last executing test programs: 4m28.466615742s ago: executing program 2 (id=506): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x9, 0x1000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 4m19.564978789s ago: executing program 2 (id=517): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 4m15.872355105s ago: executing program 2 (id=520): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setattr(0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 4m12.306919131s ago: executing program 32 (id=509): openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x60000, 0x8, 0x3eae, 0xa, 0x0, [{0x77, 0x81, 0x4, '\x00', 0xc}, {0x9, 0x0, 0x7, '\x00', 0x9}, {0x7, 0x1, 0xc, '\x00', 0xd8}, {0x95, 0x6, 0x3, '\x00', 0xff}, {0xc4, 0xa, 0x1, '\x00', 0x4}, {0x4f, 0x4, 0x1, '\x00', 0x8}, {0xfb, 0xf5, 0x75, '\x00', 0x2}, {0x7, 0x10, 0xfe, '\x00', 0x2}, {0x12, 0x4, 0xf, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x9}, {0x9, 0xd, 0x5, '\x00', 0x6}, {0x3, 0x29, 0x4, '\x00', 0x2}, {0xa, 0x53, 0x5, '\x00', 0x19}, {0x4, 0xfe, 0xfe, '\x00', 0x6}, {0x5, 0xfd, 0x4, '\x00', 0x5}, {0x3b, 0xc, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0x7}, {0x3, 0x9, 0x28, '\x00', 0x1}, {0x7c, 0x5, 0x3d, '\x00', 0x5}, {0x0, 0x6, 0xfd, '\x00', 0x9}, {0x8f, 0x8, 0x7, '\x00', 0x9}, {0xa9, 0x10, 0xe, '\x00', 0x4}, {0x46, 0x4, 0x1, '\x00', 0x8}]}}) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 4m11.162513188s ago: executing program 2 (id=525): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 4m9.633445966s ago: executing program 2 (id=526): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) pread64(r0, 0x0, 0x0, 0x2f6) 4m7.441570159s ago: executing program 2 (id=530): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 3m52.512768038s ago: executing program 33 (id=527): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x9, 0x1000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 3m51.847063592s ago: executing program 34 (id=530): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2m41.506630308s ago: executing program 1 (id=623): io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x5}, 0xfd}, 0x18) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(0xffffffffffffffff, 0x2004, 0x56eb, 0x2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m40.488466905s ago: executing program 1 (id=624): syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500700601fe8000000000000000000000000000bbfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c002000090780000080a"], 0x0) 2m40.441341332s ago: executing program 1 (id=626): socket$inet_icmp(0x2, 0x2, 0x1) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 2m40.200765558s ago: executing program 1 (id=627): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @local}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x11, &(0x7f0000000020)={@local, @remote, @void, {@llc={0x3, {@llc={0x2, 0x5, 'o'}}}}}, 0x0) accept4$llc(r0, 0x0, 0x0, 0x800) syz_emit_ethernet(0x12, &(0x7f0000000040)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x4, "0002"}}}}}, 0x0) 2m40.136662569s ago: executing program 1 (id=628): syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) 2m40.082668582s ago: executing program 1 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n\x00', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x8008, @loopback}, 0x10) sendto(r2, &(0x7f0000000200)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m24.902816669s ago: executing program 35 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n\x00', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x8008, @loopback}, 0x10) sendto(r2, &(0x7f0000000200)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m37.911972318s ago: executing program 3 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) 1m37.761370928s ago: executing program 3 (id=698): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x605, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0x1}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000200)="8700000000000000fe800000000000000000000000000001", 0x1c, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 1m37.27552723s ago: executing program 3 (id=699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xa000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80204}, {0x804, 0x9, 0x1, 0x45, 0x7, 0x15, 0x4, 0x3, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x2, 0x50, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x129800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x7, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x400000000000002], 0x10000, 0x392}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m36.387777235s ago: executing program 3 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800008}]}, 0x30}}, 0x0) 1m36.313577786s ago: executing program 3 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1000, 0x2}}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 1m36.284538861s ago: executing program 3 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./nfsd\x00', &(0x7f0000000540)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000780)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f00000007c0)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000800)=""/1000, 0x3e8) read(r1, &(0x7f0000000c00)=""/1000, 0x3e8) 1m32.764692393s ago: executing program 8 (id=656): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp,retry=0,timeo=5,retrans=1\x00') (async) recvfrom$inet(r0, &(0x7f0000000500)=""/32, 0x20, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000500)="00000000010000000000000000000000000000000000000001080000", 0x1c, 0x0, &(0x7f0000000600)={0x2, 0x0, @loopback}, 0x10) nanosleep(&(0x7f0000000b00)={0x0, 0x11e1a300}, 0x0) 1m31.72929781s ago: executing program 8 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/syz_tun/accept_dad\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/all/accept_dad\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='0', 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000003c0)={'syz_tun\x00', @ifru_ivalue=0x1}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000400)={@private0, 0x40, r5}) syz_emit_ethernet(0x56, &(0x7f0000000440)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @private0, @private0, {[], @ndisc_na={0x88, 0x0, 0x0, 0x40, '\x00', @private0, [{0x2, 0x1, "aaaaaaaaaaaa"}]}}}}}}, 0x0) 1m29.264664535s ago: executing program 8 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='3\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r3, &(0x7f00000005c0)='1\n', 0x2) close(r3) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@link_local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2}}}}}, 0x0) 1m28.749965096s ago: executing program 8 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='10 2\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='120\n', 0x4) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001200010001000000000000000000000000000000000000000000000009000300657468310000000008001d0001000000"], 0x34}}, 0x0) 1m26.401169789s ago: executing program 5 (id=522): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket(0x10, 0x803, 0xfff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'}) 1m24.953570849s ago: executing program 5 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000300)={0x6}, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1m21.957380609s ago: executing program 8 (id=708): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b7000000020000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000400)="001122334455", 0x0, 0x2, 0x0, 0x1}, 0x50) 1m21.782551166s ago: executing program 8 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='+3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 1m21.179981103s ago: executing program 36 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./nfsd\x00', &(0x7f0000000540)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000780)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f00000007c0)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000800)=""/1000, 0x3e8) read(r1, &(0x7f0000000c00)=""/1000, 0x3e8) 1m9.076593674s ago: executing program 37 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000300)={0x6}, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1m6.309927577s ago: executing program 38 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='+3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 52.641241052s ago: executing program 9 (id=736): add_key$user(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)='payload\x00', 0x7, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000080)='payload\x00', 0x7, 0xfffffffffffffffc) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='xprtsec\x00', &(0x7f0000000200)='mtls\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='cert_serial\x00', &(0x7f0000000280)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, 0x10, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, 0x11, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x34, 0x12, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, 0x13, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x34, 0x14, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x34, 0x15, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x34, 0x16, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x34, 0x17, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x34, 0x18, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x34, 0x19, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x34, 0x1a, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x34, 0x1b, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) 52.498118708s ago: executing program 9 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) listen(r1, 0x5) syz_emit_ethernet(0x50, &(0x7f0000000300)={@local, @empty, @void, {@generic={0x800, "450000440000000040847c347f0000017f0000014e204e210000000067645d940100002812345678000186a0000a000a000000018002000a0001020304050000"}}}, 0x0) 52.305922471s ago: executing program 9 (id=738): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) r0 = epoll_create1(0x80000) r1 = fanotify_init(0x40, 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec772000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0xa0000002, 0x2000000}) 51.091805178s ago: executing program 9 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000090)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000d0)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000190)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001d0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000210)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000250)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r2, &(0x7f0000000290)='1', 0x1) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) listen(r3, 0x5) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) accept(r3, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) sendto$inet(r5, &(0x7f0000000600)="4e214e220000000000000000800000140000000a00"/32, 0x20, 0x0, &(0x7f0000000700)={0x2, 0x4e22, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 50.649683217s ago: executing program 9 (id=740): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 50.2999646s ago: executing program 9 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x76) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78) read(r4, &(0x7f0000000700)=""/256, 0x100) 43.161568839s ago: executing program 7 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x4e23, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f0000000200)=@in={0x2, 0x4e24, @loopback}, 0x10) connect(r3, &(0x7f0000000100)=@in={0x2, 0x4e23, @loopback}, 0x10) accept(r2, 0x0, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff000000000002080045000042000000004082b24500000000000000004e244e230000000000000000c100001c00000001000500087f000001c004000400000000"], 0x0) 43.096354105s ago: executing program 7 (id=754): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r1, 0x2) close(r2) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000200)=0x1, 0x4) 42.671588309s ago: executing program 7 (id=756): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) r0 = epoll_create1(0x80000) r1 = fanotify_init(0x40, 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec772000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x3, r2, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 40.76543798s ago: executing program 7 (id=760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty}, 0xa, @in6=@empty}}, 0xe8) listen(r0, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x1234, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x1234, 0x4e20, 0x1001, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) 40.218839364s ago: executing program 7 (id=761): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1, 0x400, 0x3, 0x9a, 0x9531, 0xffffffffffffffff, 0xc, 0x9, 0xae, 0x6, 0x60, 0x9, 0x3, 0x3, 0x5], 0x25000, 0x20000}) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0xff], 'ip_vti0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x20004000) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {0x0}, {0x0}], 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x1000000004, 0x800000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0xffff, 0x7, 0xc0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x13e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000001300)=0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, 0xffffffffffffffff, 0x0}]) io_cancel(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 39.020324396s ago: executing program 7 (id=767): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 34.726331571s ago: executing program 39 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x76) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78) read(r4, &(0x7f0000000700)=""/256, 0x100) 30.437058642s ago: executing program 0 (id=792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000c0000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000), 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000d0000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000e0000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000000), 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000f0000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100100000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100110000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000000), 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100120000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000000), 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100130000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000000), 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100140000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f0000000000), 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100150000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000940)={&(0x7f0000000000), 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100160000000c000500010000000c000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={&(0x7f0000000000), 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001a00010301000000000000002d00"/28], 0x1c}}, 0x0) 30.32665198s ago: executing program 0 (id=793): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newneigh={0x30, 0x1c, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x80}, [@NDA_DST_IPV4={0x8, 0x1, @private=0xa010101}, @NDA_LLADDR={0xa, 0x2, @random="aaaaaaaaaaaa"}]}, 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000000), 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000}]}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={&(0x7f0000000000), 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={&(0x7f0000000000), 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={&(0x7f0000000000), 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x7c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00112233445508004500001c0000000040113cce0a0000020a0000013930393000080000"], 0x0) 29.696029074s ago: executing program 0 (id=797): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x5, 0x0, [{0xb, 0x6, 0x0, 0x1, 0x3, 0x5, 0x6}, {0x80000008, 0x6, 0x4, 0x2, 0x3, 0x40, 0x549}, {0x80000007, 0x3, 0x2, 0x7, 0x1, 0x77, 0x100}, {0x40000006, 0xbc, 0x6, 0x101, 0x6, 0x6c, 0x4}, {0x4, 0xffff194c, 0x4, 0x400, 0x1, 0x7ff, 0x6}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) 28.385127044s ago: executing program 0 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000100000000000000000000000000000000001c0012800b00010076657468300000000c000280140001000b0001007665746831000000"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001000000000000000000000000000100000001000000100003800b0001007665746830000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001000000000000000000000000000100000001000000100003800b0001007665746831000000"], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x28}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x8b88) bind$packet(r3, &(0x7f0000000100)={0x11, 0x8b88, 0x3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r3, &(0x7f0000000200)="ffffffffffff02000000000188ca1000"/66, 0x40, 0x0, &(0x7f0000000100)={0x11, 0x8b88, 0x3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = socket$packet(0x11, 0x3, 0x8b88) recvfrom(r4, &(0x7f0000000300), 0x200, 0x40, 0x0, 0x0) 28.157809684s ago: executing program 0 (id=804): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x0, &(0x7f0000001000)='\x00', 0x1, 0x0, 0x0, &(0x7f0000001100)='\x00') r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000600)='ceph v027\x00'/152, 0x91) r2 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='mon_addr\x00', &(0x7f0000000500)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 26.790513955s ago: executing program 0 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000380)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) 23.754496579s ago: executing program 40 (id=767): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 11.237980375s ago: executing program 41 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000380)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) 6.23955863s ago: executing program 4 (id=877): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) 4.879382266s ago: executing program 4 (id=881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001800010000000000000000002d0000000000000001000000050001000a0000000c0005000100000014000000"], 0x28}}, 0x0) 4.346855196s ago: executing program 4 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) 4.009013797s ago: executing program 4 (id=885): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1, 0x400, 0x3, 0x9a, 0x9531, 0xffffffffffffffff, 0xc, 0x9, 0xae, 0x6, 0x60, 0x9, 0x3, 0x3, 0x5], 0x25000, 0x20000}) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0xff], 'ip_vti0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x20004000) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {0x0}, {0x0}], 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x1000000004, 0x800000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0xffff, 0x7, 0xc0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x13e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r4 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000001300)=0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) io_cancel(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 2.483801841s ago: executing program 6 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000100)={0x95b, 0x7, 0x0, 0x3}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}]}, 0x30}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) 2.46908096s ago: executing program 4 (id=888): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) 297.729283ms ago: executing program 6 (id=889): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='cert_serial\x00', 0x0, 0x0) 185.378999ms ago: executing program 6 (id=890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 157.294357ms ago: executing program 6 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x601, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x258}]}, 0x78}}, 0x0) 101.624791ms ago: executing program 4 (id=892): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 101.312563ms ago: executing program 6 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n\x00', 0x2) 0s ago: executing program 6 (id=894): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) kernel console output (not intermixed with test programs): equested 4190 ns i8254 timer period limited to 200000 ns [ 181.747364][ T5609] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 181.901989][ T5609] usb 3-1: Using ep0 maxpacket: 32 [ 181.920222][ T5609] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.920247][ T5609] usb 3-1: config 0 has no interface number 0 [ 181.954102][ T5609] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 181.954187][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.954207][ T5609] usb 3-1: Product: syz [ 181.954221][ T5609] usb 3-1: Manufacturer: syz [ 181.954235][ T5609] usb 3-1: SerialNumber: syz [ 182.014010][ T5609] usb 3-1: config 0 descriptor?? [ 182.035526][ T5609] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 182.035563][ T5609] usb 3-1: selecting invalid altsetting 1 [ 182.035577][ T5609] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 182.086526][ T5609] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 182.086979][ T5609] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 182.107940][ T5609] usb 3-1: media controller created [ 182.135970][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.359859][ T6998] kvm: pic: single mode not supported [ 184.247195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.347195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.620744][ T5609] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 184.620819][ T5609] zl10353_read_register: readreg error (reg=127, ret==-110) [ 184.762710][ T6996] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 185.073283][ T5609] usb 3-1: USB disconnect, device number 5 [ 188.687199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 188.707215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 190.693946][ T5699] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 190.767208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 190.787201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 190.797201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 192.692205][ T5699] usb 2-1: no configurations [ 192.692222][ T5699] usb 2-1: can't read configurations, error -22 [ 192.977326][ T5699] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.072315][ T7103] process 'syz.4.480' launched './file0' with NULL argv: empty string added [ 193.133665][ T5699] usb 2-1: no configurations [ 193.133677][ T5699] usb 2-1: can't read configurations, error -22 [ 193.138392][ T5699] usb usb2-port1: attempt power cycle [ 194.518398][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518479][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.232402][ T7148] syz.4.494 uses obsolete (PF_INET,SOCK_PACKET) [ 196.236191][ T7148] netlink: 56 bytes leftover after parsing attributes in process `syz.4.494'. [ 196.440313][ T5698] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 196.591387][ T5698] usb 1-1: no configurations [ 196.591406][ T5698] usb 1-1: can't read configurations, error -22 [ 196.720741][ T5698] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 196.896498][ T5698] usb 1-1: no configurations [ 196.896518][ T5698] usb 1-1: can't read configurations, error -22 [ 196.904126][ T5698] usb usb1-port1: attempt power cycle [ 197.483832][ T5698] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 197.905625][ T5698] usb 1-1: no configurations [ 197.905644][ T5698] usb 1-1: can't read configurations, error -22 [ 198.107380][ T5698] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 198.143388][ T5698] usb 1-1: no configurations [ 198.143405][ T5698] usb 1-1: can't read configurations, error -22 [ 198.144539][ T5698] usb usb1-port1: unable to enumerate USB device [ 207.600857][ T7210] sctp: [Deprecated]: syz.1.513 (pid 7210) Use of int in max_burst socket option deprecated. [ 207.600857][ T7210] Use struct sctp_assoc_value instead [ 209.347248][ T822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 209.758834][ T822] usb 2-1: no configurations [ 209.758852][ T822] usb 2-1: can't read configurations, error -22 [ 212.418811][ T822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 216.440022][ T4909] Bluetooth: hci4: command tx timeout [ 216.508175][ T7238] Bluetooth: hci1: command 0x0406 tx timeout [ 216.508209][ T7238] Bluetooth: hci2: command tx timeout [ 216.508227][ T7238] Bluetooth: hci3: command tx timeout [ 216.510219][ T4909] Bluetooth: hci0: command 0x0406 tx timeout [ 219.744468][ T7223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.830404][ T7223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.845555][ T7223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.860281][ T7223] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.863837][ T7223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.046581][ T7226] Bluetooth: hci5: command tx timeout [ 223.530405][ T6772] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 223.720225][ T6772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.720250][ T6772] usb 2-1: config 0 has no interfaces? [ 224.107312][ T7226] Bluetooth: hci5: command tx timeout [ 224.839760][ T7278] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 226.187251][ T7226] Bluetooth: hci5: command tx timeout [ 228.267218][ T7226] Bluetooth: hci5: command tx timeout [ 230.237827][ T6772] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 230.237857][ T6772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 230.237876][ T6772] usb 2-1: Product: syz [ 230.587053][ T6772] usb 2-1: config 0 descriptor?? [ 230.802565][ T6772] usb 2-1: can't set config #0, error -71 [ 230.862020][ T6772] usb 2-1: USB disconnect, device number 8 [ 238.129104][ T7223] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.227384][ T7223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.228568][ T7223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.269370][ T7223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.270377][ T7223] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.431206][ T150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.524675][ T7223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.557582][ T7223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.570907][ T7223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.584492][ T7223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.607989][ T7223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.427369][ T7223] Bluetooth: hci3: command tx timeout [ 242.027766][ T7223] Bluetooth: hci6: command tx timeout [ 242.509608][ T7223] Bluetooth: hci3: command tx timeout [ 242.601719][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.601909][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.602063][ T7257] bridge_slave_0: entered allmulticast mode [ 242.632423][ T7257] bridge_slave_0: entered promiscuous mode [ 242.684693][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.684827][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.684979][ T7257] bridge_slave_1: entered allmulticast mode [ 242.718798][ T7257] bridge_slave_1: entered promiscuous mode [ 242.987721][ T7257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.042244][ T7257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.171670][ T7257] team0: Port device team_slave_0 added [ 243.197300][ T6772] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 243.235404][ T7257] team0: Port device team_slave_1 added [ 243.336958][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.337077][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.349533][ T6772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.349558][ T6772] usb 2-1: config 0 has no interfaces? [ 243.374601][ T7303] bridge_slave_0: entered allmulticast mode [ 243.375292][ T6772] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 243.375316][ T6772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 243.375335][ T6772] usb 2-1: Product: syz [ 243.375348][ T6772] usb 2-1: Manufacturer: syz [ 243.432585][ T6772] usb 2-1: config 0 descriptor?? [ 243.453467][ T7303] bridge_slave_0: entered promiscuous mode [ 243.671207][ T5699] usb 2-1: USB disconnect, device number 9 [ 244.107378][ T7223] Bluetooth: hci6: command tx timeout [ 244.587282][ T7223] Bluetooth: hci3: command tx timeout [ 244.797473][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.797587][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.797748][ T7303] bridge_slave_1: entered allmulticast mode [ 244.833197][ T7303] bridge_slave_1: entered promiscuous mode [ 246.189483][ T7223] Bluetooth: hci6: command tx timeout [ 246.583690][ T7363] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 246.583726][ T7363] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 246.583764][ T7363] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 246.667336][ T7223] Bluetooth: hci3: command tx timeout [ 248.166357][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.166373][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.166400][ T7257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.267428][ T7223] Bluetooth: hci6: command tx timeout [ 249.119804][ T150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.256906][ T7364] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 249.452327][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.452343][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.452369][ T7257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.672540][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.798970][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.657306][ T37] audit: type=1107 audit(1785175587.249:8): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 255.125772][ T150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.587441][ T7303] team0: Port device team_slave_0 added [ 255.643318][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643380][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.689231][ T7257] hsr_slave_0: entered promiscuous mode [ 255.714658][ T7257] hsr_slave_1: entered promiscuous mode [ 255.732417][ T7257] debugfs: 'hsr0' already exists in 'hsr' [ 255.732524][ T7257] Cannot create hsr debugfs directory [ 255.765265][ T7303] team0: Port device team_slave_1 added [ 259.815497][ T150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.737295][ T5699] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 260.855404][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.855421][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.855445][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.887243][ T5699] usb 4-1: Using ep0 maxpacket: 32 [ 260.889686][ T5699] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 260.889708][ T5699] usb 4-1: config 0 has no interface number 0 [ 260.889749][ T5699] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.889774][ T5699] usb 4-1: config 0 interface 85 has no altsetting 0 [ 260.897314][ T5699] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 260.897338][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.897357][ T5699] usb 4-1: Product: syz [ 260.897371][ T5699] usb 4-1: Manufacturer: syz [ 260.897385][ T5699] usb 4-1: SerialNumber: syz [ 260.991777][ T5699] usb 4-1: config 0 descriptor?? [ 261.081041][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.081055][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.081088][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.602934][ T5699] appletouch 4-1:0.85: Geyser mode initialized. [ 261.631559][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.631677][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.632262][ T7304] bridge_slave_0: entered allmulticast mode [ 261.671387][ T7304] bridge_slave_0: entered promiscuous mode [ 261.691022][ T5699] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input8 [ 261.803907][ T7303] hsr_slave_0: entered promiscuous mode [ 261.873536][ T5699] usb 4-1: USB disconnect, device number 3 [ 261.873634][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 261.894284][ T7303] hsr_slave_1: entered promiscuous mode [ 261.934292][ T7303] debugfs: 'hsr0' already exists in 'hsr' [ 261.934316][ T7303] Cannot create hsr debugfs directory [ 262.012921][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.013042][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.015746][ T7304] bridge_slave_1: entered allmulticast mode [ 262.047626][ T7304] bridge_slave_1: entered promiscuous mode [ 262.314828][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.355216][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.779285][ T7304] team0: Port device team_slave_0 added [ 262.842062][ T7304] team0: Port device team_slave_1 added [ 263.495950][ T5699] appletouch 4-1:0.85: input: appletouch disconnected [ 264.600462][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.600478][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.600504][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.742264][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.742279][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.742305][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.647981][ T7304] hsr_slave_0: entered promiscuous mode [ 265.668177][ T7304] hsr_slave_1: entered promiscuous mode [ 265.670672][ T7304] debugfs: 'hsr0' already exists in 'hsr' [ 265.670694][ T7304] Cannot create hsr debugfs directory [ 266.452301][ T7257] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.594848][ T7257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.624010][ T7257] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.739280][ T7257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.884097][ T7257] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.919002][ T7257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.090686][ T7257] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.808251][ T7257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.922007][ T150] bridge_slave_1: left allmulticast mode [ 269.922171][ T150] bridge_slave_1: left promiscuous mode [ 269.925570][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.000026][ T150] bridge_slave_0: left allmulticast mode [ 270.000054][ T150] bridge_slave_0: left promiscuous mode [ 270.000278][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.718475][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.749691][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.774081][ T150] bond0 (unregistering): Released all slaves [ 274.456502][ T7303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.118533][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.162879][ T7303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.448973][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.581045][ T7303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.701649][ T7501] netlink: 108 bytes leftover after parsing attributes in process `syz.1.583'. [ 275.747783][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.805717][ T7303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.059992][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.184975][ T7226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.220975][ T7226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.311020][ T7226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.312469][ T7226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.314034][ T7226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.514299][ T7226] Bluetooth: hci0: command tx timeout [ 286.587410][ T7226] Bluetooth: hci0: command tx timeout [ 287.665257][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 288.671821][ T7226] Bluetooth: hci0: command tx timeout [ 290.747581][ T7226] Bluetooth: hci0: command tx timeout [ 292.002839][ T7304] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 292.242388][ T7304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.246155][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 293.762449][ T7304] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 293.804010][ T7304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.353152][ T7304] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 295.414338][ T7304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.594454][ T7304] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 295.745276][ T7304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.694209][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.961878][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.029865][ T150] hsr_slave_0: left promiscuous mode [ 299.087938][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.093607][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.178219][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.184419][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.208932][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.209979][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.392815][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.395177][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.843388][ T150] hsr_slave_1: left promiscuous mode [ 299.855880][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.855963][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.940601][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.940630][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.097763][ T150] veth1_macvtap: left promiscuous mode [ 300.098057][ T150] veth0_macvtap: left promiscuous mode [ 300.098368][ T150] veth1_vlan: left promiscuous mode [ 300.102007][ T150] veth0_vlan: left promiscuous mode [ 301.137846][ T150] team0 (unregistering): Port device team_slave_1 removed [ 301.198385][ T150] team0 (unregistering): Port device team_slave_0 removed [ 301.307387][ T7226] Bluetooth: hci5: command tx timeout [ 301.429405][ T7304] kthread_run failed with err -4 [ 301.467367][ T7226] Bluetooth: hci1: command tx timeout [ 302.553960][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 302.556315][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 303.345785][ T37] audit: type=1326 audit(1785175636.959:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.3.615" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d50cde99 code=0x7ffc0000 [ 303.345853][ T37] audit: type=1326 audit(1785175636.959:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.3.615" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d50cde99 code=0x7ffc0000 [ 303.391700][ T7226] Bluetooth: hci5: command tx timeout [ 303.408580][ T37] audit: type=1326 audit(1785175637.019:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.3.615" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa9d50cde99 code=0x7ffc0000 [ 303.408628][ T37] audit: type=1326 audit(1785175637.019:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.3.615" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d50cde99 code=0x7ffc0000 [ 303.491862][ T37] audit: type=1326 audit(1785175637.029:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.3.615" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9d50cde99 code=0x7ffc0000 [ 303.491910][ T37] audit: type=1326 audit(1785175637.109:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.3.615" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d50cde99 code=0x7ffc0000 [ 303.491949][ T37] audit: type=1326 audit(1785175637.109:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.3.615" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d50cde99 code=0x7ffc0000 [ 303.547712][ T7226] Bluetooth: hci1: command tx timeout [ 303.747325][ T7224] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 303.922698][ T7224] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 303.922726][ T7224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.922744][ T7224] usb 4-1: Product: syz [ 303.922756][ T7224] usb 4-1: Manufacturer: syz [ 303.922770][ T7224] usb 4-1: SerialNumber: syz [ 304.062756][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 304.169585][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.387700][ T37] audit: type=1326 audit(1785175637.999:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.3.615" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9d50cde99 code=0x7ffc0000 [ 305.325027][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 305.502428][ T7226] Bluetooth: hci5: command tx timeout [ 305.608659][ T9] ath9k_htc: Failed to initialize the device [ 305.627384][ T7226] Bluetooth: hci1: command tx timeout [ 305.781619][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 306.239987][ T7735] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 306.240238][ T7735] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 306.240339][ T7735] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 306.426733][ T7691] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 306.516171][ T7691] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 306.768822][ T7226] Bluetooth: hci2: command 0x0c1a tx timeout [ 307.142391][ T5255] 8021q: adding VLAN 0 to HW filter on device eth4 [ 307.230298][ T7691] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.231049][ T7691] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 307.385186][ T7691] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.385364][ T7691] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 307.510081][ T7691] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 307.549515][ T7226] Bluetooth: hci5: command tx timeout [ 307.569047][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.569311][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.569649][ T7528] bridge_slave_0: entered allmulticast mode [ 307.629980][ T7528] bridge_slave_0: entered promiscuous mode [ 307.707625][ T7226] Bluetooth: hci1: command tx timeout [ 307.779048][ T7691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.779334][ T7691] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 307.783225][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.783394][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.783772][ T7528] bridge_slave_1: entered allmulticast mode [ 307.851257][ T7528] bridge_slave_1: entered promiscuous mode [ 307.905675][ T7691] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 307.975330][ T7691] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 307.977786][ T7691] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 308.087453][ T7691] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 308.435879][ T6772] usb 4-1: USB disconnect, device number 4 [ 308.466801][ T7528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.498696][ T7528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.833807][ T7226] Bluetooth: hci2: command 0x0c1a tx timeout [ 308.959812][ T7528] team0: Port device team_slave_0 added [ 309.006326][ T7528] team0: Port device team_slave_1 added [ 309.147598][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.147614][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.147639][ T7528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.213080][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.213092][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.213108][ T7528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.227717][ T7226] Bluetooth: hci4: command 0x0c1a tx timeout [ 309.397238][ T7226] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.584502][ T7528] hsr_slave_0: entered promiscuous mode [ 309.585793][ T7528] hsr_slave_1: entered promiscuous mode [ 309.586717][ T7528] debugfs: 'hsr0' already exists in 'hsr' [ 309.586738][ T7528] Cannot create hsr debugfs directory [ 309.789310][ T7226] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.027402][ T7226] Bluetooth: hci5: command 0x0c1a tx timeout [ 310.127551][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.127671][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.127781][ T7642] bridge_slave_0: entered allmulticast mode [ 310.140985][ T7642] bridge_slave_0: entered promiscuous mode [ 310.195175][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.195262][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.195628][ T7642] bridge_slave_1: entered allmulticast mode [ 310.219291][ T7642] bridge_slave_1: entered promiscuous mode [ 310.235490][ T7643] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.235604][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.235739][ T7643] bridge_slave_0: entered allmulticast mode [ 310.255968][ T7643] bridge_slave_0: entered promiscuous mode [ 310.572549][ T7643] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.572637][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.572851][ T7643] bridge_slave_1: entered allmulticast mode [ 310.574498][ T7643] bridge_slave_1: entered promiscuous mode [ 310.724783][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.809017][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.059459][ T7643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.117698][ T7643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.182385][ T7642] team0: Port device team_slave_0 added [ 311.215341][ T7642] team0: Port device team_slave_1 added [ 311.225934][ T7643] team0: Port device team_slave_0 added [ 311.308623][ T7226] Bluetooth: hci4: command 0x0c1a tx timeout [ 311.431670][ T7643] team0: Port device team_slave_1 added [ 311.467216][ T7226] Bluetooth: hci0: command 0x0c1a tx timeout [ 311.736063][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.736075][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.736091][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.823389][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.823404][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.823428][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.867349][ T7226] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.123915][ T7226] Bluetooth: hci5: command 0x0c1a tx timeout [ 313.214832][ T7643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.214850][ T7643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.214882][ T7643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.957422][ T7226] Bluetooth: hci1: command 0x0c1a tx timeout [ 314.155140][ T7226] Bluetooth: hci0: command 0x0c1a tx timeout [ 314.197141][ T7226] Bluetooth: hci5: command 0x0c1a tx timeout [ 314.319042][ T7643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.319054][ T7643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.319071][ T7643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.323920][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 314.664874][ T7824] netlink: 300 bytes leftover after parsing attributes in process `syz.3.639'. [ 314.782987][ T7642] hsr_slave_0: entered promiscuous mode [ 314.795511][ T7642] hsr_slave_1: entered promiscuous mode [ 314.796378][ T7642] debugfs: 'hsr0' already exists in 'hsr' [ 314.796407][ T7642] Cannot create hsr debugfs directory [ 315.175576][ T7643] hsr_slave_0: entered promiscuous mode [ 315.183344][ T7643] hsr_slave_1: entered promiscuous mode [ 315.184600][ T7643] debugfs: 'hsr0' already exists in 'hsr' [ 315.184625][ T7643] Cannot create hsr debugfs directory [ 316.669616][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6 [ 317.723984][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.724048][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.665822][ T150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.238684][ T150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.492408][ T7528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 319.578383][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.740938][ T150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.790503][ T7528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 319.830505][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.837056][ T5255] 8021q: adding VLAN 0 to HW filter on device eth7 [ 319.882370][ T7528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.927970][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 320.012354][ T7528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.063862][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.255702][ T150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.962520][ T7528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.035087][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.570196][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9 [ 321.968534][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.968661][ T6634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.583914][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.585825][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.788046][ T150] bridge_slave_1: left allmulticast mode [ 323.788078][ T150] bridge_slave_1: left promiscuous mode [ 323.788304][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.112467][ T150] bridge_slave_0: left allmulticast mode [ 324.112497][ T150] bridge_slave_0: left promiscuous mode [ 324.173652][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.335494][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.390964][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.404262][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.414239][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.433108][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.647830][ T150] bridge_slave_1: left allmulticast mode [ 324.647860][ T150] bridge_slave_1: left promiscuous mode [ 324.648071][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.810194][ T150] bridge_slave_0: left allmulticast mode [ 324.810346][ T150] bridge_slave_0: left promiscuous mode [ 324.810575][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.087855][ T150] bridge_slave_1: left allmulticast mode [ 325.087881][ T150] bridge_slave_1: left promiscuous mode [ 325.088060][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.198756][ T150] bridge_slave_0: left allmulticast mode [ 325.198782][ T150] bridge_slave_0: left promiscuous mode [ 325.198955][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.399287][ T150] bridge_slave_1: left allmulticast mode [ 325.399313][ T150] bridge_slave_1: left promiscuous mode [ 325.399477][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.540153][ T150] bridge_slave_0: left allmulticast mode [ 325.540188][ T150] bridge_slave_0: left promiscuous mode [ 325.540367][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.798099][ T150] bridge_slave_1: left allmulticast mode [ 325.798123][ T150] bridge_slave_1: left promiscuous mode [ 325.798287][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.899432][ T150] bridge_slave_0: left allmulticast mode [ 325.899457][ T150] bridge_slave_0: left promiscuous mode [ 325.899604][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.587389][ T7226] Bluetooth: hci3: command tx timeout [ 326.616241][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.870823][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.670055][ T7226] Bluetooth: hci3: command tx timeout [ 328.683984][ T150] bond0 (unregistering): Released all slaves [ 328.957897][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.037820][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.098911][ T150] bond0 (unregistering): Released all slaves [ 329.337876][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.418146][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.479776][ T150] bond0 (unregistering): Released all slaves [ 329.927792][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.008503][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.030396][ T150] bond0 (unregistering): Released all slaves [ 330.439293][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.520532][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.539201][ T150] bond0 (unregistering): Released all slaves [ 330.603310][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10 [ 330.747660][ T7226] Bluetooth: hci3: command tx timeout [ 332.069500][ T150] tipc: Left network mode [ 332.827365][ T7226] Bluetooth: hci3: command tx timeout [ 332.866448][ T7528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.578320][ T7642] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 334.621517][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.621980][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.622183][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.622429][ T7930] bridge_slave_0: entered allmulticast mode [ 334.624131][ T7930] bridge_slave_0: entered promiscuous mode [ 334.759371][ T7642] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.797566][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.798414][ T7930] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.798519][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.798676][ T7930] bridge_slave_1: entered allmulticast mode [ 334.800767][ T7930] bridge_slave_1: entered promiscuous mode [ 334.805989][ T7642] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.870858][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.933290][ T7642] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.970057][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.129665][ T7930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.315373][ T7930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.440294][ T7930] team0: Port device team_slave_0 added [ 337.480531][ T7930] team0: Port device team_slave_1 added [ 337.618896][ T7528] veth0_vlan: entered promiscuous mode [ 337.636518][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.636532][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.636596][ T7930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.701675][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.701691][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.701716][ T7930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.705327][ T7643] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 337.800735][ T7643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.838966][ T7643] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 337.907715][ T7643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.921436][ T7643] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 337.976860][ T7643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.177615][ T150] hsr_slave_0: left promiscuous mode [ 338.221691][ T150] hsr_slave_1: left promiscuous mode [ 338.222541][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.269114][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.471188][ T150] hsr_slave_0: left promiscuous mode [ 338.507307][ T150] hsr_slave_1: left promiscuous mode [ 338.508015][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.557807][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.717272][ T150] hsr_slave_0: left promiscuous mode [ 338.737237][ T150] hsr_slave_1: left promiscuous mode [ 338.737848][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.777782][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.937292][ T150] hsr_slave_0: left promiscuous mode [ 338.957290][ T150] hsr_slave_1: left promiscuous mode [ 338.957944][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.957959][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.999198][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.999214][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.137310][ T150] hsr_slave_0: left promiscuous mode [ 339.158507][ T150] hsr_slave_1: left promiscuous mode [ 339.159445][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.159467][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.208595][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.208618][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.291674][ T150] veth1_macvtap: left promiscuous mode [ 339.291744][ T150] veth0_macvtap: left promiscuous mode [ 339.296578][ T150] veth1_vlan: left promiscuous mode [ 339.296710][ T150] veth0_vlan: left promiscuous mode [ 339.457404][ T150] veth1_macvtap: left promiscuous mode [ 339.457514][ T150] veth0_macvtap: left promiscuous mode [ 339.457754][ T150] veth1_vlan: left promiscuous mode [ 339.457922][ T150] veth0_vlan: left promiscuous mode [ 339.551235][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.555283][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.556345][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.583026][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.583637][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.339043][ T150] team0 (unregistering): Port device team_slave_1 removed [ 340.377812][ T150] team0 (unregistering): Port device team_slave_0 removed [ 340.967828][ T150] team0 (unregistering): Port device team_slave_1 removed [ 341.028986][ T150] team0 (unregistering): Port device team_slave_0 removed [ 341.627261][ T7226] Bluetooth: hci6: command tx timeout [ 341.687722][ T150] team0 (unregistering): Port device team_slave_1 removed [ 341.728330][ T150] team0 (unregistering): Port device team_slave_0 removed [ 343.049732][ T150] team0 (unregistering): Port device team_slave_1 removed [ 343.107946][ T150] team0 (unregistering): Port device team_slave_0 removed [ 343.293610][ T7643] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 343.358991][ T7643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.362292][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6 [ 343.387568][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 343.712753][ T7226] Bluetooth: hci6: command tx timeout [ 345.787353][ T7226] Bluetooth: hci6: command tx timeout [ 347.867251][ T7226] Bluetooth: hci6: command tx timeout [ 354.519173][ T7930] hsr_slave_0: entered promiscuous mode [ 354.520793][ T7930] hsr_slave_1: entered promiscuous mode [ 355.546985][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.970225][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.028742][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.028898][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.147267][ T7643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.183867][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.183983][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.442006][ T7930] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 356.489220][ T7930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.565595][ T7930] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 356.652096][ T7930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.728869][ T7930] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 356.774151][ T7930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 356.994901][ T7930] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 357.098337][ T7930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.182855][ T7643] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.183859][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.184055][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.184213][ T8100] bridge_slave_0: entered allmulticast mode [ 357.196681][ T8100] bridge_slave_0: entered promiscuous mode [ 357.255182][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.255530][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.255711][ T8100] bridge_slave_1: entered allmulticast mode [ 357.271968][ T8100] bridge_slave_1: entered promiscuous mode [ 357.376823][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.376953][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.427630][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.485679][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.586475][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.592186][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.651663][ T8100] team0: Port device team_slave_0 added [ 357.671341][ T8100] team0: Port device team_slave_1 added [ 357.997696][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.997712][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.997735][ T8100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.003346][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.003359][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.003385][ T8100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.345958][ T8100] hsr_slave_0: entered promiscuous mode [ 358.363272][ T8100] hsr_slave_1: entered promiscuous mode [ 358.366988][ T8100] debugfs: 'hsr0' already exists in 'hsr' [ 358.367020][ T8100] Cannot create hsr debugfs directory [ 358.410387][ T7223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.442096][ T5706] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 358.494473][ T5593] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.522010][ T7223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.541182][ T7223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.583400][ T7223] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.589786][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.593276][ T5593] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.634194][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 358.636979][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.637836][ T5706] usb 4-1: no configurations [ 358.637850][ T5706] usb 4-1: can't read configurations, error -22 [ 358.667992][ T5593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.682248][ T5593] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 359.017237][ T5706] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 359.168160][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 359.170331][ T5706] usb 4-1: no configurations [ 359.170344][ T5706] usb 4-1: can't read configurations, error -22 [ 359.170618][ T5706] usb usb4-port1: attempt power cycle [ 359.507266][ T5706] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 359.528026][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 359.528854][ T5706] usb 4-1: no configurations [ 359.528870][ T5706] usb 4-1: can't read configurations, error -22 [ 359.658567][ T5706] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 359.684559][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 359.685156][ T5706] usb 4-1: no configurations [ 359.685166][ T5706] usb 4-1: can't read configurations, error -22 [ 359.685524][ T5706] usb usb4-port1: unable to enumerate USB device [ 359.812099][ T5255] 8021q: adding VLAN 0 to HW filter on device eth7 [ 360.241334][ T7930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.783013][ T7930] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.785428][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 360.844909][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.846551][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.920781][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.920907][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.987498][ T59] Bluetooth: hci0: command tx timeout [ 360.997404][ T59] Bluetooth: hci7: command tx timeout [ 363.133528][ T59] Bluetooth: hci7: command tx timeout [ 363.133560][ T59] Bluetooth: hci0: command tx timeout [ 364.345367][ T5255] 8021q: adding VLAN 0 to HW filter on device eth8 [ 365.153310][ T59] Bluetooth: hci7: command tx timeout [ 365.153464][ T7226] Bluetooth: hci0: command tx timeout [ 366.027453][ T5699] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 366.177211][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 366.181062][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.181091][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.181128][ T5699] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.181148][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.200993][ T5699] usb 4-1: config 0 descriptor?? [ 366.296424][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.296585][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.296782][ T8232] bridge_slave_0: entered allmulticast mode [ 366.321512][ T8232] bridge_slave_0: entered promiscuous mode [ 366.388043][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.388155][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.388335][ T8232] bridge_slave_1: entered allmulticast mode [ 366.390707][ T8232] bridge_slave_1: entered promiscuous mode [ 366.459383][ T5699] usbhid 4-1:0.0: can't add hid device: -71 [ 366.459497][ T5699] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 366.493882][ T5699] usb 4-1: USB disconnect, device number 9 [ 366.666663][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.666746][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.666878][ T8231] bridge_slave_0: entered allmulticast mode [ 366.691369][ T8231] bridge_slave_0: entered promiscuous mode [ 366.736536][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.736674][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.736840][ T8231] bridge_slave_1: entered allmulticast mode [ 366.760227][ T8231] bridge_slave_1: entered promiscuous mode [ 366.776055][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.813018][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.020740][ T8100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.062074][ T8100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.157723][ T8100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 367.202294][ T8100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.206023][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.227517][ T7226] Bluetooth: hci0: command tx timeout [ 367.227528][ T59] Bluetooth: hci7: command tx timeout [ 367.251510][ T8100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 367.257421][ T7224] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 367.302538][ T8100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 367.315275][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.331529][ T8232] team0: Port device team_slave_0 added [ 367.336237][ T8100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 367.385844][ T8100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 367.418376][ T7224] usb 4-1: not running at top speed; connect to a high speed hub [ 367.420763][ T7224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 367.420792][ T7224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 367.424029][ T7224] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 367.424054][ T7224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.424074][ T7224] usb 4-1: Product: syz [ 367.424088][ T7224] usb 4-1: Manufacturer: syz [ 367.424116][ T7224] usb 4-1: SerialNumber: syz [ 367.496616][ T8232] team0: Port device team_slave_1 added [ 367.512666][ T8367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.512778][ T8367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.592584][ T8231] team0: Port device team_slave_0 added [ 367.658555][ T8231] team0: Port device team_slave_1 added [ 367.680103][ T7930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.682320][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.682331][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.682352][ T8232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.774175][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.774190][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.774264][ T8232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.995142][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.995158][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.995183][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.010743][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.012911][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.012939][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.256636][ T7224] ax88179_178a 4-1:1.0: probe with driver ax88179_178a failed with error -71 [ 368.305451][ T7224] usb 4-1: USB disconnect, device number 10 [ 368.415650][ T8232] hsr_slave_0: entered promiscuous mode [ 368.423254][ T8232] hsr_slave_1: entered promiscuous mode [ 368.424208][ T8232] debugfs: 'hsr0' already exists in 'hsr' [ 368.424231][ T8232] Cannot create hsr debugfs directory [ 368.522291][ T8231] hsr_slave_0: entered promiscuous mode [ 368.524060][ T8231] hsr_slave_1: entered promiscuous mode [ 368.525000][ T8231] debugfs: 'hsr0' already exists in 'hsr' [ 368.525015][ T8231] Cannot create hsr debugfs directory [ 369.137447][ T5609] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 369.287230][ T5609] usb 4-1: Using ep0 maxpacket: 32 [ 369.289846][ T5609] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.289867][ T5609] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.292011][ T5609] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 369.292035][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.292051][ T5609] usb 4-1: Product: syz [ 369.292064][ T5609] usb 4-1: Manufacturer: syz [ 369.292089][ T5609] usb 4-1: SerialNumber: syz [ 369.295773][ T5609] usb 4-1: config 0 descriptor?? [ 369.526572][ T5698] usb 4-1: USB disconnect, device number 11 [ 369.612967][ T7930] veth0_vlan: entered promiscuous mode [ 369.929544][ T7930] veth1_vlan: entered promiscuous mode [ 370.130975][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9 [ 370.149873][ T8100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.431363][ T8100] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.556906][ T7930] veth0_macvtap: entered promiscuous mode [ 370.576176][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.576303][ T6634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.605250][ T7930] veth1_macvtap: entered promiscuous mode [ 370.620641][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.620754][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.691165][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.968278][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.023709][ T148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.045869][ T148] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.063851][ T148] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.084060][ T148] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.214214][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.214233][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.357484][ T12] bridge_slave_1: left allmulticast mode [ 372.357528][ T12] bridge_slave_1: left promiscuous mode [ 372.358616][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.508895][ T12] bridge_slave_0: left allmulticast mode [ 372.508927][ T12] bridge_slave_0: left promiscuous mode [ 372.509145][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.757637][ T12] bridge_slave_1: left allmulticast mode [ 372.757669][ T12] bridge_slave_1: left promiscuous mode [ 372.757893][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.858332][ T12] bridge_slave_0: left allmulticast mode [ 372.858355][ T12] bridge_slave_0: left promiscuous mode [ 372.858510][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.067574][ T12] bridge_slave_1: left allmulticast mode [ 373.067608][ T12] bridge_slave_1: left promiscuous mode [ 373.067823][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.188245][ T12] bridge_slave_0: left allmulticast mode [ 373.188267][ T12] bridge_slave_0: left promiscuous mode [ 373.188412][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.068919][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.127971][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.189220][ T12] bond0 (unregistering): Released all slaves [ 374.658192][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.749319][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.769823][ T12] bond0 (unregistering): Released all slaves [ 375.228278][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.308347][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.349155][ T12] bond0 (unregistering): Released all slaves [ 375.635182][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.635202][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.498986][ T8100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.647563][ T12] hsr_slave_0: left promiscuous mode [ 376.687247][ T12] hsr_slave_1: left promiscuous mode [ 376.688161][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.740449][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.917279][ T12] hsr_slave_0: left promiscuous mode [ 376.957231][ T12] hsr_slave_1: left promiscuous mode [ 376.957928][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.983697][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.187182][ T12] hsr_slave_0: left promiscuous mode [ 377.207727][ T12] hsr_slave_1: left promiscuous mode [ 377.208619][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.266067][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.376837][ T12] veth0_vlan: left promiscuous mode [ 377.870611][ T1030] rpcbind: server 127.0.0.1 not responding, timed out [ 378.209170][ T12] team0 (unregistering): Port device team_slave_1 removed [ 378.258473][ T12] team0 (unregistering): Port device team_slave_0 removed [ 378.511298][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.511361][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.717906][ T12] team0 (unregistering): Port device team_slave_1 removed [ 378.758895][ T12] team0 (unregistering): Port device team_slave_0 removed [ 379.219987][ T12] team0 (unregistering): Port device team_slave_1 removed [ 379.277780][ T12] team0 (unregistering): Port device team_slave_0 removed [ 380.227662][ T8100] veth0_vlan: entered promiscuous mode [ 380.239137][ T8100] veth1_vlan: entered promiscuous mode [ 380.289462][ T8100] veth0_macvtap: entered promiscuous mode [ 380.328113][ T8100] veth1_macvtap: entered promiscuous mode [ 380.436703][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.534240][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.561916][ T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.561958][ T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.561992][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.562023][ T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.661430][ T8232] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 381.721890][ T8232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.723645][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.723661][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.752474][ T8232] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 381.805736][ T8232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.825864][ T8232] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 381.874638][ T8232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.890810][ T8232] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 381.931374][ T8232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.090796][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.090815][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.366847][ T8232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.400609][ T8232] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.799534][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.799710][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.836083][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.836282][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.690397][ T8232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.112026][ T8232] veth0_vlan: entered promiscuous mode [ 385.128075][ T8232] veth1_vlan: entered promiscuous mode [ 385.192741][ T8232] veth0_macvtap: entered promiscuous mode [ 385.210522][ T8232] veth1_macvtap: entered promiscuous mode [ 385.235054][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.265397][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.290507][ T6634] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.292061][ T6634] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.293310][ T6634] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.293348][ T6634] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.916747][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.916773][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.013863][ T6633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.013882][ T6633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.399211][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.606008][ T6633] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.236557][ T8231] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.292091][ T8231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.294580][ T8231] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.375070][ T8231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.417605][ T8231] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 387.453881][ T8231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.455696][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.7.710'. [ 387.456028][ T8231] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.511474][ T8231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.861908][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.936381][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.967649][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.968462][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.066730][ T7226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.090881][ T7226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.116122][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.116283][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.155813][ T7226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.165356][ T7226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.178942][ T7226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.476781][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.013636][ T7226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 390.016192][ T7226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 390.044164][ T7226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 390.056388][ T7226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 390.097424][ T7226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 390.164995][ T43] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.267246][ T59] Bluetooth: hci1: command tx timeout [ 390.751834][ T43] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.878646][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.878856][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.879029][ T8676] bridge_slave_0: entered allmulticast mode [ 390.881599][ T8676] bridge_slave_0: entered promiscuous mode [ 390.899640][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.899965][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.900432][ T8676] bridge_slave_1: entered allmulticast mode [ 390.908557][ T8676] bridge_slave_1: entered promiscuous mode [ 391.011628][ T8676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.162821][ T43] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.204700][ T8676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.266536][ T8676] team0: Port device team_slave_0 added [ 391.372967][ T8676] team0: Port device team_slave_1 added [ 391.522906][ T43] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.601562][ T8231] veth0_vlan: entered promiscuous mode [ 391.630857][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.630869][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.630903][ T8676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.692827][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.692838][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.692855][ T8676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.784196][ T8231] veth1_vlan: entered promiscuous mode [ 391.850957][ T8676] hsr_slave_0: entered promiscuous mode [ 391.852598][ T8676] hsr_slave_1: entered promiscuous mode [ 391.853190][ T8676] debugfs: 'hsr0' already exists in 'hsr' [ 391.853206][ T8676] Cannot create hsr debugfs directory [ 392.267313][ T59] Bluetooth: hci5: command tx timeout [ 392.339678][ T8231] veth0_macvtap: entered promiscuous mode [ 392.357228][ T59] Bluetooth: hci1: command tx timeout [ 392.467671][ T43] bridge_slave_1: left allmulticast mode [ 392.467709][ T43] bridge_slave_1: left promiscuous mode [ 392.467957][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.593861][ T43] bridge_slave_0: left allmulticast mode [ 392.593896][ T43] bridge_slave_0: left promiscuous mode [ 392.594165][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.349627][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.430358][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.450131][ T43] bond0 (unregistering): Released all slaves [ 393.583347][ T8231] veth1_macvtap: entered promiscuous mode [ 393.811850][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.811993][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.812109][ T8709] bridge_slave_0: entered allmulticast mode [ 393.815221][ T8709] bridge_slave_0: entered promiscuous mode [ 394.095979][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.096076][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.096217][ T8709] bridge_slave_1: entered allmulticast mode [ 394.100776][ T8709] bridge_slave_1: entered promiscuous mode [ 394.223365][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.303911][ T8709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.305514][ T8676] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 394.347232][ T59] Bluetooth: hci5: command tx timeout [ 394.364564][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.428007][ T59] Bluetooth: hci1: command tx timeout [ 394.674572][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.691598][ T8709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.691723][ T8676] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 394.732714][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.827016][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9 [ 394.868436][ T8676] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 394.950609][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.977645][ T8676] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 395.011173][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.032556][ T8709] team0: Port device team_slave_0 added [ 395.036088][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.056728][ T8709] team0: Port device team_slave_1 added [ 395.058164][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.177267][ T43] hsr_slave_0: left promiscuous mode [ 395.197306][ T43] hsr_slave_1: left promiscuous mode [ 395.198973][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.198990][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.249742][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.249761][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.328357][ T43] veth1_macvtap: left promiscuous mode [ 395.328424][ T43] veth0_macvtap: left promiscuous mode [ 395.328573][ T43] veth1_vlan: left promiscuous mode [ 395.330009][ T43] veth0_vlan: left promiscuous mode [ 396.089575][ T43] team0 (unregistering): Port device team_slave_1 removed [ 396.148007][ T43] team0 (unregistering): Port device team_slave_0 removed [ 396.342830][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.423318][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.427230][ T59] Bluetooth: hci5: command tx timeout [ 396.459752][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.459763][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.459779][ T8709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.463215][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.463224][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.463243][ T8709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.507782][ T59] Bluetooth: hci1: command tx timeout [ 396.894628][ T8709] hsr_slave_0: entered promiscuous mode [ 396.895732][ T8709] hsr_slave_1: entered promiscuous mode [ 396.896507][ T8709] debugfs: 'hsr0' already exists in 'hsr' [ 396.896528][ T8709] Cannot create hsr debugfs directory [ 397.327023][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.327044][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.784388][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10 [ 397.837325][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.837346][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.095676][ T8676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.354880][ T8676] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.391992][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.392126][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.507394][ T59] Bluetooth: hci5: command tx timeout [ 398.536087][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.545808][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.948543][ T7394] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 399.112551][ T7394] usb 7-1: Using ep0 maxpacket: 32 [ 399.135407][ T7394] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.135436][ T7394] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.139797][ T7394] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 399.139826][ T7394] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.139848][ T7394] usb 7-1: Product: syz [ 399.139865][ T7394] usb 7-1: Manufacturer: syz [ 399.139881][ T7394] usb 7-1: SerialNumber: syz [ 399.207530][ T7394] usb 7-1: config 0 descriptor?? [ 399.445605][ T5706] usb 7-1: USB disconnect, device number 2 [ 400.175253][ T7226] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 400.239395][ T7226] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 400.257307][ T7226] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 400.261312][ T7226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 400.266203][ T7226] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 400.575211][ T8676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.065715][ T8709] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 401.143673][ T8709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.153261][ T8709] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 401.231716][ T8709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.251942][ T8709] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 401.309303][ T8709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.343305][ T8709] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 401.384880][ T8709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.349141][ T7226] Bluetooth: hci7: command tx timeout [ 402.662381][ T8676] veth0_vlan: entered promiscuous mode [ 402.841725][ T8676] veth1_vlan: entered promiscuous mode [ 402.890028][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 402.936292][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 402.960723][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 402.966000][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 402.985664][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 403.751360][ T8676] veth0_macvtap: entered promiscuous mode [ 403.785709][ T8676] veth1_macvtap: entered promiscuous mode [ 403.832571][ T8709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.042646][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.384455][ T7226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.416136][ T7226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.437294][ T7226] Bluetooth: hci7: command tx timeout [ 404.437784][ T7223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.442685][ T7223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.444597][ T7223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.713957][ T148] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.858605][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.861770][ T8709] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.995577][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.995789][ T6634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.996801][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.996921][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.030584][ T8808] bridge_slave_0: entered allmulticast mode [ 405.033210][ T8808] bridge_slave_0: entered promiscuous mode [ 405.036697][ T1280] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.067288][ T59] Bluetooth: hci8: command tx timeout [ 405.223805][ T148] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.267712][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.267789][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.267976][ T8808] bridge_slave_1: entered allmulticast mode [ 405.269895][ T8808] bridge_slave_1: entered promiscuous mode [ 405.270935][ T1280] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.332195][ T1280] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.380859][ T1280] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.429914][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.430126][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.455787][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.480095][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.711610][ T148] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.835753][ T8808] team0: Port device team_slave_0 added [ 405.971659][ T8808] team0: Port device team_slave_1 added [ 406.194401][ T148] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.438065][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.438081][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.438107][ T8808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.509769][ T59] Bluetooth: hci7: command tx timeout [ 406.567923][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.567936][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.567975][ T8808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.668343][ T59] Bluetooth: hci0: command tx timeout [ 406.812181][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.812203][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.897681][ T8808] hsr_slave_0: entered promiscuous mode [ 406.898590][ T8808] hsr_slave_1: entered promiscuous mode [ 406.899521][ T8808] debugfs: 'hsr0' already exists in 'hsr' [ 406.899537][ T8808] Cannot create hsr debugfs directory [ 407.147278][ T59] Bluetooth: hci8: command tx timeout [ 407.189662][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.189681][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.607517][ T148] bridge_slave_1: left allmulticast mode [ 407.607542][ T148] bridge_slave_1: left promiscuous mode [ 407.614643][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.748266][ T148] bridge_slave_0: left allmulticast mode [ 407.748291][ T148] bridge_slave_0: left promiscuous mode [ 407.748467][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.469478][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.548405][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.569282][ T148] bond0 (unregistering): Released all slaves [ 408.589410][ T7223] Bluetooth: hci7: command tx timeout [ 408.750030][ T59] Bluetooth: hci0: command tx timeout [ 408.980587][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.980733][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.980907][ T8866] bridge_slave_0: entered allmulticast mode [ 408.985311][ T8866] bridge_slave_0: entered promiscuous mode [ 409.230384][ T59] Bluetooth: hci8: command tx timeout [ 409.257267][ T5706] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 409.282253][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.282346][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.282479][ T8866] bridge_slave_1: entered allmulticast mode [ 409.284132][ T8866] bridge_slave_1: entered promiscuous mode [ 409.407274][ T5706] usb 10-1: Using ep0 maxpacket: 32 [ 409.409363][ T5706] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.409385][ T5706] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.419434][ T5706] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 409.419520][ T5706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.419566][ T5706] usb 10-1: Product: syz [ 409.419601][ T5706] usb 10-1: Manufacturer: syz [ 409.419635][ T5706] usb 10-1: SerialNumber: syz [ 409.518679][ T5706] usb 10-1: config 0 descriptor?? [ 409.599425][ T8866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.666160][ T8866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.739921][ T5608] usb 10-1: USB disconnect, device number 2 [ 410.420709][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.422320][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.422454][ T8898] bridge_slave_0: entered allmulticast mode [ 410.425672][ T8898] bridge_slave_0: entered promiscuous mode [ 410.587379][ T7394] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 410.660834][ T8866] team0: Port device team_slave_0 added [ 410.662097][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.663063][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.663260][ T8898] bridge_slave_1: entered allmulticast mode [ 410.666456][ T8898] bridge_slave_1: entered promiscuous mode [ 410.708217][ T8866] team0: Port device team_slave_1 added [ 410.737195][ T7394] usb 10-1: Using ep0 maxpacket: 8 [ 410.739156][ T7394] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 410.739178][ T7394] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 410.739197][ T7394] usb 10-1: config 179 has no interface number 0 [ 410.739238][ T7394] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 410.739259][ T7394] usb 10-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 410.739297][ T7394] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 410.739319][ T7394] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.827334][ T7223] Bluetooth: hci0: command tx timeout [ 411.098148][ T148] hsr_slave_0: left promiscuous mode [ 411.103316][ T7394] usb 10-1: USB disconnect, device number 3 [ 411.149496][ T148] hsr_slave_1: left promiscuous mode [ 411.150505][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.150529][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.208264][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.208292][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.300493][ T148] veth1_macvtap: left promiscuous mode [ 411.300557][ T148] veth0_macvtap: left promiscuous mode [ 411.307385][ T7223] Bluetooth: hci8: command tx timeout [ 411.327521][ T148] veth1_vlan: left promiscuous mode [ 411.327705][ T148] veth0_vlan: left promiscuous mode [ 412.077807][ T148] team0 (unregistering): Port device team_slave_1 removed [ 412.117906][ T148] team0 (unregistering): Port device team_slave_0 removed [ 412.421902][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9 [ 412.426204][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.448064][ T8866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.448078][ T8866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.448103][ T8866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.788849][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.793444][ T8866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.793455][ T8866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.793472][ T8866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.905654][ T8709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.907282][ T7223] Bluetooth: hci0: command tx timeout [ 412.983843][ T8898] team0: Port device team_slave_0 added [ 413.285586][ T8898] team0: Port device team_slave_1 added [ 413.357319][ T31] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 413.389997][ T8866] hsr_slave_0: entered promiscuous mode [ 413.391229][ T8866] hsr_slave_1: entered promiscuous mode [ 413.392056][ T8866] debugfs: 'hsr0' already exists in 'hsr' [ 413.392077][ T8866] Cannot create hsr debugfs directory [ 413.394579][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.394592][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.394619][ T8898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.531470][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.531503][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.531531][ T8898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.547299][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 413.550105][ T31] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 413.550173][ T31] usb 10-1: config 0 has no interface number 0 [ 413.567520][ T31] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 413.567545][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.567565][ T31] usb 10-1: Product: syz [ 413.567616][ T31] usb 10-1: Manufacturer: syz [ 413.567654][ T31] usb 10-1: SerialNumber: syz [ 413.593105][ T31] usb 10-1: config 0 descriptor?? [ 413.688197][ T31] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 413.688240][ T31] usb 10-1: selecting invalid altsetting 1 [ 413.688257][ T31] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 413.798840][ T31] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 413.799055][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 413.799119][ T31] usb 10-1: media controller created [ 413.881916][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.070096][ T8898] hsr_slave_0: entered promiscuous mode [ 414.071758][ T8898] hsr_slave_1: entered promiscuous mode [ 414.072607][ T8898] debugfs: 'hsr0' already exists in 'hsr' [ 414.072630][ T8898] Cannot create hsr debugfs directory [ 414.179394][ T31] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 414.179445][ T31] zl10353_read_register: readreg error (reg=127, ret==-71) [ 414.180336][ T31] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 414.369854][ T31] usb 10-1: USB disconnect, device number 4 [ 415.151787][ T8808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.192456][ T8808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.263944][ T8709] veth0_vlan: entered promiscuous mode [ 415.285435][ T8808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.339358][ T8808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.381230][ T8808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.440740][ T8808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.451992][ T8808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.492493][ T8808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.624923][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10 [ 415.670466][ T8709] veth1_vlan: entered promiscuous mode [ 415.783013][ T8866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 415.821429][ T8866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.841689][ T8866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 415.922118][ T8866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.114057][ T8866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.150151][ T8866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.206501][ T8866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.219686][ T9012] key id 00000000 not found [ 416.247555][ T8866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.544161][ T8709] veth0_macvtap: entered promiscuous mode [ 416.608409][ T8709] veth1_macvtap: entered promiscuous mode [ 416.706301][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.070655][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.123433][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.126180][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.177530][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.180115][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.218846][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.929464][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.301436][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.301619][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.345993][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.346012][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.380210][ T8866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.383941][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.384074][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.689698][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.689719][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.794210][ T8866] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.943735][ T8898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 418.966945][ T8898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.991675][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.992396][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.995138][ T8898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 419.079228][ T8898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.087899][ T8898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 419.186506][ T8898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.229380][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.230261][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.230729][ T8898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 419.277363][ T8898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.945218][ T8898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.029415][ T8898] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.085988][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.106006][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.134653][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.139466][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.992822][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.037162][ T8866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.246917][ T9136] FAULT_INJECTION: forcing a failure. [ 421.246917][ T9136] name fail_futex, interval 1, probability 0, space 0, times 1 [ 421.246969][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz.7.745 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.246995][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 421.247014][ T9136] Call Trace: [ 421.247022][ T9136] [ 421.247031][ T9136] dump_stack_lvl+0xe8/0x150 [ 421.247071][ T9136] should_fail_ex+0x467/0x600 [ 421.247107][ T9136] get_futex_key+0x1b3/0x1580 [ 421.247141][ T9136] ? __pfx_get_futex_key+0x10/0x10 [ 421.247165][ T9136] ? debug_object_free+0x29c/0x340 [ 421.247195][ T9136] futex_wake+0x119/0x600 [ 421.247226][ T9136] ? __pfx_futex_wait+0x10/0x10 [ 421.247256][ T9136] ? __pfx_futex_wake+0x10/0x10 [ 421.247284][ T9136] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 421.247317][ T9136] ? ktime_get+0x45/0x220 [ 421.247359][ T9136] do_futex+0x458/0x4e0 [ 421.247394][ T9136] ? __pfx_do_futex+0x10/0x10 [ 421.247430][ T9136] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.247458][ T9136] ? ktime_get+0x45/0x220 [ 421.247486][ T9136] __se_sys_futex+0x3a8/0x450 [ 421.247523][ T9136] ? __pfx___se_sys_futex+0x10/0x10 [ 421.247552][ T9136] ? rcu_is_watching+0x15/0xb0 [ 421.247588][ T9136] ? __x64_sys_futex+0x21/0xf0 [ 421.247617][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.247643][ T9136] do_syscall_64+0x174/0x580 [ 421.247669][ T9136] ? trace_irq_disable+0x3b/0x140 [ 421.247693][ T9136] ? clear_bhb_loop+0x40/0x90 [ 421.247720][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.247748][ T9136] RIP: 0033:0x7f10eaf5de99 [ 421.247773][ T9136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.247793][ T9136] RSP: 002b:00007ffdbb379868 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 421.247825][ T9136] RAX: ffffffffffffffda RBX: 00007f10eb1e6090 RCX: 00007f10eaf5de99 [ 421.247842][ T9136] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10eb1e609c [ 421.247857][ T9136] RBP: 00007f10eb1e6090 R08: 0000000000000004 R09: 00007f10eb1e5fb0 [ 421.247872][ T9136] R10: 00007f10eb1e5fa0 R11: 0000000000000246 R12: 0000000000000001 [ 421.247887][ T9136] R13: 0000000000000003 R14: 0000000000000000 R15: 00007f10eb1e5fa0 [ 421.247921][ T9136] [ 421.293718][ T9136] FAULT_INJECTION: forcing a failure. [ 421.293718][ T9136] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 421.293850][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz.7.745 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.293873][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 421.293885][ T9136] Call Trace: [ 421.293917][ T9136] [ 421.293931][ T9136] dump_stack_lvl+0xe8/0x150 [ 421.294048][ T9136] should_fail_ex+0x467/0x600 [ 421.294135][ T9136] _copy_from_user+0x2d/0xb0 [ 421.294211][ T9136] get_timespec64+0x96/0x1b0 [ 421.294271][ T9136] ? __pfx_get_timespec64+0x10/0x10 [ 421.294325][ T9136] ? ktime_get+0x45/0x220 [ 421.294387][ T9136] __se_sys_futex+0x19a/0x450 [ 421.294475][ T9136] ? __pfx___se_sys_futex+0x10/0x10 [ 421.294535][ T9136] ? rcu_is_watching+0x15/0xb0 [ 421.294613][ T9136] ? __x64_sys_futex+0x21/0xf0 [ 421.294668][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.294720][ T9136] do_syscall_64+0x174/0x580 [ 421.294775][ T9136] ? trace_irq_disable+0x3b/0x140 [ 421.294825][ T9136] ? clear_bhb_loop+0x40/0x90 [ 421.294885][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.294934][ T9136] RIP: 0033:0x7f10eaf5de99 [ 421.294979][ T9136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.295022][ T9136] RSP: 002b:00007ffdbb3798e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 421.295068][ T9136] RAX: ffffffffffffffda RBX: 0000000000066c0c RCX: 00007f10eaf5de99 [ 421.295110][ T9136] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10eb1e609c [ 421.295138][ T9136] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 421.295172][ T9136] R10: 00007ffdbb3799f0 R11: 0000000000000246 R12: 00007ffdbb379a10 [ 421.295206][ T9136] R13: 00007f10eb1e609c R14: 0000000000066c3e R15: 00007ffdbb3799f0 [ 421.295277][ T9136] [ 421.359312][ T9136] FAULT_INJECTION: forcing a failure. [ 421.359312][ T9136] name fail_futex, interval 1, probability 0, space 0, times 0 [ 421.359391][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz.7.745 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.359483][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 421.359510][ T9136] Call Trace: [ 421.359529][ T9136] [ 421.359547][ T9136] dump_stack_lvl+0xe8/0x150 [ 421.359634][ T9136] should_fail_ex+0x467/0x600 [ 421.359722][ T9136] get_futex_key+0x1b3/0x1580 [ 421.359810][ T9136] ? __pfx_get_futex_key+0x10/0x10 [ 421.359890][ T9136] futex_wait_setup+0x4a/0x590 [ 421.359996][ T9136] ? __futex_wait+0xe1/0x410 [ 421.360077][ T9136] __futex_wait+0x161/0x410 [ 421.360168][ T9136] ? __pfx___futex_wait+0x10/0x10 [ 421.360270][ T9136] ? __pfx_futex_wake_mark+0x10/0x10 [ 421.360359][ T9136] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 421.360457][ T9136] ? hrtimer_setup_sleeper_on_stack+0xb5/0x110 [ 421.360527][ T9136] ? ktime_add_safe+0x38/0x70 [ 421.360604][ T9136] futex_wait+0x121/0x390 [ 421.360678][ T9136] ? __pfx_futex_wait+0x10/0x10 [ 421.360762][ T9136] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 421.360850][ T9136] ? ktime_get+0x45/0x220 [ 421.360898][ T9136] do_futex+0x3e7/0x4e0 [ 421.360967][ T9136] ? __pfx_do_futex+0x10/0x10 [ 421.361023][ T9136] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.361077][ T9136] ? ktime_get+0x45/0x220 [ 421.361139][ T9136] __se_sys_futex+0x3a8/0x450 [ 421.361213][ T9136] ? __pfx___se_sys_futex+0x10/0x10 [ 421.361294][ T9136] ? __x64_sys_futex+0x21/0xf0 [ 421.361357][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.361406][ T9136] do_syscall_64+0x174/0x580 [ 421.361486][ T9136] ? clear_bhb_loop+0x40/0x90 [ 421.361555][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.361609][ T9136] RIP: 0033:0x7f10eaf5de99 [ 421.361649][ T9136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.361692][ T9136] RSP: 002b:00007ffdbb3798e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 421.361740][ T9136] RAX: ffffffffffffffda RBX: 0000000000066c4e RCX: 00007f10eaf5de99 [ 421.361776][ T9136] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10eb1e618c [ 421.361811][ T9136] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 421.361840][ T9136] R10: 00007ffdbb3799f0 R11: 0000000000000246 R12: 00007ffdbb379a10 [ 421.361876][ T9136] R13: 00007f10eb1e618c R14: 0000000000066c80 R15: 00007ffdbb3799f0 [ 421.361945][ T9136] [ 421.571532][ T9136] FAULT_INJECTION: forcing a failure. [ 421.571532][ T9136] name fail_futex, interval 1, probability 0, space 0, times 0 [ 421.571648][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz.7.745 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.571701][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 421.571728][ T9136] Call Trace: [ 421.571751][ T9136] [ 421.571769][ T9136] dump_stack_lvl+0xe8/0x150 [ 421.571850][ T9136] should_fail_ex+0x467/0x600 [ 421.571941][ T9136] get_futex_key+0x1b3/0x1580 [ 421.572008][ T9136] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.572090][ T9136] ? __pfx_get_futex_key+0x10/0x10 [ 421.572142][ T9136] ? rt_spin_lock+0x1e0/0x400 [ 421.572229][ T9136] ? __lock_acquire+0x683/0x2ce0 [ 421.572291][ T9136] futex_wait_setup+0x4a/0x590 [ 421.572370][ T9136] ? futex_unqueue+0x22/0x240 [ 421.572431][ T9136] ? __futex_wait+0xe1/0x410 [ 421.572516][ T9136] __futex_wait+0x161/0x410 [ 421.572601][ T9136] ? __pfx___futex_wait+0x10/0x10 [ 421.572672][ T9136] ? __pfx_futex_wake_mark+0x10/0x10 [ 421.572766][ T9136] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 421.572845][ T9136] ? hrtimer_setup_sleeper_on_stack+0xb5/0x110 [ 421.572916][ T9136] ? ktime_add_safe+0x38/0x70 [ 421.572981][ T9136] futex_wait+0x121/0x390 [ 421.573059][ T9136] ? __pfx_futex_wait+0x10/0x10 [ 421.573145][ T9136] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 421.573225][ T9136] ? ktime_get+0x45/0x220 [ 421.573278][ T9136] do_futex+0x3e7/0x4e0 [ 421.573348][ T9136] ? __pfx_do_futex+0x10/0x10 [ 421.573418][ T9136] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.573466][ T9136] ? ktime_get+0x45/0x220 [ 421.573526][ T9136] __se_sys_futex+0x3a8/0x450 [ 421.573605][ T9136] ? __pfx___se_sys_futex+0x10/0x10 [ 421.573668][ T9136] ? rcu_is_watching+0x15/0xb0 [ 421.573745][ T9136] ? __x64_sys_futex+0x21/0xf0 [ 421.573806][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.573858][ T9136] do_syscall_64+0x174/0x580 [ 421.573902][ T9136] ? trace_irq_disable+0x3b/0x140 [ 421.573953][ T9136] ? clear_bhb_loop+0x40/0x90 [ 421.574019][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.574064][ T9136] RIP: 0033:0x7f10eaf5de99 [ 421.574108][ T9136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.574182][ T9136] RSP: 002b:00007ffdbb3798e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 421.574223][ T9136] RAX: ffffffffffffffda RBX: 0000000000066cf0 RCX: 00007f10eaf5de99 [ 421.574258][ T9136] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10eb1e627c [ 421.574285][ T9136] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 421.574319][ T9136] R10: 00007ffdbb3799f0 R11: 0000000000000246 R12: 00007ffdbb379a10 [ 421.574354][ T9136] R13: 00007f10eb1e627c R14: 0000000000066d22 R15: 00007ffdbb3799f0 [ 421.574426][ T9136] [ 422.323014][ T8866] veth0_vlan: entered promiscuous mode [ 422.351298][ T8866] veth1_vlan: entered promiscuous mode [ 422.566319][ T8866] veth0_macvtap: entered promiscuous mode [ 422.599475][ T8866] veth1_macvtap: entered promiscuous mode [ 422.815832][ T8866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.890346][ T8866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.948417][ T1280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.955661][ T1280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.977940][ T8898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.018184][ T1280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.043479][ T1280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.201474][ T8808] veth0_vlan: entered promiscuous mode [ 423.484166][ T8808] veth1_vlan: entered promiscuous mode [ 423.839356][ T6632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.839377][ T6632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.855868][ T8808] veth0_macvtap: entered promiscuous mode [ 423.907805][ T8808] veth1_macvtap: entered promiscuous mode [ 424.067822][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.067844][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.109536][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.244133][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.334890][ T8898] veth0_vlan: entered promiscuous mode [ 424.335444][ T6634] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.433258][ T6634] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.463145][ T6634] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.482150][ T6634] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.648235][ T8898] veth1_vlan: entered promiscuous mode [ 425.221759][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.221779][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.369696][ T8898] veth0_macvtap: entered promiscuous mode [ 425.520464][ T8898] veth1_macvtap: entered promiscuous mode [ 425.563437][ T6632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.563455][ T6632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.745072][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.768145][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.831870][ T6632] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.832088][ T6632] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.832300][ T6632] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.832501][ T6632] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.506866][ T6634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.506896][ T6634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.656453][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.656474][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.102666][ T9274] netlink: 'syz.0.765': attribute type 2 has an invalid length. [ 429.524552][ T9274] : entered promiscuous mode [ 429.760741][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 429.784827][ T9287] netlink: 68 bytes leftover after parsing attributes in process `syz.0.766'. [ 431.345142][ T9291] lo speed is unknown, defaulting to 1000 [ 432.005606][ T9291] lo speed is unknown, defaulting to 1000 [ 432.056736][ T9291] lo speed is unknown, defaulting to 1000 [ 433.411425][ T7224] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 433.481844][ T9336] ceph: No mds server is up or the cluster is laggy [ 433.485123][ T7224] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 433.762885][ T7224] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 433.836477][ T9291] infiniband syz0: set active [ 433.836499][ T9291] infiniband syz0: added lo [ 433.881789][ T822] lo speed is unknown, defaulting to 1000 [ 435.425086][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 435.458881][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 435.462671][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 435.466298][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 435.477003][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 435.551990][ T9291] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 435.552020][ T9291] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 435.552054][ T9291] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 436.585955][ T9291] RDS/IB: syz0: added [ 436.709133][ T9291] smc: adding ib device syz0 with port count 1 [ 436.709450][ T9291] smc: ib device syz0 port 1 has no pnetid [ 436.713779][ T6772] lo speed is unknown, defaulting to 1000 [ 437.026422][ T9291] lo speed is unknown, defaulting to 1000 [ 437.217218][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 437.367405][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 437.369415][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 437.369438][ T9] usb 1-1: config 0 has no interface number 0 [ 437.401567][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 437.401595][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.401614][ T9] usb 1-1: Product: syz [ 437.401628][ T9] usb 1-1: Manufacturer: syz [ 437.401641][ T9] usb 1-1: SerialNumber: syz [ 437.467624][ T9] usb 1-1: config 0 descriptor?? [ 437.471161][ T9407] netlink: 56 bytes leftover after parsing attributes in process `syz.4.788'. [ 437.473942][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 437.473965][ T9] usb 1-1: selecting invalid altsetting 1 [ 437.473980][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 437.579283][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 437.579604][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 437.579650][ T9] usb 1-1: media controller created [ 437.616568][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.705752][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 437.705816][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 437.706224][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 437.708354][ T59] Bluetooth: hci9: command tx timeout [ 438.001833][ T9] usb 1-1: USB disconnect, device number 8 [ 439.245086][ T9368] lo speed is unknown, defaulting to 1000 [ 439.796505][ T59] Bluetooth: hci9: command tx timeout [ 440.265565][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.270378][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.385042][ T9473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.802'. [ 440.419059][ T9473] tipc: Started in network mode [ 440.419083][ T9473] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 440.445459][ T9473] tipc: Enabled bearer , priority 10 [ 440.462156][ T9471] tipc: Started in network mode [ 440.462184][ T9471] tipc: Node identity 021b942a22d7, cluster identity 4711 [ 440.462353][ T9471] tipc: Enabled bearer , priority 0 [ 440.632674][ T9470] tipc: Disabling bearer [ 440.778504][ T9476] netlink: 300 bytes leftover after parsing attributes in process `syz.6.803'. [ 440.953627][ T7224] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 441.384026][ T9291] lo speed is unknown, defaulting to 1000 [ 441.494720][ T7224] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 441.507169][ T9] tipc: Node number set to 11709098 [ 441.540853][ T9485] ceph: No mds server is up or the cluster is laggy [ 441.782058][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 441.869709][ T59] Bluetooth: hci9: command tx timeout [ 443.518931][ T9541] tipc: Started in network mode [ 443.518963][ T9541] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 443.526371][ T9291] lo speed is unknown, defaulting to 1000 [ 443.947400][ T59] Bluetooth: hci9: command tx timeout [ 444.083054][ T9291] lo speed is unknown, defaulting to 1000 [ 444.088311][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.088420][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.088600][ T9368] bridge_slave_0: entered allmulticast mode [ 444.098002][ T9368] bridge_slave_0: entered promiscuous mode [ 444.107926][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.108048][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.108219][ T9368] bridge_slave_1: entered allmulticast mode [ 444.114883][ T9368] bridge_slave_1: entered promiscuous mode [ 444.917693][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.920446][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.294560][ T9368] team0: Port device team_slave_0 added [ 445.328858][ T9368] team0: Port device team_slave_1 added [ 445.496914][ T7226] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 445.536800][ T7226] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 445.554552][ T7226] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 445.581523][ T7226] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 445.590993][ T7226] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 446.569962][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.569978][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.570006][ T9368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.572180][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.572193][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.572220][ T9368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.147672][ T7223] Bluetooth: hci3: command 0x0406 tx timeout [ 447.196423][ T9368] hsr_slave_0: entered promiscuous mode [ 447.247914][ T9368] hsr_slave_1: entered promiscuous mode [ 447.248777][ T9368] debugfs: 'hsr0' already exists in 'hsr' [ 447.248800][ T9368] Cannot create hsr debugfs directory [ 447.403655][ T9291] lo speed is unknown, defaulting to 1000 [ 447.528911][ T9594] syz.6.825 (9594) used greatest stack depth: 18208 bytes left [ 447.791336][ T59] Bluetooth: hci10: command tx timeout [ 449.153428][ T9571] lo speed is unknown, defaulting to 1000 [ 449.871870][ T59] Bluetooth: hci10: command tx timeout [ 450.153628][ T9291] lo speed is unknown, defaulting to 1000 [ 451.024266][ T9291] lo speed is unknown, defaulting to 1000 [ 451.947625][ T59] Bluetooth: hci10: command tx timeout [ 453.179410][ T9291] lo speed is unknown, defaulting to 1000 [ 454.074861][ T59] Bluetooth: hci10: command tx timeout [ 454.941142][ T9729] tipc: Cannot configure node identity twice [ 455.005152][ T9731] tipc: New replicast peer: 127.0.0.1 [ 455.005877][ T9731] tipc: Enabled bearer , priority 10 [ 455.310481][ T9291] lo speed is unknown, defaulting to 1000 [ 455.748744][ T9571] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.748874][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.749123][ T9571] bridge_slave_0: entered allmulticast mode [ 455.799738][ T9571] bridge_slave_0: entered promiscuous mode [ 455.817401][ T9571] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.817562][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.817829][ T9571] bridge_slave_1: entered allmulticast mode [ 455.861310][ T9571] bridge_slave_1: entered promiscuous mode [ 456.371739][ T5699] tipc: Node number set to 550278186 [ 456.445245][ T9571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.472244][ T9571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.601988][ T9368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 456.769039][ T9368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.772927][ T9571] team0: Port device team_slave_0 added [ 456.774968][ T9368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 456.872205][ T9368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.889070][ T9571] team0: Port device team_slave_1 added [ 456.889802][ T9368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 457.041557][ T9368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.163023][ T9368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 457.249981][ T9368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.380983][ T9571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.381001][ T9571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.381028][ T9571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.415668][ T9571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.415686][ T9571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.415716][ T9571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.236362][ T7223] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 458.271094][ T7223] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 458.276546][ T7223] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 458.292133][ T7223] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 458.299903][ T7223] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 458.565766][ T9571] hsr_slave_0: entered promiscuous mode [ 458.579849][ T9571] hsr_slave_1: entered promiscuous mode [ 458.583234][ T9571] debugfs: 'hsr0' already exists in 'hsr' [ 458.583259][ T9571] Cannot create hsr debugfs directory [ 460.120788][ T6633] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.507913][ T59] Bluetooth: hci11: command tx timeout [ 460.939187][ T6633] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.145268][ T9806] lo speed is unknown, defaulting to 1000 [ 461.675636][ T6633] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.163389][ T9571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.512536][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 462.570527][ T6633] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.597099][ T59] Bluetooth: hci11: command tx timeout [ 463.579446][ T9571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.297723][ T9571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.369709][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 464.376268][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.668120][ T7223] Bluetooth: hci11: command tx timeout [ 464.955884][ T9368] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.171207][ T9571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.989572][ C1] tipc: RX(021b942a22d7): key[1] is activated [ 466.110702][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.110915][ T7281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.224024][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.224234][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.631199][ T6633] bridge_slave_1: left allmulticast mode [ 466.631371][ T6633] bridge_slave_1: left promiscuous mode [ 466.631597][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.802254][ T7223] Bluetooth: hci11: command tx timeout [ 468.562231][ T6633] bridge_slave_0: left allmulticast mode [ 468.562269][ T6633] bridge_slave_0: left promiscuous mode [ 468.564835][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.757846][ T38] INFO: task syz.1.629:7757 blocked for more than 143 seconds. [ 468.757881][ T38] Not tainted syzkaller #0 [ 468.757892][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.757902][ T38] task:syz.1.629 state:D stack:27304 pid:7757 tgid:7755 ppid:5611 task_flags:0x400040 flags:0x00080002 [ 468.757969][ T38] Call Trace: [ 468.757976][ T38] [ 468.757989][ T38] __schedule+0x16dc/0x5500 [ 468.758033][ T38] ? __pfx___schedule+0x10/0x10 [ 468.758057][ T38] ? irqentry_exit+0x218/0x8f0 [ 468.758079][ T38] ? trace_irq_disable+0x3b/0x140 [ 468.758101][ T38] ? __pfx___schedule+0x10/0x10 [ 468.758119][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 468.758163][ T38] rt_mutex_schedule+0x76/0xf0 [ 468.758186][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 468.758225][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 468.758258][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 468.758291][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 468.758323][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 468.758365][ T38] ? write_threads+0x3a0/0x5a0 [ 468.758400][ T38] ? write_threads+0x3a0/0x5a0 [ 468.758434][ T38] ? write_threads+0x3a0/0x5a0 [ 468.758462][ T38] mutex_lock_nested+0x168/0x1d0 [ 468.758498][ T38] write_threads+0x3a0/0x5a0 [ 468.758528][ T38] ? __might_fault+0xaf/0x130 [ 468.758552][ T38] ? __pfx_write_threads+0x10/0x10 [ 468.758600][ T38] ? _copy_from_user+0x94/0xb0 [ 468.758625][ T38] ? simple_transaction_get+0x130/0x170 [ 468.758651][ T38] nfsctl_transaction_write+0x112/0x160 [ 468.758682][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 468.758711][ T38] vfs_write+0x29f/0xbb0 [ 468.758744][ T38] ? __pfx_vfs_write+0x10/0x10 [ 468.758772][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 468.758796][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.758820][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 468.758843][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 468.758873][ T38] ? fdget_pos+0x252/0x320 [ 468.758903][ T38] ksys_write+0x156/0x270 [ 468.758931][ T38] ? __pfx_ksys_write+0x10/0x10 [ 468.758972][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.758994][ T38] do_syscall_64+0x174/0x580 [ 468.759019][ T38] ? trace_irq_disable+0x3b/0x140 [ 468.759038][ T38] ? clear_bhb_loop+0x40/0x90 [ 468.759063][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.759083][ T38] RIP: 0033:0x7fe759d8de99 [ 468.759101][ T38] RSP: 002b:00007fe757fc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 468.759121][ T38] RAX: ffffffffffffffda RBX: 00007fe75a016090 RCX: 00007fe759d8de99 [ 468.759136][ T38] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 468.759170][ T38] RBP: 00007fe759e23eaf R08: 0000000000000000 R09: 0000000000000000 [ 468.759183][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.759195][ T38] R13: 00007fe75a016128 R14: 00007fe75a016090 R15: 00007fff83b4f1a8 [ 468.759226][ T38] [ 468.759304][ T38] [ 468.759304][ T38] Showing all locks held in the system: [ 468.759319][ T38] 3 locks held by kworker/1:0/31: [ 468.759331][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.759384][ T38] #1: ffffc90000a5fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.759435][ T38] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 468.759490][ T38] 1 lock held by khungtaskd/38: [ 468.759500][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 468.759554][ T38] 2 locks held by kworker/u8:6/148: [ 468.759565][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.759615][ T38] #1: ffffc900038f7c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.759666][ T38] 2 locks held by kworker/u8:7/149: [ 468.759676][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.759728][ T38] #1: ffffc90003957c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.759784][ T38] 3 locks held by kworker/u8:12/1293: [ 468.759795][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.759846][ T38] #1: ffffc90006bcfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.759896][ T38] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 468.759987][ T38] 1 lock held by udevd/4960: [ 468.759998][ T38] 2 locks held by dhcpcd/5254: [ 468.760008][ T38] #0: ffffffff8f592c38 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x7f0 [ 468.760081][ T38] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 468.760135][ T38] 2 locks held by getty/5349: [ 468.760146][ T38] #0: ffff888035efb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 468.760198][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 468.760264][ T38] 3 locks held by kworker/1:3/5698: [ 468.760275][ T38] #0: ffff88813ff1a938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.760330][ T38] #1: ffffc90005347c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.760383][ T38] #2: ffff88802a16e210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 468.760434][ T38] 4 locks held by kworker/u8:15/6633: [ 468.760446][ T38] 3 locks held by kworker/u8:16/6634: [ 468.760458][ T38] #0: ffff888032539138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.760510][ T38] #1: ffffc90008557c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 468.760565][ T38] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 468.760617][ T38] 3 locks held by syz.1.629/7756: [ 468.760628][ T38] #0: ffff888041ecd728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.760678][ T38] #1: ffff88803cfae500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.760736][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 468.760793][ T38] 3 locks held by syz.1.629/7757: [ 468.760805][ T38] #0: ffff888041ecd328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.760854][ T38] #1: ffff88803cfae500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.760921][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 468.761004][ T38] 3 locks held by syz.3.702/8446: [ 468.761015][ T38] #0: ffff8880316b9f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.761066][ T38] #1: ffff888038de8500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.761123][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 468.761180][ T38] 3 locks held by syz.3.702/8447: [ 468.761192][ T38] #0: ffff8880359c8328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.761242][ T38] #1: ffff888038de8500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.761298][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 468.761354][ T38] 3 locks held by syz.3.702/8448: [ 468.761366][ T38] #0: ffff8880316b9328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.761415][ T38] #1: ffff888038de8500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.761473][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 468.761530][ T38] 2 locks held by udevd/8451: [ 468.761542][ T38] 3 locks held by syz.5.706/8556: [ 468.761553][ T38] #0: ffff888033bf4128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.761601][ T38] #1: ffff88803bb12500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.761658][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 468.761714][ T38] 3 locks held by syz.5.706/8558: [ 468.761726][ T38] #0: ffff888011688928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.761775][ T38] #1: ffff88803bb12500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.761831][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 468.761889][ T38] 3 locks held by syz.5.706/8563: [ 468.761900][ T38] #0: ffff888039919728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.761950][ T38] #1: ffff88803bb12500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.762016][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 468.762073][ T38] 1 lock held by syz.5.706/8568: [ 468.762085][ T38] #0: ffff888039919728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.762135][ T38] 3 locks held by syz.8.709/8643: [ 468.762146][ T38] #0: ffff888040e7c328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.762207][ T38] #1: ffff888039b9a500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.762260][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 468.762315][ T38] 3 locks held by syz.8.709/8647: [ 468.762325][ T38] #0: ffff888040e7dd28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.762372][ T38] #1: ffff888039b9a500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.762426][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 468.762486][ T38] 3 locks held by syz.8.709/8649: [ 468.762497][ T38] #0: ffff88805d84e328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.762542][ T38] #1: ffff888039b9a500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.762596][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 468.762655][ T38] 3 locks held by syz.9.741/9060: [ 468.762666][ T38] #0: ffff8880646e4928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.762712][ T38] #1: ffff888034cc2500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.762764][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 468.762835][ T38] 3 locks held by syz.9.741/9062: [ 468.762846][ T38] #0: ffff88802e789f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.762895][ T38] #1: ffff888034cc2500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.762952][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 468.763055][ T38] 3 locks held by syz.9.741/9064: [ 468.763067][ T38] #0: ffff88803dd90b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.763115][ T38] #1: ffff888034cc2500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.763171][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 468.763230][ T38] 1 lock held by syz-executor/9368: [ 468.763241][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 468.763309][ T38] 3 locks held by syz.0.810/9513: [ 468.763319][ T38] #0: ffff8880333da528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 468.763365][ T38] #1: ffff8880634d6500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.763417][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 468.763471][ T38] 7 locks held by syz-executor/9571: [ 468.763481][ T38] #0: ffff8880353be500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 468.763554][ T38] #1: ffff888076f94078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 468.763610][ T38] #2: ffff888029ce2878 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 468.763670][ T38] #3: ffffffff8ee26d18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 468.763729][ T38] #4: ffff888033a52160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 468.763785][ T38] #5: ffff888060e84310 (&devlink->lock_key#23){+.+.}-{4:4}, at: nsim_drv_probe+0xfc/0xc00 [ 468.763840][ T38] #6: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x8b/0x290 [ 468.763895][ T38] 1 lock held by syz-executor/9806: [ 468.763905][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 468.763955][ T38] [ 468.763960][ T38] ============================================= [ 468.763960][ T38] [ 468.763976][ T38] NMI backtrace for cpu 0 [ 468.763991][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.764013][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 468.764025][ T38] Call Trace: [ 468.764032][ T38] [ 468.764040][ T38] dump_stack_lvl+0xe8/0x150 [ 468.764074][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 468.764095][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 468.764129][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 468.764166][ T38] sys_info+0x135/0x170 [ 468.764195][ T38] watchdog+0xfd7/0x1030 [ 468.764223][ T38] ? watchdog+0x1c7/0x1030 [ 468.764249][ T38] kthread+0x388/0x470 [ 468.764280][ T38] ? __pfx_watchdog+0x10/0x10 [ 468.764297][ T38] ? __pfx_kthread+0x10/0x10 [ 468.764331][ T38] ret_from_fork+0x514/0xb70 [ 468.764367][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 468.764400][ T38] ? __switch_to+0xc89/0x1420 [ 468.764432][ T38] ? __pfx_kthread+0x10/0x10 [ 468.764465][ T38] ret_from_fork_asm+0x1a/0x30 [ 468.764501][ T38] [ 468.764535][ T38] Sending NMI from CPU 0 to CPUs 1: [ 468.764566][ C1] NMI backtrace for cpu 1 [ 468.764580][ C1] CPU: 1 UID: 0 PID: 4960 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.764599][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 468.764609][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x80 [ 468.764637][ C1] Code: de 5b e9 83 0b 5e 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 08 25 d8 10 <65> 8b 35 29 25 d8 10 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 f4 0b [ 468.764652][ C1] RSP: 0018:ffffc90003a27988 EFLAGS: 00000202 [ 468.764666][ C1] RAX: ffffffff81d62a5d RBX: 00007f9207974407 RCX: ffff88803806be00 [ 468.764679][ C1] RDX: 0000000000000000 RSI: ffffffff8bca7760 RDI: ffffffff8bca7720 [ 468.764702][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 468.764711][ C1] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: ffff88803806be00 [ 468.764722][ C1] R13: 0000000000000000 R14: 00007f9207974407 R15: 1ffff92000744f4e [ 468.764750][ C1] FS: 00007f9207886880(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 468.764765][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.764776][ C1] CR2: 00007f657e047000 CR3: 0000000037d32000 CR4: 00000000003526f0 [ 468.764791][ C1] Call Trace: [ 468.764797][ C1] [ 468.764803][ C1] is_bpf_text_address+0x6d/0x2b0 [ 468.764824][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 468.764844][ C1] kernel_text_address+0xa5/0xe0 [ 468.764878][ C1] __kernel_text_address+0xd/0x30 [ 468.764893][ C1] unwind_get_return_address+0x4d/0x90 [ 468.764913][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 468.764947][ C1] arch_stack_walk+0xfb/0x150 [ 468.764972][ C1] stack_trace_save+0xa9/0x100 [ 468.764987][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 468.765000][ C1] ? kasan_save_track+0x4f/0x80 [ 468.765018][ C1] ? kmem_cache_free+0x156/0x6c0 [ 468.765036][ C1] ? fput_close_sync+0x11f/0x240 [ 468.765053][ C1] ? __x64_sys_close+0x7e/0x110 [ 468.765070][ C1] ? do_syscall_64+0x174/0x580 [ 468.765090][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.765111][ C1] kasan_save_stack+0x3e/0x60 [ 468.765127][ C1] ? kasan_save_stack+0x3e/0x60 [ 468.765142][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 468.765165][ C1] ? kmem_cache_free+0x513/0x6c0 [ 468.765183][ C1] ? fput_close_sync+0x11f/0x240 [ 468.765199][ C1] ? __x64_sys_close+0x7e/0x110 [ 468.765216][ C1] ? do_syscall_64+0x174/0x580 [ 468.765234][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.765275][ C1] ? fput_close_sync+0x11f/0x240 [ 468.765292][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 468.765316][ C1] kmem_cache_free+0x513/0x6c0 [ 468.765338][ C1] fput_close_sync+0x11f/0x240 [ 468.765355][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 468.765375][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.765393][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.765411][ C1] __x64_sys_close+0x7e/0x110 [ 468.765429][ C1] do_syscall_64+0x174/0x580 [ 468.765450][ C1] ? clear_bhb_loop+0x40/0x90 [ 468.765476][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.765493][ C1] RIP: 0033:0x7f9207974407 [ 468.765507][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 468.765521][ C1] RSP: 002b:00007fffce378270 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 468.765537][ C1] RAX: ffffffffffffffda RBX: 00007f9207886880 RCX: 00007f9207974407 [ 468.765550][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 468.765559][ C1] RBP: 00007f92078866e8 R08: 0000000000000000 R09: 0000000000000000 [ 468.765569][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 468.765579][ C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 00007fffce378570 [ 468.765600][ C1] [ 468.817638][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 468.817712][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.817771][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 468.817802][ T38] Call Trace: [ 468.817822][ T38] [ 468.817842][ T38] vpanic+0x56c/0xa60 [ 468.817911][ T38] ? __pfx___schedule+0x10/0x10 [ 468.817987][ T38] ? __pfx_vpanic+0x10/0x10 [ 468.818066][ T38] panic+0xc5/0xd0 [ 468.818085][ T38] ? __pfx_panic+0x10/0x10 [ 468.818101][ T38] ? preempt_schedule_common+0x82/0xd0 [ 468.818123][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 468.818149][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 468.818183][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 468.818217][ T38] watchdog+0x1030/0x1030 [ 468.818259][ T38] ? watchdog+0x1c7/0x1030 [ 468.818297][ T38] kthread+0x388/0x470 [ 468.818327][ T38] ? __pfx_watchdog+0x10/0x10 [ 468.818344][ T38] ? __pfx_kthread+0x10/0x10 [ 468.818375][ T38] ret_from_fork+0x514/0xb70 [ 468.818408][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 468.818437][ T38] ? __switch_to+0xc89/0x1420 [ 468.818466][ T38] ? __pfx_kthread+0x10/0x10 [ 468.818496][ T38] ret_from_fork_asm+0x1a/0x30 [ 468.818530][ T38] [ 468.819127][ T38] Kernel Offset: disabled