last executing test programs: 47.787745573s ago: executing program 2 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/tcp_migrate_req\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) listen(r2, 0x10) shutdown(r1, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x1, 0x4) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) listen(r3, 0x10) 46.92239133s ago: executing program 2 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x154}}, 0x0) 46.011309336s ago: executing program 2 (id=47): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x418e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x40041) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 45.540407938s ago: executing program 2 (id=51): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1002}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x1) write$tun(r1, &(0x7f0000000300)={@void, @val={0x1, 0x0, 0x36, 0x0, 0x36, 0x10}, @eth={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1e, 0x6, 0xff, @remote, @local, {[], {{0x1234, 0x4e22, 0x1001, 0x12345678, 0x0, 0x0, 0x5, 0x10, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x55667788, 0x11223344}]}}}}}}}}}, 0x6e) 44.499059487s ago: executing program 2 (id=60): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 44.167010292s ago: executing program 2 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10\n', 0x8c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000450)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000003000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) (async) 37.16941419s ago: executing program 3 (id=113): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000300)='syz_tun0:0\x00', 0xb) pread64(r2, &(0x7f0000000400)=""/11, 0xb, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000001000)={0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}) 37.006986356s ago: executing program 3 (id=114): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 36.821939728s ago: executing program 3 (id=117): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x30, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 36.519801641s ago: executing program 3 (id=121): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) 36.062887819s ago: executing program 3 (id=124): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 35.959536733s ago: executing program 3 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) close(r1) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000e00)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 testuser\n\x00', 0x76) close(r2) r3 = socket(0x2, 0x1, 0x0) connect(r3, &(0x7f0000001000)=@in={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000002000)="8000005c00000001000000000000000200000000000000000000000600000024000000010000000000000001000000030000000a7465737468616e646c6500000000000600000010040400ffffffffffff0000000000000000000000040000000000000000", 0x60) nanosleep(&(0x7f0000000c00)={0x0, 0xbebc200}, 0x0) 34.040272199s ago: executing program 0 (id=136): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@rdma_args={0x28, 0x114, 0x1, {{0x1}, {0x0, 0x1000}, &(0x7f0000000500)=[{0x0, 0x1000}], 0x1, 0x20, 0x1234}}], 0x28}, 0x0) 33.947718207s ago: executing program 0 (id=137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x601, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) 33.927859777s ago: executing program 0 (id=138): r0 = syz_usb_connect(0x0, 0x5b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b90661400000010200010902490002010080300904000000ff0000000904000102ff00000007058702000200070507020002000904010000ff0000000904010102ff0000000705880200020007050802000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket(0x8, 0x2, 0x0) ioctl(r1, 0x400861f2, &(0x7f0000000000)="6e61733000000000000000000000000000000000dc050000") setsockopt(r1, 0x108, 0x1, &(0x7f0000000100)="000000000000000000000000000200000002000000000000000000000000000000000000000000000002000000020000000000000000000000000500000000000000", 0x40) connect(r1, &(0x7f0000000200)=@generic={0x8, "0000000001002000"}, 0x10) ioctl(r1, 0x400461f1, &(0x7f0000000300)="010000006e61733000"/28) 31.209746462s ago: executing program 0 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x3c}}, 0x0) 31.157489612s ago: executing program 0 (id=157): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x30, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0xdd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 31.051510126s ago: executing program 0 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000380)={0x2, 0x801, @loopback}, 0x10) listen(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='5\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\n\x00', 0x2) 28.786600414s ago: executing program 32 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10\n', 0x8c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000450)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000003000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) (async) 23.106985703s ago: executing program 1 (id=187): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 23.082270624s ago: executing program 1 (id=188): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 22.936205881s ago: executing program 1 (id=189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) (async) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) setsockopt(r2, 0x6, 0x1f, &(0x7f0000000040)='espintcp\x00', 0x9) write(r1, &(0x7f0000000080)='\x00', 0x1) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000200)=""/2, 0x4) shutdown(r2, 0x2) 21.982995698s ago: executing program 1 (id=194): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 21.92913572s ago: executing program 1 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) listen(r0, 0x10) shutdown(r0, 0x2) 21.794922235s ago: executing program 1 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) 20.909134605s ago: executing program 33 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) close(r1) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000e00)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 testuser\n\x00', 0x76) close(r2) r3 = socket(0x2, 0x1, 0x0) connect(r3, &(0x7f0000001000)=@in={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000002000)="8000005c00000001000000000000000200000000000000000000000600000024000000010000000000000001000000030000000a7465737468616e646c6500000000000600000010040400ffffffffffff0000000000000000000000040000000000000000", 0x60) nanosleep(&(0x7f0000000c00)={0x0, 0xbebc200}, 0x0) 16.435678319s ago: executing program 4 (id=228): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 16.34216089s ago: executing program 4 (id=229): delete_module(&(0x7f0000000000)='rds\x00', 0x0) delete_module(&(0x7f0000000000)='rds_tcp\x00', 0x0) 16.210641507s ago: executing program 4 (id=230): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 16.120795205s ago: executing program 4 (id=231): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x14, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 15.904601636s ago: executing program 34 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000380)={0x2, 0x801, @loopback}, 0x10) listen(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='5\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\n\x00', 0x2) 15.881394954s ago: executing program 4 (id=233): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0xdd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 15.700769845s ago: executing program 4 (id=234): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 5.953607719s ago: executing program 35 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) 0s ago: executing program 36 (id=234): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 87.162548][ T32] cfg80211: failed to load regulatory.db [ 89.601624][ T5600] cgroup: Unknown subsys name 'net' [ 89.842652][ T5600] cgroup: Unknown subsys name 'cpuset' [ 89.898470][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.879070][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.462623][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.486921][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.505108][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.506695][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.525800][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.536973][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.537178][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.539566][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.547169][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.548289][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.551063][ T4915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.566233][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.576437][ T4915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.582174][ T4915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.599551][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.601231][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.648604][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.700417][ T4915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.734259][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.752096][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.639164][ T5624] Bluetooth: hci0: command tx timeout [ 96.639709][ T5624] Bluetooth: hci1: command tx timeout [ 96.808832][ T5632] Bluetooth: hci2: command tx timeout [ 96.877673][ T5632] Bluetooth: hci3: command tx timeout [ 96.972895][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.973481][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.973739][ T5619] bridge_slave_0: entered allmulticast mode [ 96.976206][ T5619] bridge_slave_0: entered promiscuous mode [ 97.022020][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.022261][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.022695][ T5617] bridge_slave_0: entered allmulticast mode [ 97.024768][ T5617] bridge_slave_0: entered promiscuous mode [ 97.028821][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.029154][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.029424][ T5619] bridge_slave_1: entered allmulticast mode [ 97.034069][ T5619] bridge_slave_1: entered promiscuous mode [ 97.035663][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.035976][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.036582][ T5618] bridge_slave_0: entered allmulticast mode [ 97.043437][ T5618] bridge_slave_0: entered promiscuous mode [ 97.076399][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.076720][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.077313][ T5617] bridge_slave_1: entered allmulticast mode [ 97.082886][ T5617] bridge_slave_1: entered promiscuous mode [ 97.113672][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.114000][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.114255][ T5618] bridge_slave_1: entered allmulticast mode [ 97.119208][ T5618] bridge_slave_1: entered promiscuous mode [ 97.121101][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.121421][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.125182][ T5616] bridge_slave_0: entered allmulticast mode [ 97.129649][ T5616] bridge_slave_0: entered promiscuous mode [ 97.206799][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.207011][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.207175][ T5616] bridge_slave_1: entered allmulticast mode [ 97.211495][ T5616] bridge_slave_1: entered promiscuous mode [ 97.244581][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.286263][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.295661][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.312275][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.435209][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.458352][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.463833][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.540099][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.565626][ T5619] team0: Port device team_slave_0 added [ 97.603040][ T5617] team0: Port device team_slave_0 added [ 97.606422][ T5619] team0: Port device team_slave_1 added [ 97.619759][ T5618] team0: Port device team_slave_0 added [ 97.644390][ T5617] team0: Port device team_slave_1 added [ 97.672955][ T5618] team0: Port device team_slave_1 added [ 97.676562][ T5616] team0: Port device team_slave_0 added [ 97.733552][ T5616] team0: Port device team_slave_1 added [ 97.753753][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.753767][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.753782][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.833148][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.833162][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.833179][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.835638][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.835650][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.835669][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.838900][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.838914][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.838937][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.872901][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.872920][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.872946][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.898989][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.899010][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.899035][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.902441][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.902457][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.902482][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.945864][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.945883][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.945908][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.144401][ T5619] hsr_slave_0: entered promiscuous mode [ 98.146951][ T5619] hsr_slave_1: entered promiscuous mode [ 98.197287][ T5617] hsr_slave_0: entered promiscuous mode [ 98.203493][ T5617] hsr_slave_1: entered promiscuous mode [ 98.205720][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 98.205847][ T5617] Cannot create hsr debugfs directory [ 98.242760][ T5618] hsr_slave_0: entered promiscuous mode [ 98.244316][ T5618] hsr_slave_1: entered promiscuous mode [ 98.245456][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 98.245484][ T5618] Cannot create hsr debugfs directory [ 98.262234][ T5616] hsr_slave_0: entered promiscuous mode [ 98.264551][ T5616] hsr_slave_1: entered promiscuous mode [ 98.266534][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 98.266559][ T5616] Cannot create hsr debugfs directory [ 98.718154][ T5624] Bluetooth: hci0: command tx timeout [ 98.718279][ T5632] Bluetooth: hci1: command tx timeout [ 98.878844][ T5632] Bluetooth: hci2: command tx timeout [ 98.967657][ T5632] Bluetooth: hci3: command tx timeout [ 99.414720][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.449521][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.454590][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.483081][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.495635][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.536756][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.564895][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.605526][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.740380][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.784339][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.800413][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.850503][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.852400][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.876620][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.903120][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.946994][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.131576][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.165049][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.186783][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.224506][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.236904][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.262093][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.293781][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.335516][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.487044][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.524138][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.543213][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.571564][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.586815][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.613839][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.620161][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.652196][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.753276][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.797866][ T5632] Bluetooth: hci1: command tx timeout [ 100.797885][ T5624] Bluetooth: hci0: command tx timeout [ 100.876104][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.921100][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.938155][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.938808][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.957758][ T5624] Bluetooth: hci2: command tx timeout [ 101.031043][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.031169][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.038938][ T5624] Bluetooth: hci3: command tx timeout [ 101.112389][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.159481][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.159587][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.192196][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.230479][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.230604][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.323643][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.391697][ T3052] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.391876][ T3052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.424825][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.496358][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.496641][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.698852][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.734836][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.735013][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.870762][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.870919][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.459508][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.877794][ T5624] Bluetooth: hci0: command tx timeout [ 102.881013][ T5624] Bluetooth: hci1: command tx timeout [ 103.038909][ T5624] Bluetooth: hci2: command tx timeout [ 103.118220][ T5624] Bluetooth: hci3: command tx timeout [ 103.122612][ T5619] veth0_vlan: entered promiscuous mode [ 103.190228][ T5619] veth1_vlan: entered promiscuous mode [ 103.232973][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.484960][ T5619] veth0_macvtap: entered promiscuous mode [ 103.514965][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.562223][ T5619] veth1_macvtap: entered promiscuous mode [ 103.678230][ T5618] veth0_vlan: entered promiscuous mode [ 103.713611][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.761170][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.764221][ T5618] veth1_vlan: entered promiscuous mode [ 103.797895][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.848689][ T3051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.854518][ T3051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.895694][ T3051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.918928][ T3051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.941006][ T5616] veth0_vlan: entered promiscuous mode [ 104.116174][ T5616] veth1_vlan: entered promiscuous mode [ 104.269423][ T5618] veth0_macvtap: entered promiscuous mode [ 104.406333][ T5618] veth1_macvtap: entered promiscuous mode [ 104.491743][ T5617] veth0_vlan: entered promiscuous mode [ 104.512028][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.512050][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.598921][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.605291][ T5617] veth1_vlan: entered promiscuous mode [ 104.641709][ T5616] veth0_macvtap: entered promiscuous mode [ 104.672867][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.696182][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.696205][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.716854][ T5616] veth1_macvtap: entered promiscuous mode [ 104.743894][ T2936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.761056][ T2936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.783898][ T2936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.825090][ T2936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.990867][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.269052][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.307128][ T5617] veth0_macvtap: entered promiscuous mode [ 105.402603][ T2936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.419614][ T5617] veth1_macvtap: entered promiscuous mode [ 105.424676][ T2936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.457248][ T2936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.484432][ T3051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.484448][ T3051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.516067][ T2936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.819750][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.826972][ T3052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.826991][ T3052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.990767][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.152602][ T2943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.604676][ T2943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.656535][ T3051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.672726][ T3051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.786833][ T1481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.786854][ T1481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.963352][ T5777] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 107.185675][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.195691][ T5777] team0: Port device bond0 added [ 107.894504][ T5782] syz.0.8 (5782) used greatest stack depth: 18720 bytes left [ 107.951271][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.951295][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.471540][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.471561][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.598798][ T823] IPVS: starting estimator thread 0... [ 108.702148][ T5791] IPVS: using max 9 ests per chain, 21600 per kthread [ 109.013678][ T3050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.013701][ T3050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.171491][ T5800] Zero length message leads to an empty skb [ 109.570876][ T3050] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.755578][ T5807] syz.3.13 (5807) used greatest stack depth: 18528 bytes left [ 111.980013][ T5841] tipc: Started in network mode [ 111.980035][ T5841] tipc: Node identity 7f000001, cluster identity 4711 [ 111.984769][ T5841] tipc: New replicast peer: 127.0.0.1 [ 111.985615][ T5841] tipc: Enabled bearer , priority 10 [ 112.041480][ T5841] tipc: Disabling bearer [ 112.793656][ T5853] nvme nvme0: failed to connect socket: -111 [ 113.100850][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 113.101070][ T5865] openvswitch: netlink: Message has 4 unknown bytes. [ 113.235046][ T5861] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 113.802431][ T5886] netlink: 52 bytes leftover after parsing attributes in process `syz.2.38'. [ 113.802544][ T5886] netlink: 52 bytes leftover after parsing attributes in process `syz.2.38'. [ 114.044822][ T5715] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 114.261424][ T5723] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 114.266737][ T5696] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 114.289257][ T5715] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 114.343567][ T5892] netlink: 'syz.0.40': attribute type 2 has an invalid length. [ 114.343588][ T5892] netlink: 'syz.0.40': attribute type 11 has an invalid length. [ 114.343602][ T5892] netlink: 104 bytes leftover after parsing attributes in process `syz.0.40'. [ 114.365343][ T5872] ceph: No mds server is up or the cluster is laggy [ 114.380408][ T5873] ceph: No mds server is up or the cluster is laggy [ 114.400749][ T5877] ceph: No mds server is up or the cluster is laggy [ 114.531632][ T5723] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 114.568651][ T5882] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 114.649229][ T5622] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 115.061526][ T5723] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 115.204004][ T5723] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 115.269527][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 115.766975][ T5908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 115.946823][ T5911] netlink: 'syz.2.47': attribute type 2 has an invalid length. [ 115.946845][ T5911] netlink: 124 bytes leftover after parsing attributes in process `syz.2.47'. [ 116.035407][ T5915] netlink: 'syz.0.46': attribute type 11 has an invalid length. [ 116.035434][ T5915] netlink: 104 bytes leftover after parsing attributes in process `syz.0.46'. [ 116.652613][ T5923] rdma_op ffff8880622f8270 conn xmit_rdma 0000000000000000 [ 116.981396][ T5936] netlink: 'syz.3.58': attribute type 10 has an invalid length. [ 117.203590][ T5941] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 117.219636][ T5942] netlink: 'syz.2.60': attribute type 2 has an invalid length. [ 117.219656][ T5942] netlink: 132 bytes leftover after parsing attributes in process `syz.2.60'. [ 117.267606][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.296757][ T5936] team0: Port device bond0 added [ 117.466519][ T5933] lo speed is unknown, defaulting to 1000 [ 117.594491][ T5933] lo speed is unknown, defaulting to 1000 [ 117.902275][ T5933] lo speed is unknown, defaulting to 1000 [ 119.370626][ T10] lo speed is unknown, defaulting to 1000 [ 119.370806][ T5933] infiniband syz0: set active [ 119.370977][ T5933] infiniband syz0: added lo [ 119.413254][ T5933] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 119.413283][ T5933] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 119.413308][ T5933] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 119.497623][ T5933] RDS/IB: syz0: added [ 119.498582][ T5933] smc: adding ib device syz0 with port count 1 [ 119.504456][ T5933] smc: ib device syz0 port 1 has no pnetid [ 119.505861][ T49] lo speed is unknown, defaulting to 1000 [ 119.514720][ T5933] lo speed is unknown, defaulting to 1000 [ 119.546108][ T5622] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 119.572582][ T5622] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 119.589830][ T5974] ceph: No mds server is up or the cluster is laggy [ 119.593492][ T5969] ceph: No mds server is up or the cluster is laggy [ 120.343224][ T5933] lo speed is unknown, defaulting to 1000 [ 120.570939][ T5933] lo speed is unknown, defaulting to 1000 [ 120.775431][ T5933] lo speed is unknown, defaulting to 1000 [ 121.580812][ T6004] lo speed is unknown, defaulting to 1000 [ 121.913608][ T6015] rdma_rxe: rxe_newlink: failed to add lo [ 122.222992][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 122.616468][ T6030] netlink: 'syz.3.94': attribute type 2 has an invalid length. [ 122.616492][ T6030] netlink: 'syz.3.94': attribute type 11 has an invalid length. [ 122.616506][ T6030] netlink: 104 bytes leftover after parsing attributes in process `syz.3.94'. [ 123.015302][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 123.015346][ T6041] netlink: 84 bytes leftover after parsing attributes in process `syz.3.98'. [ 123.237286][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.100'. [ 123.703541][ T6058] netlink: 'syz.0.105': attribute type 2 has an invalid length. [ 123.703566][ T6058] netlink: 'syz.0.105': attribute type 11 has an invalid length. [ 123.703580][ T6058] netlink: 104 bytes leftover after parsing attributes in process `syz.0.105'. [ 124.462356][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 124.736267][ T6078] netlink: 'syz.1.115': attribute type 2 has an invalid length. [ 124.736292][ T6078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.115'. [ 125.052052][ T6086] netlink: 'syz.3.117': attribute type 2 has an invalid length. [ 125.052075][ T6086] netlink: 'syz.3.117': attribute type 11 has an invalid length. [ 125.052089][ T6086] netlink: 104 bytes leftover after parsing attributes in process `syz.3.117'. [ 125.293352][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.122'. [ 125.665223][ T6106] netlink: 'syz.3.124': attribute type 2 has an invalid length. [ 126.028522][ T6114] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.416971][ T6113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.733564][ T6113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.081197][ T6113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.351918][ T6130] netlink: 'syz.0.134': attribute type 2 has an invalid length. [ 127.351935][ T6130] __nla_validate_parse: 3 callbacks suppressed [ 127.351941][ T6130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.134'. [ 127.506774][ T6113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.933690][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.951794][ T3051] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.966945][ T3051] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.980223][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.154803][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'. [ 128.273087][ T5696] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.480479][ T5696] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 128.480513][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 128.480532][ T5696] usb 1-1: Product: syz [ 128.480547][ T5696] usb 1-1: Manufacturer: syz [ 128.576905][ T6153] netlink: 'syz.1.145': attribute type 2 has an invalid length. [ 128.576928][ T6153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.145'. [ 128.772859][ T6157] bridge0: port 3(gretap0) entered blocking state [ 128.774708][ T6157] bridge0: port 3(gretap0) entered disabled state [ 128.775385][ T6157] gretap0: entered allmulticast mode [ 128.839606][ T6157] gretap0: entered promiscuous mode [ 128.859206][ T6157] bridge0: port 3(gretap0) entered blocking state [ 128.860100][ T6157] bridge0: port 3(gretap0) entered forwarding state [ 128.879444][ T6158] bridge0: port 4(erspan0) entered blocking state [ 128.882557][ T6158] bridge0: port 4(erspan0) entered disabled state [ 128.882999][ T6158] erspan0: entered allmulticast mode [ 128.907214][ T6158] erspan0: entered promiscuous mode [ 128.927373][ T6158] bridge0: port 4(erspan0) entered blocking state [ 128.929003][ T6158] bridge0: port 4(erspan0) entered forwarding state [ 129.362905][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.150'. [ 129.588150][ T6171] rdma_rxe: rxe_newlink: failed to add veth0 [ 129.751526][ T6176] netlink: 'syz.1.154': attribute type 2 has an invalid length. [ 129.751542][ T6176] netlink: 132 bytes leftover after parsing attributes in process `syz.1.154'. [ 129.906425][ T5696] speedtch 1-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 129.923781][ T5696] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -71! [ 129.923866][ T5696] speedtch 1-1:1.0: probe with driver speedtch failed with error -71 [ 129.992739][ T5696] speedtch 1-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 130.020412][ T5696] speedtch 1-1:1.1: usbatm_usb_probe: bind failed: -71! [ 130.020462][ T5696] speedtch 1-1:1.1: probe with driver speedtch failed with error -71 [ 130.111782][ T5696] usb 1-1: USB disconnect, device number 2 [ 130.219476][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.391538][ T49] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 0.00 [ 130.391560][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.549409][ T6182] netlink: 192 bytes leftover after parsing attributes in process `syz.0.157'. [ 130.588656][ T49] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 131.301920][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 131.572705][ T49] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 131.572735][ T49] ueagle-atm 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 131.615746][ T49] usb 2-1: USB disconnect, device number 2 [ 131.682384][ T6197] netlink: 'syz.1.163': attribute type 2 has an invalid length. [ 131.682417][ T6197] netlink: 132 bytes leftover after parsing attributes in process `syz.1.163'. [ 132.916268][ T6205] netlink: 192 bytes leftover after parsing attributes in process `syz.1.166'. [ 133.135960][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.169'. [ 133.164640][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.191490][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.204975][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205103][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.257925][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.286976][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.291080][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.557344][ T6220] netlink: 'syz.1.172': attribute type 2 has an invalid length. [ 133.557368][ T6220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.172'. [ 133.843145][ T6209] lo speed is unknown, defaulting to 1000 [ 134.383999][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.384273][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.384655][ T6209] bridge_slave_0: entered allmulticast mode [ 134.395574][ T6209] bridge_slave_0: entered promiscuous mode [ 134.404710][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.405123][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.405752][ T6209] bridge_slave_1: entered allmulticast mode [ 134.413771][ T6209] bridge_slave_1: entered promiscuous mode [ 134.479650][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.487162][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.570907][ T6209] team0: Port device team_slave_0 added [ 134.577095][ T6209] team0: Port device team_slave_1 added [ 134.661207][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.661219][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.661235][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.672828][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.672844][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.672868][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.826162][ T6209] hsr_slave_0: entered promiscuous mode [ 134.829243][ T6209] hsr_slave_1: entered promiscuous mode [ 134.831056][ T6209] debugfs: 'hsr0' already exists in 'hsr' [ 134.831079][ T6209] Cannot create hsr debugfs directory [ 135.133348][ T6239] netlink: 192 bytes leftover after parsing attributes in process `syz.1.175'. [ 135.438682][ T5632] Bluetooth: hci4: command tx timeout [ 135.543901][ T6209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.572047][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.573152][ T6209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.610918][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.613023][ T6209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.666148][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.695240][ T6209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.732409][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.899077][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.931212][ T6209] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.950654][ T3052] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.950811][ T3052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.979969][ T3052] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.980136][ T3052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.222984][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 136.490138][ T6261] netlink: 'syz.1.180': attribute type 2 has an invalid length. [ 136.490162][ T6261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.180'. [ 136.909205][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.228983][ T6209] veth0_vlan: entered promiscuous mode [ 137.256471][ T6209] veth1_vlan: entered promiscuous mode [ 137.315510][ T6209] veth0_macvtap: entered promiscuous mode [ 137.327336][ T6209] veth1_macvtap: entered promiscuous mode [ 137.356725][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.386083][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.425242][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.426611][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.426846][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.426887][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.531418][ T5632] Bluetooth: hci4: command tx timeout [ 137.951296][ T6283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.183'. [ 138.051880][ T3051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.051901][ T3051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.214978][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.215001][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.322532][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.185'. [ 138.632236][ T6296] netlink: 'syz.1.188': attribute type 2 has an invalid length. [ 138.632252][ T6296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.188'. [ 138.926642][ T6303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.191'. [ 139.599595][ T5632] Bluetooth: hci4: command tx timeout [ 139.713538][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.194'. [ 140.013061][ T6319] netlink: 'syz.4.198': attribute type 2 has an invalid length. [ 140.013104][ T6319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.198'. [ 140.666709][ T6325] netlink: 132 bytes leftover after parsing attributes in process `syz.4.200'. [ 141.025723][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.204'. [ 141.095036][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.135458][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.156689][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.169492][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.174086][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.467042][ T6342] netlink: 'syz.4.207': attribute type 2 has an invalid length. [ 141.467066][ T6342] netlink: 132 bytes leftover after parsing attributes in process `syz.4.207'. [ 141.687620][ T5624] Bluetooth: hci4: command tx timeout [ 142.003355][ T6333] lo speed is unknown, defaulting to 1000 [ 142.015682][ T6355] netlink: 132 bytes leftover after parsing attributes in process `syz.4.209'. [ 142.602736][ T6368] netlink: 'syz.4.215': attribute type 2 has an invalid length. [ 143.078554][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.078830][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.079283][ T6333] bridge_slave_0: entered allmulticast mode [ 143.081529][ T6333] bridge_slave_0: entered promiscuous mode [ 143.086593][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.086887][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.087327][ T6333] bridge_slave_1: entered allmulticast mode [ 143.092805][ T6333] bridge_slave_1: entered promiscuous mode [ 143.172352][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.180960][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.231649][ T6333] team0: Port device team_slave_0 added [ 143.235375][ T6333] team0: Port device team_slave_1 added [ 143.277802][ T5624] Bluetooth: hci5: command tx timeout [ 143.294349][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.294367][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.294392][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.297014][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.297025][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.297040][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.492656][ T6333] hsr_slave_0: entered promiscuous mode [ 143.496495][ T6333] hsr_slave_1: entered promiscuous mode [ 143.498997][ T6333] debugfs: 'hsr0' already exists in 'hsr' [ 143.499020][ T6333] Cannot create hsr debugfs directory [ 143.505729][ T6370] ceph: No mds server is up or the cluster is laggy [ 143.530088][ T5882] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PAYLOAD) [ 143.691128][ T6382] __nla_validate_parse: 2 callbacks suppressed [ 143.691147][ T6382] netlink: 132 bytes leftover after parsing attributes in process `syz.4.217'. [ 144.153358][ T6389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.220'. [ 144.350206][ T6395] netlink: 'syz.4.223': attribute type 2 has an invalid length. [ 144.350228][ T6395] netlink: 'syz.4.223': attribute type 11 has an invalid length. [ 144.350241][ T6395] netlink: 112 bytes leftover after parsing attributes in process `syz.4.223'. [ 144.545198][ T6397] tipc: Started in network mode [ 144.545222][ T6397] tipc: Node identity 1, cluster identity 4711 [ 144.545234][ T6397] tipc: Node number set to 1 [ 144.572024][ T6397] tipc: New replicast peer: 127.0.0.2 [ 144.576399][ T6397] tipc: Enabled bearer , priority 10 [ 144.591684][ T6397] tipc: Disabling bearer [ 144.661716][ T6399] netlink: 132 bytes leftover after parsing attributes in process `syz.4.225'. [ 144.863950][ T6333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.898296][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.900998][ T6333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.925815][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.178757][ T6333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.219137][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.261473][ T6333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.285720][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.228'. [ 145.349524][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.365482][ T5624] Bluetooth: hci5: command tx timeout [ 145.642211][ T6417] netlink: 'syz.4.231': attribute type 2 has an invalid length. [ 145.642236][ T6417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.231'. [ 145.878846][ T6420] netlink: 132 bytes leftover after parsing attributes in process `syz.4.233'. [ 145.886058][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.932530][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.962443][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.970945][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.040032][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.041729][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.104748][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.112186][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.119901][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.155699][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.157644][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.437664][ T5632] Bluetooth: hci5: command tx timeout [ 148.317682][ T5632] Bluetooth: hci6: command tx timeout [ 149.517741][ T5632] Bluetooth: hci5: command tx timeout [ 150.397610][ T5632] Bluetooth: hci6: command tx timeout [ 152.477687][ T5632] Bluetooth: hci6: command tx timeout [ 154.557705][ T5632] Bluetooth: hci6: command tx timeout [ 155.995714][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.045801][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.068454][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.097211][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.106256][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.237751][ T5632] Bluetooth: hci7: command tx timeout [ 160.317698][ T5632] Bluetooth: hci7: command tx timeout [ 161.964523][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 162.035820][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 162.049051][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 162.050699][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 162.053528][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 162.398181][ T5624] Bluetooth: hci7: command tx timeout [ 164.237743][ T5624] Bluetooth: hci8: command tx timeout [ 164.477761][ T5624] Bluetooth: hci7: command tx timeout [ 166.317773][ T5624] Bluetooth: hci8: command tx timeout [ 167.997874][ T6421] lo speed is unknown, defaulting to 1000 [ 168.399987][ T5624] Bluetooth: hci8: command tx timeout [ 169.220448][ T6435] lo speed is unknown, defaulting to 1000 [ 169.408757][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.480068][ T5624] Bluetooth: hci8: command tx timeout [ 170.751552][ T6428] lo speed is unknown, defaulting to 1000 [ 170.827548][ C0] sched: DL replenish lagged too much [ 172.745850][ T6333] veth0_vlan: entered promiscuous mode [ 172.866382][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.867077][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.883101][ T6421] bridge_slave_0: entered allmulticast mode [ 172.887243][ T6421] bridge_slave_0: entered promiscuous mode [ 172.984089][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.984482][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.985450][ T6421] bridge_slave_1: entered allmulticast mode [ 173.010452][ T6421] bridge_slave_1: entered promiscuous mode [ 173.382589][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.419172][ T6333] veth1_vlan: entered promiscuous mode [ 194.640986][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.641089][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.583836][ T5632] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 201.643473][ T5632] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 201.649663][ T5632] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 201.665199][ T5632] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 201.666533][ T5632] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 203.837887][ T5624] Bluetooth: hci9: command tx timeout [ 205.918014][ T5624] Bluetooth: hci9: command tx timeout [ 206.606202][ T5632] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 206.659783][ T5632] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 206.676515][ T5632] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 206.686314][ T5632] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 206.687174][ T5632] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 207.998049][ T5624] Bluetooth: hci9: command tx timeout [ 208.797677][ T5624] Bluetooth: hci10: command tx timeout [ 210.077929][ T5624] Bluetooth: hci9: command tx timeout [ 210.877741][ T5624] Bluetooth: hci10: command tx timeout [ 212.957686][ T5624] Bluetooth: hci10: command tx timeout [ 215.037662][ T5624] Bluetooth: hci10: command tx timeout [ 216.632413][ T4915] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 216.670050][ T4915] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 216.673533][ T4915] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 216.712107][ T4915] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 216.713123][ T4915] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 217.277662][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 217.361873][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 217.361926][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 217.361954][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 218.877819][ T4915] Bluetooth: hci11: command tx timeout [ 220.957863][ T4915] Bluetooth: hci11: command tx timeout [ 222.555540][ T5632] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 222.582385][ T5632] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 222.584602][ T5632] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 222.632100][ T5632] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 222.643974][ T5632] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 223.038046][ T5632] Bluetooth: hci11: command tx timeout [ 225.118129][ T5632] Bluetooth: hci11: command tx timeout [ 256.094505][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.094618][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.184921][ T5632] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 262.222898][ T5632] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 262.252187][ T5632] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 262.274649][ T5632] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 262.275920][ T5632] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 267.235129][ T6531] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 267.270468][ T6531] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 267.275899][ T6531] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 267.294439][ T6531] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 267.295323][ T6531] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 268.402740][ T6531] Bluetooth: hci6: command 0x0406 tx timeout [ 268.402788][ T6531] Bluetooth: hci5: command 0x0406 tx timeout [ 273.998825][ T38] INFO: task syz.2.63:5953 blocked for more than 143 seconds. [ 273.998855][ T38] Not tainted syzkaller #0 [ 273.998866][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.998875][ T38] task:syz.2.63 state:D stack:27344 pid:5953 tgid:5948 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 273.998943][ T38] Call Trace: [ 273.998951][ T38] [ 273.998966][ T38] __schedule+0x1709/0x5530 [ 273.999030][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 273.999070][ T38] ? __pfx___schedule+0x10/0x10 [ 273.999118][ T38] rt_mutex_schedule+0x76/0xf0 [ 273.999140][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 273.999177][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 273.999225][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 273.999257][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 273.999286][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 273.999335][ T38] ? write_threads+0x3b4/0x610 [ 273.999373][ T38] ? write_threads+0x3b4/0x610 [ 273.999402][ T38] mutex_lock_nested+0x168/0x1d0 [ 273.999435][ T38] write_threads+0x3b4/0x610 [ 273.999469][ T38] ? __pfx_write_threads+0x10/0x10 [ 273.999519][ T38] ? _copy_from_user+0x94/0xb0 [ 273.999541][ T38] ? simple_transaction_get+0x130/0x170 [ 273.999568][ T38] nfsctl_transaction_write+0x112/0x160 [ 273.999601][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 273.999632][ T38] vfs_write+0x29f/0xbb0 [ 273.999667][ T38] ? __pfx_vfs_write+0x10/0x10 [ 273.999696][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.999717][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.999739][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.999761][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 273.999786][ T38] ? fdget_pos+0x252/0x320 [ 273.999818][ T38] ksys_write+0x156/0x270 [ 273.999847][ T38] ? __pfx_ksys_write+0x10/0x10 [ 273.999883][ T38] do_syscall_64+0x17b/0x530 [ 273.999905][ T38] ? irqentry_exit+0x10f/0x8f0 [ 273.999925][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.999946][ T38] ? clear_bhb_loop+0x40/0x90 [ 273.999981][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.000003][ T38] RIP: 0033:0x7fe519f6e019 [ 274.000023][ T38] RSP: 002b:00007fe5181a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.000044][ T38] RAX: ffffffffffffffda RBX: 00007fe51a1f6090 RCX: 00007fe519f6e019 [ 274.000059][ T38] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000005 [ 274.000073][ T38] RBP: 00007fe51a00500c R08: 0000000000000000 R09: 0000000000000000 [ 274.000086][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.000099][ T38] R13: 00007fe51a1f6128 R14: 00007fe51a1f6090 R15: 00007ffc8e4a0698 [ 274.005088][ T38] [ 274.005106][ T38] INFO: task syz.3.126:6109 blocked for more than 143 seconds. [ 274.005123][ T38] Not tainted syzkaller #0 [ 274.005133][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.005143][ T38] task:syz.3.126 state:D stack:28152 pid:6109 tgid:6108 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 274.005212][ T38] Call Trace: [ 274.005219][ T38] [ 274.005232][ T38] __schedule+0x1709/0x5530 [ 274.005300][ T38] ? __pfx___schedule+0x10/0x10 [ 274.005350][ T38] rt_mutex_schedule+0x76/0xf0 [ 274.005371][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 274.005416][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 274.005447][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 274.005476][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 274.005524][ T38] ? write_ports+0xb5/0xd20 [ 274.005562][ T38] ? write_ports+0xb5/0xd20 [ 274.005590][ T38] mutex_lock_nested+0x168/0x1d0 [ 274.005624][ T38] write_ports+0xb5/0xd20 [ 274.005659][ T38] ? __pfx_write_ports+0x10/0x10 [ 274.005713][ T38] ? _copy_from_user+0x94/0xb0 [ 274.005734][ T38] ? simple_transaction_get+0x130/0x170 [ 274.005760][ T38] nfsctl_transaction_write+0x112/0x160 [ 274.005794][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 274.005826][ T38] vfs_write+0x29f/0xbb0 [ 274.005861][ T38] ? __pfx_vfs_write+0x10/0x10 [ 274.005890][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 274.005912][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 274.005933][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 274.005955][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 274.005988][ T38] ? fdget_pos+0x252/0x320 [ 274.006020][ T38] ksys_write+0x156/0x270 [ 274.006048][ T38] ? __pfx_ksys_write+0x10/0x10 [ 274.006085][ T38] do_syscall_64+0x17b/0x530 [ 274.006107][ T38] ? irqentry_exit+0x10f/0x8f0 [ 274.006127][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.006149][ T38] ? clear_bhb_loop+0x40/0x90 [ 274.006177][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.006199][ T38] RIP: 0033:0x7f490e9be019 [ 274.006217][ T38] RSP: 002b:00007f490cc16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.006238][ T38] RAX: ffffffffffffffda RBX: 00007f490ec45fa0 RCX: 00007f490e9be019 [ 274.006253][ T38] RDX: 0000000000000009 RSI: 0000200000000900 RDI: 0000000000000003 [ 274.006266][ T38] RBP: 00007f490ea5500c R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.006280][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.006293][ T38] R13: 00007f490ec46038 R14: 00007f490ec45fa0 R15: 00007ffdb40648d8 [ 274.006327][ T38] [ 274.006336][ T38] INFO: task syz.3.126:6112 blocked for more than 143 seconds. [ 274.006351][ T38] Not tainted syzkaller #0 [ 274.006361][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.006370][ T38] task:syz.3.126 state:D stack:28360 pid:6112 tgid:6108 ppid:5619 task_flags:0x400040 flags:0x00080002 [ 274.006433][ T38] Call Trace: [ 274.006439][ T38] [ 274.006452][ T38] __schedule+0x1709/0x5530 [ 274.006502][ T38] ? irqentry_exit+0x218/0x8f0 [ 274.006591][ T38] ? irqentry_exit+0x218/0x8f0 [ 274.006611][ T38] ? trace_irq_disable+0x3b/0x140 [ 274.006634][ T38] ? __pfx___schedule+0x10/0x10 [ 274.006683][ T38] rt_mutex_schedule+0x76/0xf0 [ 274.006704][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 274.006748][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 274.006779][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 274.006808][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 274.006857][ T38] ? write_threads+0x3b4/0x610 [ 274.006894][ T38] ? write_threads+0x3b4/0x610 [ 274.006922][ T38] mutex_lock_nested+0x168/0x1d0 [ 274.006955][ T38] write_threads+0x3b4/0x610 [ 274.006997][ T38] ? __pfx_write_threads+0x10/0x10 [ 274.007048][ T38] ? _copy_from_user+0x94/0xb0 [ 274.007068][ T38] ? simple_transaction_get+0x130/0x170 [ 274.007095][ T38] nfsctl_transaction_write+0x112/0x160 [ 274.007128][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 274.007159][ T38] vfs_write+0x29f/0xbb0 [ 274.007193][ T38] ? __pfx_vfs_write+0x10/0x10 [ 274.007222][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 274.007244][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 274.007265][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 274.007287][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 274.007313][ T38] ? fdget_pos+0x252/0x320 [ 274.007345][ T38] ksys_write+0x156/0x270 [ 274.007373][ T38] ? __pfx_ksys_write+0x10/0x10 [ 274.077536][ T38] do_syscall_64+0x17b/0x530 [ 274.077581][ T38] ? irqentry_exit+0x10f/0x8f0 [ 274.077603][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.077626][ T38] ? clear_bhb_loop+0x40/0x90 [ 274.077653][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.077675][ T38] RIP: 0033:0x7f490e9be019 [ 274.077695][ T38] RSP: 002b:00007f490cbf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.077719][ T38] RAX: ffffffffffffffda RBX: 00007f490ec46090 RCX: 00007f490e9be019 [ 274.077736][ T38] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000003 [ 274.077749][ T38] RBP: 00007f490ea5500c R08: 0000000000000000 R09: 0000000000000000 [ 274.077763][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.077775][ T38] R13: 00007f490ec46128 R14: 00007f490ec46090 R15: 00007ffdb40648d8 [ 274.077810][ T38] [ 274.077850][ T38] [ 274.077850][ T38] Showing all locks held in the system: [ 274.077859][ T38] locks held by ktimers/0/16: 3, last CPU#0: [ 274.077876][ T38] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 274.077930][ T38] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 274.077994][ T38] #2: ffff8880b86284f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7f/0x260 [ 274.078051][ T38] locks held by pr/legacy/17: 4, last CPU#1: [ 274.078065][ T38] #0: ffffffff8e3b5a40 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 274.143545][ T38] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 274.143622][ T38] #2: ffffffff9a078558 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x17c/0x1b40 [ 274.143676][ T38] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 274.143734][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 274.143750][ T38] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 274.143804][ T38] locks held by kworker/u8:3/57: 3, on CPU#1: [ 274.143818][ T38] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.143867][ T38] #1: ffffc9000123fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.143915][ T38] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 274.143964][ T38] locks held by kworker/u9:0/60: 4, on CPU#1: [ 274.143978][ T38] #0: ffff88804e6e2938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144032][ T38] #1: ffffc9000126fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144082][ T38] #2: ffff8880809740b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 274.144141][ T38] #3: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 274.144204][ T38] locks held by kworker/0:2/199: 3, on CPU#0: [ 274.144219][ T38] #0: ffff88813fe62538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144268][ T38] #1: ffffc90004407c60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144316][ T38] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 274.144380][ T38] locks held by kworker/u8:8/1119: 3, on CPU#1: [ 274.144394][ T38] #0: ffff888033433138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144452][ T38] #1: ffffc900069d7c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144501][ T38] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 274.144573][ T38] locks held by kworker/u8:12/2936: 2, on CPU#1: [ 274.144587][ T38] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144636][ T38] #1: ffffc9000ef97c60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144687][ T38] locks held by kworker/u9:1/4915: 4, on CPU#1: [ 274.144701][ T38] #0: ffff88804e45c138 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144754][ T38] #1: ffffc90010517c60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.144803][ T38] #2: ffff888029ebc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 274.144862][ T38] #3: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 274.144922][ T38] locks held by klogd/4955: 2, last CPU#1: [ 274.144936][ T38] #0: ffffffff8e50af90 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 274.144991][ T38] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 274.335021][ T38] locks held by getty/5358: 2, on CPU#1: [ 274.335042][ T38] #0: ffff88802ab6d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 274.335113][ T38] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 274.335181][ T38] locks held by sshd-session/5599: 3, last CPU#1: [ 274.335196][ T38] #0: ffff88802bcff198 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 274.335254][ T38] #1: ffffffff8e50af90 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 274.335309][ T38] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 274.335369][ T38] locks held by syz-executor/5600: 6, last CPU#1: [ 274.335384][ T38] #0: ffff888040ef11b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 274.335447][ T38] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 274.335500][ T38] #2: ffff88803f19a898 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 274.335560][ T38] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 274.335614][ T38] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: lruvec_stat_mod_folio+0x6e/0x3e0 [ 274.335665][ T38] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: mod_memcg_lruvec_state+0xd5/0x270 [ 274.335719][ T38] locks held by kworker/u9:2/5621: 6, on CPU#1: [ 274.335733][ T38] #0: ffff8880385be138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.335782][ T38] #1: ffffc90004d67c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.335831][ T38] #2: ffff888032960f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 274.335831][ T38] #2: ffff888032960f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 274.335888][ T38] #3: ffff8880329600b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 274.335939][ T38] #4: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 274.335990][ T38] #5: ffff88803e29f370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 274.336048][ T38] locks held by kworker/u9:3/5624: 5, on CPU#1: [ 274.336062][ T38] #0: ffff888040f95938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.336110][ T38] #1: ffffc90004da7c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.336159][ T38] #2: ffff88803d008f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 274.336215][ T38] #3: ffff88803d0080b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 274.336267][ T38] #4: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 274.336317][ T38] locks held by kworker/u9:4/5629: 4, on CPU#1: [ 274.336332][ T38] #0: ffff888039016138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.336384][ T38] #1: ffffc90004de7c60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.336439][ T38] #2: ffff888063b540b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 274.484150][ T38] #3: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 274.484217][ T38] locks held by kworker/u9:5/5630: 5, on CPU#1: [ 274.484232][ T38] #0: ffff8880385be938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.484282][ T38] #1: ffffc90004df7c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.484332][ T38] #2: ffff88803c168f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 274.484390][ T38] #3: ffff88803c1680b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 274.484442][ T38] #4: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 274.484502][ T38] locks held by kworker/u9:6/5632: 5, on CPU#1: [ 274.484516][ T38] #0: ffff888061a39938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.484565][ T38] #1: ffffc90005637c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.484614][ T38] #2: ffff88805f898f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 274.484671][ T38] #3: ffff88805f8980b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 274.484723][ T38] #4: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 274.484774][ T38] locks held by kworker/u9:7/5635: 5, on CPU#1: [ 274.484788][ T38] #0: ffff888040f95138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.484835][ T38] #1: ffffc90004dc7c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.484884][ T38] #2: ffff88803d00cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 274.484940][ T38] #3: ffff88803d00c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 274.484991][ T38] #4: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 274.485051][ T38] locks held by kworker/1:5/5723: 2, on CPU#1: [ 274.485065][ T38] #0: ffff88813fe63938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.485114][ T38] #1: ffffc900059c7c60 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.485162][ T38] locks held by kworker/0:6/5724: 3, last CPU#0: [ 274.485177][ T38] #0: ffff88813fe62538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.485227][ T38] #1: ffffc900059d7c60 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.485276][ T38] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x18b0 [ 274.485334][ T38] locks held by kworker/1:6/5882: 3, on CPU#1: [ 274.485348][ T38] #0: ffff88813fe63938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.485396][ T38] #1: ffffc9000604fc60 (netdev_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.485442][ T38] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 274.614756][ T38] locks held by syz.2.63/5949: 3, on CPU#1: [ 274.614774][ T38] #0: ffff88803872e128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 274.614826][ T38] #1: ffff88801b334510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 274.614882][ T38] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 274.614940][ T38] locks held by syz.2.63/5953: 3, on CPU#0: [ 274.614954][ T38] #0: ffff888037a48d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 274.615002][ T38] #1: ffff88801b334510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 274.615056][ T38] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 274.615114][ T38] locks held by syz.3.126/6109: 3, on CPU#0: [ 274.615128][ T38] #0: ffff88803d0c3328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 274.615185][ T38] #1: ffff888061e42510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 274.615239][ T38] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 274.615294][ T38] locks held by syz.3.126/6112: 3, on CPU#1: [ 274.615308][ T38] #0: ffff88803d0d1128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 274.615356][ T38] #1: ffff888061e42510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 274.615411][ T38] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 274.615467][ T38] locks held by syz.0.158/6184: 3, on CPU#0: [ 274.615481][ T38] #0: ffff888036615328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 274.615529][ T38] #1: ffff888035f00510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 274.615581][ T38] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 274.615637][ T38] locks held by syz.0.158/6185: 3, on CPU#0: [ 274.615651][ T38] #0: ffff8880380dab28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 274.615699][ T38] #1: ffff888035f00510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 274.615753][ T38] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 274.615813][ T38] locks held by syz.1.196/6314: 3, on CPU#0: [ 274.615827][ T38] #0: ffff88803feee928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 274.615874][ T38] #1: ffff888040c42510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 274.615928][ T38] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 274.615985][ T38] locks held by syz.1.196/6317: 3, on CPU#1: [ 274.615999][ T38] #0: ffff88803ce68528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 274.616046][ T38] #1: ffff888040c42510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 274.616102][ T38] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 274.781480][ T38] locks held by syz.1.196/6320: 3, on CPU#0: [ 274.781498][ T38] #0: ffff88803fdd3f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 274.781552][ T38] #1: ffff888040c42510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 274.781610][ T38] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 274.781668][ T38] locks held by syz-executor/6333: 1, on CPU#1: [ 274.781683][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 274.781739][ T38] locks held by syz-executor/6421: 1, on CPU#1: [ 274.781753][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 274.781809][ T38] locks held by syz-executor/6428: 1, on CPU#1: [ 274.781823][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 274.781872][ T38] locks held by syz-executor/6435: 1, on CPU#1: [ 274.781887][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 274.781941][ T38] locks held by dhcpcd/6488: 1, on CPU#1: [ 274.781956][ T38] #0: ffff888036596358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe40 [ 274.782011][ T38] locks held by dhcpcd/6489: 1, on CPU#1: [ 274.782025][ T38] #0: ffff8880395b0358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe40 [ 274.782079][ T38] locks held by dhcpcd/6490: 1, on CPU#1: [ 274.782093][ T38] #0: ffff88805173e358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe40 [ 274.782146][ T38] locks held by dhcpcd/6491: 1, on CPU#1: [ 274.782160][ T38] #0: ffff88803ed5e358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe40 [ 274.782213][ T38] locks held by dhcpcd/6492: 1, on CPU#1: [ 274.782226][ T38] #0: ffff88803b082358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe40 [ 274.782279][ T38] locks held by dhcpcd/6493: 1, on CPU#1: [ 274.782293][ T38] #0: ffff888021368358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe40 [ 274.782346][ T38] locks held by syz-executor/6495: 1, on CPU#1: [ 274.782360][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 274.782412][ T38] locks held by syz-executor/6502: 1, on CPU#1: [ 274.782435][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 274.782486][ T38] locks held by syz-executor/6509: 1, on CPU#1: [ 274.782501][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 274.782552][ T38] locks held by syz-executor/6517: 1, on CPU#1: [ 274.782566][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 274.782617][ T38] locks held by syz-executor/6524: 1, on CPU#1: [ 274.782631][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 274.782682][ T38] locks held by kworker/u9:8/6530: 5, on CPU#1: [ 274.782697][ T38] #0: ffff88802c35d138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.782745][ T38] #1: ffffc90006f97c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 274.782794][ T38] #2: ffff888069e24f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 274.782869][ T38] #3: ffff888069e240b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 275.390425][ T38] #4: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 275.390484][ T38] locks held by syz-executor/6533: 1, on CPU#1: [ 275.390499][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 275.390555][ T38] [ 275.390561][ T38] ============================================= [ 275.390561][ T38] [ 275.390570][ T38] NMI backtrace for cpu 1 [ 275.390585][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 275.390608][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.390620][ T38] Call Trace: [ 275.390630][ T38] [ 275.390640][ T38] dump_stack_lvl+0xe8/0x150 [ 275.390669][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 275.390698][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 275.390729][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 275.390762][ T38] sys_info+0x135/0x170 [ 275.390786][ T38] watchdog+0xfd7/0x1030 [ 275.390826][ T38] ? watchdog+0x1c7/0x1030 [ 275.390863][ T38] kthread+0x388/0x470 [ 275.390892][ T38] ? __pfx_watchdog+0x10/0x10 [ 275.390921][ T38] ? __pfx_kthread+0x10/0x10 [ 275.390950][ T38] ret_from_fork+0x514/0xb70 [ 275.390982][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 275.391009][ T38] ? __switch_to+0xc89/0x1420 [ 275.391037][ T38] ? __pfx_kthread+0x10/0x10 [ 275.391066][ T38] ret_from_fork_asm+0x1a/0x30 [ 275.391111][ T38] [ 275.391119][ T38] Sending NMI from CPU 1 to CPUs 0: [ 275.391148][ C0] NMI backtrace for cpu 0 [ 275.391164][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 275.391182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.391192][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 275.391213][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 00 33 de 09 cc 89 f6 31 d2 e9 b6 56 95 03 66 0f 1f 44 00 [ 275.391227][ C0] RSP: 0018:ffffc90000157bd0 EFLAGS: 00000046 [ 275.391242][ C0] RAX: 000000000000000f RBX: ffff8880b8623c80 RCX: 0000000000000838 [ 275.391255][ C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000838 [ 275.391265][ C0] RBP: ffffc90000157c90 R08: 0000000000000000 R09: 0000000000000100 [ 275.391276][ C0] R10: 0000000000000000 R11: ffffffff81749500 R12: ffffffff81749500 [ 275.391287][ C0] R13: 1ffff110170c4799 R14: 0000000000000000 R15: ffff8880b8623ccc [ 275.391299][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 275.391312][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.391324][ C0] CR2: 00007f71f9ded240 CR3: 000000005d686000 CR4: 00000000003526f0 [ 275.391341][ C0] Call Trace: [ 275.391347][ C0] [ 275.391354][ C0] lapic_next_event+0x11/0x20 [ 275.391378][ C0] clockevents_program_event+0x44e/0x630 [ 275.391401][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 275.391424][ C0] ? tick_program_event+0x8f/0x120 [ 275.391451][ C0] hrtimer_run_softirq+0x207/0x260 [ 275.391476][ C0] handle_softirqs+0x1d9/0x6c0 [ 275.391498][ C0] run_ktimerd+0x69/0x100 [ 275.391518][ C0] smpboot_thread_fn+0x57c/0xa80 [ 275.391539][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 275.391561][ C0] kthread+0x388/0x470 [ 275.391581][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 275.391599][ C0] ? __pfx_kthread+0x10/0x10 [ 275.391621][ C0] ret_from_fork+0x514/0xb70 [ 275.391644][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 275.391665][ C0] ? __switch_to+0xc89/0x1420 [ 275.391685][ C0] ? __pfx_kthread+0x10/0x10 [ 275.391706][ C0] ret_from_fork_asm+0x1a/0x30 [ 275.391735][ C0] [ 275.540038][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 275.540063][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 275.540087][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.540100][ T38] Call Trace: [ 275.540111][ T38] [ 275.540121][ T38] vpanic+0x56c/0xa60 [ 275.540150][ T38] ? __pfx___schedule+0x10/0x10 [ 275.540182][ T38] ? __pfx_vpanic+0x10/0x10 [ 275.540213][ T38] panic+0xc5/0xd0 [ 275.540234][ T38] ? __pfx_panic+0x10/0x10 [ 275.540252][ T38] ? preempt_schedule_common+0x82/0xd0 [ 275.540284][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 275.540307][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 275.540338][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 275.540371][ T38] watchdog+0x1030/0x1030 [ 275.540411][ T38] ? watchdog+0x1c7/0x1030 [ 275.540448][ T38] kthread+0x388/0x470 [ 275.540486][ T38] ? __pfx_watchdog+0x10/0x10 [ 275.540521][ T38] ? __pfx_kthread+0x10/0x10 [ 275.540551][ T38] ret_from_fork+0x514/0xb70 [ 275.540583][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 275.540611][ T38] ? __switch_to+0xc89/0x1420 [ 275.540639][ T38] ? __pfx_kthread+0x10/0x10 [ 275.540668][ T38] ret_from_fork_asm+0x1a/0x30 [ 275.540713][ T38] [ 275.540861][ T38] Kernel Offset: disabled