 247.165183][ T31] ? write_ports+0xa5/0xcc0 [ 247.169703][ T31] ? __lock_acquire+0x49f/0x1a40 [ 247.175222][ T31] write_ports+0xa5/0xcc0 [ 247.179766][ T31] ? __pfx_write_ports+0x10/0x10 [ 247.184850][ T31] ? find_held_lock+0x2b/0x80 [ 247.189560][ T31] ? __might_fault+0xc5/0x140 [ 247.194496][ T31] ? __might_fault+0xc5/0x140 [ 247.199190][ T31] ? __pfx_write_ports+0x10/0x10 [ 247.204271][ T31] ? _copy_from_user+0x59/0xd0 [ 247.209039][ T31] ? __pfx_write_ports+0x10/0x10 [ 247.213971][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 247.219552][ T31] vfs_write+0x2aa/0x1050 [ 247.223882][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 247.230092][ T31] ? __pfx_vfs_write+0x10/0x10 [ 247.234952][ T31] ? __fget_files+0x215/0x3d0 [ 247.245938][ T31] ? __fget_files+0x21f/0x3d0 [ 247.250697][ T31] ksys_write+0x12a/0x250 [ 247.256971][ T31] ? __pfx_ksys_write+0x10/0x10 [ 247.261951][ T31] ? kcov_ioctl+0x17a/0x750 [ 247.266575][ T31] do_syscall_64+0x115/0x870 [ 247.271196][ T31] ? clear_bhb_loop+0x40/0x90 [ 247.276023][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.281938][ T31] RIP: 0033:0x7f1cdbb9de99 [ 247.286471][ T31] RSP: 002b:00007f1cdca92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.294976][ T31] RAX: ffffffffffffffda RBX: 00007f1cdbe26090 RCX: 00007f1cdbb9de99 [ 247.302960][ T31] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000005 [ 247.310963][ T31] RBP: 00007f1cdbc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 247.318972][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.327145][ T31] R13: 00007f1cdbe26128 R14: 00007f1cdbe26090 R15: 00007ffda770e538 [ 247.335480][ T31] [ 247.338564][ T31] INFO: task syz.0.314:6701 blocked for more than 145 seconds. [ 247.349315][ T31] Not tainted syzkaller #0 [ 247.357129][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.366675][ T31] task:syz.0.314 state:D stack:28776 pid:6701 tgid:6695 ppid:5609 task_flags:0x400040 flags:0x00080002 [ 247.378670][ T31] Call Trace: [ 247.381949][ T31] [ 247.384969][ T31] __schedule+0x125c/0x6730 [ 247.389497][ T31] ? do_raw_spin_lock+0x128/0x260 [ 247.394573][ T31] ? __pfx___schedule+0x10/0x10 [ 247.399423][ T31] ? find_held_lock+0x2b/0x80 [ 247.404178][ T31] ? schedule+0x225/0x2c0 [ 247.408514][ T31] schedule+0xdd/0x2c0 [ 247.412562][ T31] schedule_preempt_disabled+0x13/0x30 [ 247.418506][ T31] __mutex_lock+0xccc/0x1bd0 [ 247.423167][ T31] ? write_threads+0x278/0x570 [ 247.428079][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 247.433127][ T31] ? simple_strntoull+0xdf/0x170 [ 247.438229][ T31] ? __lock_acquire+0x49f/0x1a40 [ 247.448451][ T31] ? write_threads+0x278/0x570 [ 247.454445][ T31] write_threads+0x278/0x570 [ 247.459054][ T31] ? __pfx_write_threads+0x10/0x10 [ 247.464236][ T31] ? __might_fault+0xc5/0x140 [ 247.468925][ T31] ? _copy_from_user+0x59/0xd0 [ 247.473672][ T31] ? __pfx_write_threads+0x10/0x10 [ 247.478828][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 247.484454][ T31] vfs_write+0x2aa/0x1050 [ 247.488810][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 247.496059][ T31] ? __pfx_vfs_write+0x10/0x10 [ 247.500866][ T31] ? __fget_files+0x215/0x3d0 [ 247.507654][ T31] ? __fget_files+0x21f/0x3d0 [ 247.512360][ T31] ksys_write+0x12a/0x250 [ 247.516721][ T31] ? __pfx_ksys_write+0x10/0x10 [ 247.521568][ T31] ? kcov_ioctl+0x17a/0x750 [ 247.526149][ T31] do_syscall_64+0x115/0x870 [ 247.530756][ T31] ? clear_bhb_loop+0x40/0x90 [ 247.535549][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.541447][ T31] RIP: 0033:0x7f1cdbb9de99 [ 247.551354][ T31] RSP: 002b:00007f1cdca71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.559816][ T31] RAX: ffffffffffffffda RBX: 00007f1cdbe26180 RCX: 00007f1cdbb9de99 [ 247.567892][ T31] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000006 [ 247.576434][ T31] RBP: 00007f1cdbc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 247.586224][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.594311][ T31] R13: 00007f1cdbe26218 R14: 00007f1cdbe26180 R15: 00007ffda770e538 [ 247.602298][ T31] [ 247.605684][ T31] [ 247.605684][ T31] Showing all locks held in the system: [ 247.613409][ T31] 5 locks held by kworker/u8:1/13: [ 247.618653][ T31] 2 locks held by ksoftirqd/0/15: [ 247.623695][ T31] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 247.634773][ T31] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 247.643514][ T31] 1 lock held by khungtaskd/31: [ 247.680814][ T31] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 247.693580][ T31] 2 locks held by getty/5365: [ 247.698375][ T31] #0: ffff888036fc10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 247.708225][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 247.718524][ T31] 3 locks held by syz.1.264/6506: [ 247.723537][ T31] #0: ffff88807b618d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 247.732653][ T31] #1: ffff888076c62450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 247.743992][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 247.758435][ T31] 3 locks held by syz.1.264/6507: [ 247.763485][ T31] #0: ffff88807f4be470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 247.772599][ T31] #1: ffff888076c62450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 247.781707][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 247.790956][ T31] 3 locks held by syz.4.293/6633: [ 247.795998][ T31] #0: ffff888032e9cef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 247.805116][ T31] #1: ffff88807ec7e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 247.815870][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 247.824870][ T31] 3 locks held by syz.4.293/6637: [ 247.829944][ T31] #0: ffff8880790640f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 247.839033][ T31] #1: ffff88807ec7e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 247.848184][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 247.862783][ T31] 3 locks held by syz.2.308/6674: [ 247.867914][ T31] #0: ffff888032525270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 247.877030][ T31] #1: ffff888054602450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 247.886150][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 247.896544][ T31] 3 locks held by syz.2.308/6679: [ 247.901590][ T31] #0: ffff8880791e8470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 247.910667][ T31] #1: ffff888054602450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 247.919803][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 247.928717][ T31] 3 locks held by syz.2.308/6681: [ 247.933767][ T31] #0: ffff8880791e8ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 247.942874][ T31] #1: ffff888054602450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 247.952080][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 247.965505][ T31] 3 locks held by syz.0.314/6696: [ 247.970544][ T31] #0: ffff888075908b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 247.980638][ T31] #1: ffff8880754e8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 247.990022][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 247.999232][ T31] 3 locks held by syz.0.314/6700: [ 248.004475][ T31] #0: ffff888075408b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.013562][ T31] #1: ffff8880754e8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.022673][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.031547][ T31] 3 locks held by syz.0.314/6701: [ 248.036623][ T31] #0: ffff8880754080f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.045709][ T31] #1: ffff8880754e8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.055293][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.069694][ T31] 3 locks held by syz.5.376/6888: [ 248.074786][ T31] #0: ffff88803526fcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.083846][ T31] #1: ffff88801eb16450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.092956][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.101875][ T31] 3 locks held by syz.5.376/6892: [ 248.106947][ T31] #0: ffff88802e36d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.116139][ T31] #1: ffff88801eb16450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.125232][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.134972][ T31] 3 locks held by syz.6.400/7063: [ 248.140019][ T31] #0: ffff888031eefeb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.149173][ T31] #1: ffff88807d50a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.158316][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.171664][ T31] 3 locks held by syz.6.400/7066: [ 248.176786][ T31] #0: ffff888032e9db30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.185887][ T31] #1: ffff88807d50a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.194996][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.203853][ T31] 3 locks held by syz.3.413/7100: [ 248.208946][ T31] #0: ffff888031f0e0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.219164][ T31] #1: ffff888079942450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.229681][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 248.238897][ T31] 3 locks held by syz.3.413/7101: [ 248.243933][ T31] #0: ffff888032525eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.253047][ T31] #1: ffff888079942450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.267275][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.276168][ T31] 3 locks held by syz.3.413/7102: [ 248.281190][ T31] #0: ffff888031f0feb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.290271][ T31] #1: ffff888079942450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.303744][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.318150][ T31] 3 locks held by syz.7.416/7109: [ 248.323234][ T31] #0: ffff88803527ad30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.332331][ T31] #1: ffff8880237da450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.341437][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 248.350615][ T31] 3 locks held by syz.7.416/7110: [ 248.355717][ T31] #0: ffff8880352697b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.370254][ T31] #1: ffff8880237da450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.380807][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.389700][ T31] 3 locks held by syz.7.416/7111: [ 248.394884][ T31] #0: ffff8880352690b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.403960][ T31] #1: ffff8880237da450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.413098][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.422185][ T31] 3 locks held by syz.8.417/7114: [ 248.427230][ T31] #0: ffff888035285270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.436319][ T31] #1: ffff888026d2c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.445425][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.455025][ T31] 3 locks held by syz.8.417/7115: [ 248.460163][ T31] #0: ffff888079069eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.474601][ T31] #1: ffff888026d2c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.483712][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.492992][ T31] 3 locks held by syz.1.462/7350: [ 248.498275][ T31] #0: ffff88807f4b9970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.507560][ T31] #1: ffff8880266e6450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.516894][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.525758][ T31] 3 locks held by syz.1.462/7351: [ 248.530793][ T31] #0: ffff88807a025970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.540151][ T31] #1: ffff8880266e6450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.549417][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.558569][ T31] 3 locks held by syz.4.477/7438: [ 248.563581][ T31] #0: ffff88802ba889b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.578004][ T31] #1: ffff88804397a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.587185][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.596212][ T31] 3 locks held by syz.4.477/7439: [ 248.601246][ T31] #0: ffff88807ad14ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.610374][ T31] #1: ffff88804397a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.621522][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.631536][ T31] 3 locks held by syz.9.490/7475: [ 248.636829][ T31] #0: ffff888035922d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.646116][ T31] #1: ffff888043528450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.655360][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.664402][ T31] 3 locks held by syz.9.490/7479: [ 248.669441][ T31] #0: ffff888037ad9970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.685016][ T31] #1: ffff888043528450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.694809][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.703907][ T31] 3 locks held by syz.2.512/7529: [ 248.708974][ T31] #0: ffff88807e674ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.718071][ T31] #1: ffff888026bc8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.727190][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 248.736281][ T31] 3 locks held by syz.2.512/7532: [ 248.741293][ T31] #0: ffff888033673970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.750367][ T31] #1: ffff888026bc8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.759569][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.768449][ T31] 3 locks held by syz.2.512/7533: [ 248.773477][ T31] #0: ffff8880378cb270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.789914][ T31] #1: ffff888026bc8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.799095][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.808277][ T31] 3 locks held by syz.2.512/7538: [ 248.813284][ T31] #0: ffff88807e692630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.822404][ T31] #1: ffff888026bc8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.831530][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.840614][ T31] 3 locks held by syz.0.516/7545: [ 248.845665][ T31] #0: ffff88807f4bf430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.855168][ T31] #1: ffff888037ed0450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.864310][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.873120][ T31] 3 locks held by syz.0.516/7546: [ 248.885787][ T31] #0: ffff88807e6742b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.895133][ T31] #1: ffff888037ed0450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.904291][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.913363][ T31] 3 locks held by syz.5.526/7766: [ 248.918486][ T31] #0: ffff888075b7d0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.927621][ T31] #1: ffff88806800e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.939294][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 248.949109][ T31] 3 locks held by syz.5.526/7767: [ 248.954218][ T31] #0: ffff88802bfc4b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 248.963290][ T31] #1: ffff88806800e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 248.972384][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 248.987471][ T31] 4 locks held by kworker/u8:9/7890: [ 248.992769][ T31] 3 locks held by syz.8.559/7937: [ 248.997819][ T31] #0: ffff88807a0547f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.007005][ T31] #1: ffff88802bab4450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.016428][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 249.028191][ T31] 3 locks held by syz.8.559/7940: [ 249.033242][ T31] #0: ffff888078b40630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.042553][ T31] #1: ffff88802bab4450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.051784][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.060669][ T31] 3 locks held by syz.8.559/7944: [ 249.065816][ T31] #0: ffff888075b79970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.075002][ T31] #1: ffff88802bab4450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.091295][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.101030][ T31] 3 locks held by syz.3.581/7991: [ 249.106091][ T31] #0: ffff888075a5deb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.115244][ T31] #1: ffff888053e7c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.124342][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 249.133388][ T31] 3 locks held by syz.3.581/7996: [ 249.138494][ T31] #0: ffff8880739b7270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.147696][ T31] #1: ffff888053e7c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.156831][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.165664][ T31] 3 locks held by syz.3.581/7999: [ 249.170672][ T31] #0: ffff8880739b6470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.180020][ T31] #1: ffff888053e7c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.194741][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.203856][ T31] 3 locks held by syz.3.581/8002: [ 249.209602][ T31] #0: ffff888031effcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.218759][ T31] #1: ffff888053e7c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.227888][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.236938][ T31] 3 locks held by syz.3.581/8003: [ 249.241948][ T31] #0: ffff88807ee99b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.251039][ T31] #1: ffff888053e7c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.260950][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.270071][ T31] 3 locks held by syz.6.590/8021: [ 249.275119][ T31] #0: ffff8880336749b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.284183][ T31] #1: ffff88802e110450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.298071][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.307230][ T31] 3 locks held by syz.7.671/8280: [ 249.312250][ T31] #0: ffff8880796c40f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.321508][ T31] #1: ffff88804cdb8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.330639][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 249.341546][ T31] 3 locks held by syz.7.671/8286: [ 249.346644][ T31] #0: ffff888075942b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.355787][ T31] #1: ffff88804cdb8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.365079][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.373896][ T31] 3 locks held by syz.7.671/8288: [ 249.378963][ T31] #0: ffff8880790d50b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.393817][ T31] #1: ffff88804cdb8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.402977][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.412167][ T31] 3 locks held by syz.9.706/8454: [ 249.417242][ T31] #0: ffff8880352749b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.426397][ T31] #1: ffff8880315c6450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.435518][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 249.444639][ T31] 3 locks held by syz.9.706/8455: [ 249.449659][ T31] #0: ffff88807392a630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.458747][ T31] #1: ffff8880315c6450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.467878][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.476898][ T31] 3 locks held by syz.9.706/8464: [ 249.481929][ T31] #0: ffff88807d4157b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.497652][ T31] #1: ffff8880315c6450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.506841][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.515973][ T31] 3 locks held by syz.1.713/8482: [ 249.520992][ T31] #0: ffff88807969bcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.530082][ T31] #1: ffff8880a1f50450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.539182][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.548003][ T31] 3 locks held by syz.1.713/8487: [ 249.553017][ T31] #0: ffff8880798762b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.562104][ T31] #1: ffff8880a1f50450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.571206][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.584624][ T31] 3 locks held by syz.1.713/8490: [ 249.589789][ T31] #0: ffff8880798775f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.605813][ T31] #1: ffff8880a1f50450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.614990][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.624109][ T31] 3 locks held by syz.2.725/8524: [ 249.629124][ T31] #0: ffff888031eff5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.638222][ T31] #1: ffff888043fd2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.647358][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 249.657930][ T31] 3 locks held by syz.2.725/8525: [ 249.662978][ T31] #0: ffff888031eff270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.672049][ T31] #1: ffff888043fd2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.681174][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.690048][ T31] 3 locks held by syz.2.725/8526: [ 249.702365][ T31] #0: ffff888036aaf430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.711511][ T31] #1: ffff888043fd2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.720648][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.729767][ T31] 3 locks held by syz.0.769/8672: [ 249.735357][ T31] #0: ffff888069c209b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.744557][ T31] #1: ffff8880340d8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.753672][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.762505][ T31] 3 locks held by syz.0.769/8673: [ 249.767562][ T31] #0: ffff888069c20630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.776663][ T31] #1: ffff8880340d8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.785782][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.794877][ T31] 3 locks held by syz.3.836/8958: [ 249.806789][ T31] #0: ffff888032ec8630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.817044][ T31] #1: ffff88802bd84450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.826341][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 249.835470][ T31] 3 locks held by syz.3.836/8961: [ 249.840494][ T31] #0: ffff888079e8bcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.849665][ T31] #1: ffff88802bd84450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.858799][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 249.867625][ T31] 3 locks held by syz.3.836/8964: [ 249.872657][ T31] #0: ffff888075408630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.881793][ T31] #1: ffff88802bd84450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.890928][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.907257][ T31] 3 locks held by syz.4.840/8970: [ 249.912333][ T31] #0: ffff88807a054630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.921624][ T31] #1: ffff888033ce2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.930765][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 249.939909][ T31] 3 locks held by syz.4.840/8974: [ 249.945009][ T31] #0: ffff888075dd5970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.954140][ T31] #1: ffff888033ce2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.963214][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 249.972307][ T31] 3 locks held by syz.4.840/8977: [ 249.977797][ T31] #0: ffff88807f7a3eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 249.986956][ T31] #1: ffff888033ce2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 249.996072][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 250.010595][ T31] 3 locks held by syz.4.840/8981: [ 250.015710][ T31] #0: ffff888075b7d7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.024944][ T31] #1: ffff888033ce2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.034003][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 250.043096][ T31] 3 locks held by syz.5.862/9043: [ 250.048180][ T31] #0: ffff88807a92d970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.058455][ T31] #1: ffff88807ace6450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.068296][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 250.077428][ T31] 3 locks held by syz.5.862/9046: [ 250.082446][ T31] #0: ffff8880351bf430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.091564][ T31] #1: ffff88807ace6450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.100683][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 250.115076][ T31] 3 locks held by syz.5.862/9050: [ 250.120144][ T31] #0: ffff88815179f270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.129278][ T31] #1: ffff88807ace6450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.138591][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 250.147814][ T31] 3 locks held by syz.6.893/9167: [ 250.152853][ T31] #0: ffff88807f05c470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.161982][ T31] #1: ffff88807af96450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.171112][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 250.180231][ T31] 3 locks held by syz.6.893/9168: [ 250.185281][ T31] #0: ffff88807f05d970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.194360][ T31] #1: ffff88807af96450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.203431][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 250.231524][ T31] 3 locks held by syz.6.893/9169: [ 250.231811][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.236650][ T31] #0: ffff888026d0f270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.246492][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.252815][ T31] #1: ffff88807af96450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.268421][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 250.278046][ T31] 3 locks held by syz.8.903/9197: [ 250.283216][ T31] #0: ffff888075b9d270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.292406][ T31] #1: ffff88802a420450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.301964][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 250.317060][ T31] 3 locks held by syz.8.903/9198: [ 250.322152][ T31] #0: ffff888075b9cb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.331264][ T31] #1: ffff88802a420450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.340383][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 250.349255][ T31] 3 locks held by syz.8.903/9199: [ 250.354312][ T31] #0: ffff888075b9c0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.363376][ T31] #1: ffff88802a420450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.372516][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 250.382129][ T31] 3 locks held by syz.7.922/9347: [ 250.387865][ T31] #0: ffff888075f64b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.397004][ T31] #1: ffff8880aa6ec450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.406100][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 250.421324][ T31] 3 locks held by syz.7.922/9350: [ 250.426434][ T31] #0: ffff888069c200f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.437607][ T31] #1: ffff8880aa6ec450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.446728][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 250.455730][ T31] 3 locks held by syz.7.922/9351: [ 250.460771][ T31] #0: ffff888069c120f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.469855][ T31] #1: ffff8880aa6ec450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.478961][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 250.488040][ T31] 3 locks held by syz.1.906/9368: [ 250.493056][ T31] #0: ffff88814d8bc2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.502318][ T31] #1: ffff88815bd0a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.511484][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 250.526771][ T31] 3 locks held by syz.1.906/9369: [ 250.531836][ T31] #0: ffff88815c51e2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.541741][ T31] #1: ffff88815bd0a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.550893][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 250.559730][ T31] 3 locks held by syz.1.906/9370: [ 250.564784][ T31] #0: ffff88815c51e0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.573824][ T31] #1: ffff88815bd0a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.582926][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 250.592002][ T31] 3 locks held by syz.1.906/9373: [ 250.597068][ T31] #0: ffff88807d6380f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.606303][ T31] #1: ffff88815bd0a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.615846][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 250.630980][ T31] 3 locks held by syz.9.926/9380: [ 250.636119][ T31] #0: ffff8880222a6ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.645237][ T31] #1: ffff888033adc450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.654395][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 250.663199][ T31] 3 locks held by syz.9.926/9381: [ 250.668267][ T31] #0: ffff8880222a6d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 250.677382][ T31] #1: ffff888033adc450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 250.686508][ T31] #2: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 250.697091][ T31] [ 250.699452][ T31] ============================================= [ 250.699452][ T31] [ 250.708372][ T31] NMI backtrace for cpu 1 [ 250.708384][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 250.708397][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 250.708404][ T31] Call Trace: [ 250.708407][ T31] [ 250.708412][ T31] dump_stack_lvl+0x100/0x190 [ 250.708430][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 250.708446][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 250.708463][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 250.708483][ T31] sys_info+0x141/0x190 [ 250.708498][ T31] watchdog+0xcb1/0x1030 [ 250.708514][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 250.708526][ T31] ? __pfx_watchdog+0x10/0x10 [ 250.708540][ T31] ? __kthread_parkme+0x18c/0x230 [ 250.708558][ T31] ? kthread+0x13a/0x450 [ 250.708568][ T31] ? __pfx_watchdog+0x10/0x10 [ 250.708581][ T31] kthread+0x370/0x450 [ 250.708591][ T31] ? __pfx_kthread+0x10/0x10 [ 250.708603][ T31] ret_from_fork+0x72b/0xd50 [ 250.708619][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 250.708636][ T31] ? __switch_to+0x800/0x10f0 [ 250.708648][ T31] ? __pfx_kthread+0x10/0x10 [ 250.708659][ T31] ret_from_fork_asm+0x1a/0x30 [ 250.708681][ T31] [ 250.708686][ T31] Sending NMI from CPU 1 to CPUs 0: [ 250.845830][ C0] NMI backtrace for cpu 0 [ 250.845847][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 250.845864][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 250.845872][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 250.845892][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 250.845905][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 250.845917][ C0] RAX: 0000000000286789 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 250.845926][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 250.845935][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 250.845944][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 250.845953][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 250.845963][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 250.845977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.845986][ C0] CR2: 000055de8c37fbe0 CR3: 000000000e994000 CR4: 00000000003526f0 [ 250.845995][ C0] Call Trace: [ 250.846001][ C0] [ 250.846005][ C0] default_idle+0x9/0x10 [ 250.846021][ C0] default_idle_call+0x6c/0xb0 [ 250.846038][ C0] do_idle+0x3a7/0x5b0 [ 250.846057][ C0] ? __pfx_do_idle+0x10/0x10 [ 250.846074][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 250.846094][ C0] cpu_startup_entry+0x4f/0x60 [ 250.846112][ C0] rest_init+0x251/0x260 [ 250.846129][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 250.846148][ C0] start_kernel+0x48e/0x490 [ 250.846165][ C0] x86_64_start_reservations+0x24/0x30 [ 250.846182][ C0] x86_64_start_kernel+0x12b/0x130 [ 250.846199][ C0] common_startup_64+0x13e/0x158 [ 250.846229][ C0] [ 251.046382][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 251.053244][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 251.062340][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 251.072380][ T31] Call Trace: [ 251.075645][ T31] [ 251.078558][ T31] dump_stack_lvl+0x100/0x190 [ 251.083227][ T31] vpanic+0x552/0x970 [ 251.087206][ T31] ? __pfx_vpanic+0x10/0x10 [ 251.091710][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 251.097871][ T31] panic+0xd1/0xe0 [ 251.101589][ T31] ? __pfx_panic+0x10/0x10 [ 251.105992][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 251.112138][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 251.118281][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 251.124424][ T31] ? watchdog.cold+0x1ec/0x234 [ 251.129175][ T31] ? watchdog+0xcc1/0x1030 [ 251.133595][ T31] watchdog.cold+0x1fd/0x234 [ 251.138201][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 251.144005][ T31] ? __pfx_watchdog+0x10/0x10 [ 251.148687][ T31] ? __kthread_parkme+0x18c/0x230 [ 251.153704][ T31] ? kthread+0x13a/0x450 [ 251.157939][ T31] ? __pfx_watchdog+0x10/0x10 [ 251.162609][ T31] kthread+0x370/0x450 [ 251.166660][ T31] ? __pfx_kthread+0x10/0x10 [ 251.171246][ T31] ret_from_fork+0x72b/0xd50 [ 251.175827][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 251.180930][ T31] ? __switch_to+0x800/0x10f0 [ 251.185601][ T31] ? __pfx_kthread+0x10/0x10 [ 251.190190][ T31] ret_from_fork_asm+0x1a/0x30 [ 251.194952][ T31] [ 251.198151][ T31] Kernel Offset: disabled [ 251.202454][ T31] Rebooting in 86400 seconds..