last executing test programs: 2m34.694680332s ago: executing program 3 (id=199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6bb, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x6bb, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="009c00011a2b3c4d0001000001000000", 0x10, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000200)="009c00021a2b3c4d000100000100000000010100", 0x14, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="00a000071a2b3c4d0001000001000000", 0x10, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="00a000081a2b3c4d0001000001000000", 0x10, 0x0, 0x0, 0x0) 2m34.670015882s ago: executing program 3 (id=200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x820}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv4_newroute={0x24, 0x18, 0x405, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) close(r0) 2m34.494489356s ago: executing program 3 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x1, 0x2}, 0x14}}, 0x0) 2m34.414900578s ago: executing program 3 (id=205): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000300001000000000000000000"], 0x48}], 0x1}, 0x0) 2m34.311166911s ago: executing program 3 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/fs/nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/fs/nfsd/ports\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000100)="000000010000000000000002000186a30000000300000000000000010000002000"/64, 0x40, 0x0, &(0x7f0000000200)={0x2, 0x7f1, @loopback}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) read(r4, &(0x7f0000000300)=""/100, 0x64) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x20, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x20, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x20}}, 0x0) 2m33.934417791s ago: executing program 3 (id=210): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0) 2m33.1220636s ago: executing program 2 (id=216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000300001000000000000000000"], 0x48}], 0x1}, 0x0) 2m32.971990144s ago: executing program 0 (id=218): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x501, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x20e7, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x20e7, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto(r2, &(0x7f0000000500)='hello world', 0xb, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800), 0x64}], 0x1}, 0x0) 2m32.892140576s ago: executing program 2 (id=219): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000600)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000700)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) accept(r3, 0x0, 0x0) close(r4) close(r3) 2m31.9153387s ago: executing program 0 (id=222): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x1020304}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4001, @local}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m31.810644433s ago: executing program 2 (id=223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="600000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001010203"], 0x2b) 2m31.53060325s ago: executing program 0 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1000\n', 0x5) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000200), 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@mpls_newroute={0x0, 0x18, 0x605, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}, [@RTA_DST={0x0, 0x0, {0x100, 0x0, 0x1}}, @RTA_NEWDST={0x0, 0x0, [{0x200, 0x0, 0x1}]}, @RTA_OIF={0x0, 0x0, 0x1}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000200), 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@mpls_getroute={0x0, 0x1a, 0x301}, 0x1c}}, 0x0) 2m31.52560007s ago: executing program 2 (id=227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c01000010000500000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000012345678320000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000020000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0004000100123412340000000000000000000000000000000000000800220001000000"], 0x15c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 2m31.258465596s ago: executing program 0 (id=230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @local}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_host\x00', &(0x7f0000000300)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000400)="636570682076320a0d0a1000", 0xc) write(r2, &(0x7f0000000500)="ffffffffffffffff0000000000000000", 0x10) nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0) close(r2) close(r1) 2m31.209115098s ago: executing program 2 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/rxrpc/idle_conn_expiry\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n\x00', 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000240)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x18) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r1) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 2m30.749154139s ago: executing program 2 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='./rec\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r2, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='3\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='8\n\x00', 0x2) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m30.28567456s ago: executing program 0 (id=237): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000000)=@in={0x2, 0x2082, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x6) connect(r1, &(0x7f0000000000)=@in={0x2, 0x2082, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x124, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x124, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28) sendto(r1, &(0x7f0000000500)="15030300020200", 0x7, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/100, 0x100}], 0x1}, 0x0) 2m29.617423297s ago: executing program 4 (id=241): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:unconfined_exec_t:s0\x00'}]}, 0x50}}, 0x0) 2m29.442461661s ago: executing program 4 (id=243): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x5}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 2m29.332948554s ago: executing program 4 (id=245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x10000}}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000180)={0x11, 0x3, r3}, 0x14) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m29.214655947s ago: executing program 0 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x8008, @loopback}, 0x10) sendto(r3, &(0x7f0000000280)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m29.07365947s ago: executing program 1 (id=248): r0 = socket$nl_route(0x10, 0x800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x64}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write(r1, &(0x7f0000000400)="00008847000640014500001400000000400100007f0000017f000001", 0x1c) 2m28.874611835s ago: executing program 1 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/infiniband_rxe/add\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='eth0\x00', 0x5) close(r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) accept(r1, 0x0, 0x0) close(r2) close(r1) 2m28.874422105s ago: executing program 4 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xac140000}, @RTA_OIF={0x8, 0x4, 0x1}]}, 0x2c}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f0000000100)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0xac140001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xac140000}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2m27.957672467s ago: executing program 4 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x0, 0xa, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x0, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @masq={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS]}}}]}]}], {0x0, 0xb, 0x1, 0x0, 0x0, {0x2}}}}}, 0x0) 2m27.922889878s ago: executing program 1 (id=252): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 2m27.766675382s ago: executing program 1 (id=253): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)=""/5, 0x5}], 0x1}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) 2m27.766489862s ago: executing program 4 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000140)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='+tcp 2049\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n', 0x2) 2m27.503880638s ago: executing program 1 (id=255): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="0200", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x40) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 2m26.562982822s ago: executing program 1 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='udp 2049\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\x00', 0x2) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r2, &(0x7f0000000400)='hello\x00', 0x5, 0x0, &(0x7f0000000500)={0x2, 0x8008, @loopback}, 0x10) 2m18.455849452s ago: executing program 32 (id=210): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0) 2m15.703544739s ago: executing program 33 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='./rec\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r2, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='3\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='8\n\x00', 0x2) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m14.110816838s ago: executing program 34 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x8008, @loopback}, 0x10) sendto(r3, &(0x7f0000000280)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m11.972494081s ago: executing program 35 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000140)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='+tcp 2049\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n', 0x2) 2m10.902954247s ago: executing program 36 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='udp 2049\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\x00', 0x2) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r2, &(0x7f0000000400)='hello\x00', 0x5, 0x0, &(0x7f0000000500)={0x2, 0x8008, @loopback}, 0x10) 46.094366885s ago: executing program 6 (id=544): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 45.758829693s ago: executing program 6 (id=547): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0x80000300, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={r2, 0xffffffffffffffff, 0xfffffb6e}) 45.559476598s ago: executing program 6 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x400, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x7fff]) 45.379229232s ago: executing program 6 (id=550): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 44.915648984s ago: executing program 6 (id=552): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x27f, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 42.63120906s ago: executing program 6 (id=558): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x280, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 41.968452787s ago: executing program 37 (id=558): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x280, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 10.664718437s ago: executing program 9 (id=644): write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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") mount(0x0, 0x0, 0x0, 0x1000, 0x0) open(0x0, 0x0, 0xa27b734c1a0bc97) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580), 0x1, 0x14d1, &(0x7f00000015c0)="$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") r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) 8.279358086s ago: executing program 9 (id=648): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0xa) 8.277556486s ago: executing program 7 (id=649): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000300)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000340)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x0, 0x10}, 0xa) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@prinfo={0x18, 0x84, 0x5, {0x10}}], 0x18}, 0x0) 7.976248563s ago: executing program 5 (id=650): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3) 7.910627995s ago: executing program 9 (id=651): socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 7.746889989s ago: executing program 7 (id=652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x40, 0x0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x40}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x400, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x7fff]) 7.153655873s ago: executing program 7 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0x80000300, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0xfffffb6e}) bind$rds(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 6.958489818s ago: executing program 8 (id=654): syz_open_dev$radio(0x0, 0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x76f1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x7, 0x0, 0x8000, 0xfffffffe}, 0x6, 0x0, 0x7c1, 0x0, 0x1, 0x15, 0x12, 0x1d, 0x87, 0x7fffffff, {0x8, 0x1, 0x6, 0x3, 0x6, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.749527523s ago: executing program 5 (id=655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) 4.207289996s ago: executing program 5 (id=656): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0xd, 0x4}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000580)={0xdd8, 0x453, 0x1, 0x70bd29, 0x25dfdbff, "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", [""]}, 0xdd8}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24008850) 4.006746851s ago: executing program 7 (id=657): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) close(r0) 3.148001982s ago: executing program 8 (id=658): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1) 3.036800065s ago: executing program 9 (id=659): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1) 3.006354226s ago: executing program 5 (id=660): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$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") 2.897021878s ago: executing program 7 (id=661): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000300)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000340)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x0, 0x10}, 0xa) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@prinfo={0x18, 0x84, 0x5, {0x10}}], 0x18}, 0x0) 2.596459436s ago: executing program 8 (id=662): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b04000000000034f27c76000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) 1.846249724s ago: executing program 9 (id=663): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="000000020104", 0x6) read(r2, &(0x7f0000000310), 0x6) sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) 1.844224995s ago: executing program 5 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x40, r1, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x40}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x400, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x7fff]) 1.61483944s ago: executing program 7 (id=665): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) 1.61458833s ago: executing program 5 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0x80000300, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0xfffffb6e}) bind$rds(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 1.61354527s ago: executing program 8 (id=667): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0xfffffffc, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000840)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0xd5}, 0x90) 1.185278731s ago: executing program 8 (id=668): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 710.687162ms ago: executing program 9 (id=669): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000580)={0xdd8, 0x453, 0x1, 0x70bd29, 0x25dfdbff, "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", [""]}, 0xdd8}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24008850) 0s ago: executing program 8 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r2, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): CDC Ethernet Device, 42:42:42:42:42:42 [ 90.034261][ T4374] FAULT_INJECTION: forcing a failure. [ 90.034261][ T4374] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.130396][ T4402] Zero length message leads to an empty skb [ 90.250738][ T4374] CPU: 1 PID: 4374 Comm: syz.4.7 Not tainted syzkaller #0 [ 90.257946][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.268049][ T4374] Call Trace: [ 90.271374][ T4374] [ 90.274352][ T4374] dump_stack_lvl+0x188/0x24e [ 90.279093][ T4374] ? show_regs_print_info+0x12/0x12 [ 90.284354][ T4374] ? load_image+0x410/0x410 [ 90.288918][ T4374] ? __lock_acquire+0x7c40/0x7c40 [ 90.294018][ T4374] should_fail_ex+0x390/0x4c0 [ 90.298822][ T4374] _copy_from_user+0x2c/0x170 [ 90.303531][ T4374] get_timespec64+0x93/0x1b0 [ 90.308158][ T4374] ? timespec64_add_safe+0x1f0/0x1f0 [ 90.313485][ T4374] __se_sys_futex+0x1a4/0x410 [ 90.318195][ T4374] ? __x64_sys_futex+0xf0/0xf0 [ 90.322989][ T4374] ? __x64_sys_futex+0x1d/0xf0 [ 90.327804][ T4374] do_syscall_64+0x4c/0xa0 [ 90.332247][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 90.336973][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 90.341684][ T4374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.347610][ T4374] RIP: 0033:0x7f5fc059de99 [ 90.352045][ T4374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.371675][ T4374] RSP: 002b:00007ffeee1b7d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.380117][ T4374] RAX: ffffffffffffffda RBX: 0000000000015f86 RCX: 00007f5fc059de99 [ 90.388124][ T4374] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5fc082609c [ 90.396135][ T4374] RBP: 0000000000000032 R08: 003a90e03f7b5bde R09: 0000000000000000 [ 90.404396][ T4374] R10: 00007ffeee1b7e40 R11: 0000000000000246 R12: 00007ffeee1b7e60 [ 90.412394][ T4374] R13: 00007f5fc082609c R14: 0000000000015fb8 R15: 00007ffeee1b7e40 [ 90.420405][ T4374] [ 90.440444][ T4383] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 90.570969][ T4374] FAULT_INJECTION: forcing a failure. [ 90.570969][ T4374] name fail_futex, interval 1, probability 0, space 0, times 0 [ 90.602156][ T4374] CPU: 0 PID: 4374 Comm: syz.4.7 Not tainted syzkaller #0 [ 90.609357][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.619463][ T4374] Call Trace: [ 90.622782][ T4374] [ 90.625761][ T4374] dump_stack_lvl+0x188/0x24e [ 90.630503][ T4374] ? lock_chain_count+0x20/0x20 [ 90.635405][ T4374] ? show_regs_print_info+0x12/0x12 [ 90.640667][ T4374] ? load_image+0x410/0x410 [ 90.645246][ T4374] ? futex_q_unlock+0x1f/0x30 [ 90.650030][ T4374] should_fail_ex+0x390/0x4c0 [ 90.654768][ T4374] get_futex_key+0x1b1/0x1000 [ 90.659512][ T4374] ? futex_setup_timer+0xc0/0xc0 [ 90.664517][ T4374] futex_wake+0x123/0x4f0 [ 90.668891][ T4374] ? futex_wake_mark+0x150/0x150 [ 90.673881][ T4374] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 90.680172][ T4374] ? lockdep_hardirqs_on+0x94/0x140 [ 90.685475][ T4374] do_futex+0x2e2/0x320 [ 90.689681][ T4374] ? _copy_from_user+0x10b/0x170 [ 90.694673][ T4374] ? __ia32_sys_get_robust_list+0x100/0x100 [ 90.700619][ T4374] __se_sys_futex+0x381/0x410 [ 90.705354][ T4374] ? __x64_sys_futex+0xf0/0xf0 [ 90.710165][ T4374] ? __x64_sys_futex+0x1d/0xf0 [ 90.714972][ T4374] do_syscall_64+0x4c/0xa0 [ 90.719457][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 90.724182][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 90.728915][ T4374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.734875][ T4374] RIP: 0033:0x7f5fc059de99 [ 90.739336][ T4374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.759087][ T4374] RSP: 002b:00007ffeee1b7d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.767553][ T4374] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007f5fc059de99 [ 90.775576][ T4374] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5fc0826098 [ 90.783595][ T4374] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 90.791613][ T4374] R10: 00007f5fc0825fa0 R11: 0000000000000246 R12: 0000000000000001 [ 90.799658][ T4374] R13: 00007f5fc082609c R14: 00007f5fc0826098 R15: 00007f5fc0826090 [ 90.807691][ T4374] [ 90.818622][ T4391] sctp: failed to load transform for md5: -2 [ 90.956163][ T4420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14'. [ 91.112674][ T4426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15'. [ 91.119744][ T4374] FAULT_INJECTION: forcing a failure. [ 91.119744][ T4374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.167192][ T4374] CPU: 1 PID: 4374 Comm: syz.4.7 Not tainted syzkaller #0 [ 91.174412][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.184529][ T4374] Call Trace: [ 91.186461][ T4339] usb 2-1: USB disconnect, device number 2 [ 91.187845][ T4374] [ 91.187858][ T4374] dump_stack_lvl+0x188/0x24e [ 91.201413][ T4374] ? show_regs_print_info+0x12/0x12 [ 91.206678][ T4374] ? load_image+0x410/0x410 [ 91.211245][ T4374] ? __lock_acquire+0x7c40/0x7c40 [ 91.216357][ T4374] should_fail_ex+0x390/0x4c0 [ 91.221105][ T4374] _copy_from_user+0x2c/0x170 [ 91.225849][ T4374] get_timespec64+0x93/0x1b0 [ 91.229218][ T4339] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 91.230486][ T4374] ? timespec64_add_safe+0x1f0/0x1f0 [ 91.230538][ T4374] __se_sys_futex+0x1a4/0x410 [ 91.250313][ T4374] ? __x64_sys_futex+0xf0/0xf0 [ 91.255147][ T4374] ? __x64_sys_futex+0x1d/0xf0 [ 91.259966][ T4374] do_syscall_64+0x4c/0xa0 [ 91.264450][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 91.269182][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 91.273920][ T4374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.279875][ T4374] RIP: 0033:0x7f5fc059de99 [ 91.284329][ T4374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.304004][ T4374] RSP: 002b:00007ffeee1b7d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.312625][ T4374] RAX: ffffffffffffffda RBX: 00000000000163c4 RCX: 00007f5fc059de99 [ 91.320621][ T4374] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5fc082618c [ 91.328629][ T4374] RBP: 0000000000000032 R08: 0003baca53797366 R09: 0000000000000000 [ 91.336644][ T4374] R10: 00007ffeee1b7e40 R11: 0000000000000246 R12: 00007ffeee1b7e60 [ 91.344646][ T4374] R13: 00007f5fc082618c R14: 00000000000163f6 R15: 00007ffeee1b7e40 [ 91.352663][ T4374] [ 91.581311][ T4374] FAULT_INJECTION: forcing a failure. [ 91.581311][ T4374] name fail_futex, interval 1, probability 0, space 0, times 0 [ 91.597052][ T4374] CPU: 1 PID: 4374 Comm: syz.4.7 Not tainted syzkaller #0 [ 91.604233][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.614358][ T4374] Call Trace: [ 91.617681][ T4374] [ 91.620659][ T4374] dump_stack_lvl+0x188/0x24e [ 91.625405][ T4374] ? lock_chain_count+0x20/0x20 [ 91.630324][ T4374] ? show_regs_print_info+0x12/0x12 [ 91.635635][ T4374] ? load_image+0x410/0x410 [ 91.640205][ T4374] ? futex_q_unlock+0x1f/0x30 [ 91.644934][ T4374] should_fail_ex+0x390/0x4c0 [ 91.649675][ T4374] get_futex_key+0x1b1/0x1000 [ 91.654421][ T4374] ? futex_setup_timer+0xc0/0xc0 [ 91.659555][ T4374] futex_wake+0x123/0x4f0 [ 91.663933][ T4374] ? futex_wake_mark+0x150/0x150 [ 91.668926][ T4374] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 91.675225][ T4374] ? lockdep_hardirqs_on+0x94/0x140 [ 91.680488][ T4374] do_futex+0x2e2/0x320 [ 91.684694][ T4374] ? _copy_from_user+0x10b/0x170 [ 91.689779][ T4374] ? __ia32_sys_get_robust_list+0x100/0x100 [ 91.695722][ T4374] ? __up_read+0x2b4/0x6b0 [ 91.700201][ T4374] __se_sys_futex+0x381/0x410 [ 91.704932][ T4374] ? __x64_sys_futex+0xf0/0xf0 [ 91.709776][ T4374] ? __x64_sys_futex+0x1d/0xf0 [ 91.714572][ T4374] do_syscall_64+0x4c/0xa0 [ 91.719020][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 91.723732][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 91.728454][ T4374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.734379][ T4374] RIP: 0033:0x7f5fc059de99 [ 91.738835][ T4374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.758499][ T4374] RSP: 002b:00007ffeee1b7d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.766946][ T4374] RAX: ffffffffffffffda RBX: 00000000000001e0 RCX: 00007f5fc059de99 [ 91.774944][ T4374] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5fc0826188 [ 91.782942][ T4374] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 91.790965][ T4374] R10: 00007f5fc0825fa0 R11: 0000000000000246 R12: 0000000000000002 [ 91.798967][ T4374] R13: 00007f5fc082618c R14: 00007f5fc0826188 R15: 00007f5fc0826180 [ 91.807147][ T4374] [ 91.846546][ T14] cfg80211: failed to load regulatory.db [ 92.343973][ T4374] FAULT_INJECTION: forcing a failure. [ 92.343973][ T4374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.414108][ T4374] CPU: 0 PID: 4374 Comm: syz.4.7 Not tainted syzkaller #0 [ 92.421318][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.431426][ T4374] Call Trace: [ 92.434754][ T4374] [ 92.437737][ T4374] dump_stack_lvl+0x188/0x24e [ 92.442509][ T4374] ? show_regs_print_info+0x12/0x12 [ 92.447780][ T4374] ? load_image+0x410/0x410 [ 92.452353][ T4374] ? __lock_acquire+0x7c40/0x7c40 [ 92.457457][ T4374] should_fail_ex+0x390/0x4c0 [ 92.462230][ T4374] _copy_from_user+0x2c/0x170 [ 92.466971][ T4374] get_timespec64+0x93/0x1b0 [ 92.471632][ T4374] ? timespec64_add_safe+0x1f0/0x1f0 [ 92.477030][ T4374] ? ktime_get+0x247/0x270 [ 92.481532][ T4374] __se_sys_clock_nanosleep+0x1c3/0x3a0 [ 92.487184][ T4374] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 92.492888][ T4374] ? lockdep_hardirqs_on+0x94/0x140 [ 92.498170][ T4374] do_syscall_64+0x4c/0xa0 [ 92.502685][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 92.507438][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 92.512207][ T4374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.518174][ T4374] RIP: 0033:0x7f5fc055e6ce [ 92.522645][ T4374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.542313][ T4374] RSP: 002b:00007ffeee1b7cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 92.550800][ T4374] RAX: ffffffffffffffda RBX: 000055556a02a500 RCX: 00007f5fc055e6ce [ 92.558839][ T4374] RDX: 00007ffeee1b7d10 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.566875][ T4374] RBP: 00007f5fc0827da0 R08: 0000000000000000 R09: 0000000000000000 [ 92.574908][ T4374] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000168e5 [ 92.582936][ T4374] R13: 00007f5fc082627c R14: 00000000000168b3 R15: 00007f5fc0826270 [ 92.590982][ T4374] [ 92.632525][ T4463] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET) [ 92.887941][ T4474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 93.243765][ T4483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.31'. [ 93.265534][ T4483] tipc: Started in network mode [ 93.324834][ T4483] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 93.357402][ T4483] tipc: Enabled bearer , priority 10 [ 93.372489][ T4484] svc: failed to register lockdv1 RPC service (errno 111). [ 93.412930][ T4484] lockd_up: makesock failed, error=-111 [ 93.815797][ T4502] svc: failed to register nfsdv3 RPC service (errno 111). [ 93.864295][ T4502] svc: failed to register nfsaclv3 RPC service (errno 111). [ 93.930891][ T4505] svc: failed to register nfsdv3 RPC service (errno 111). [ 93.949843][ T4505] svc: failed to register nfsaclv3 RPC service (errno 111). [ 94.147302][ T4515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'. [ 94.365114][ T4321] tipc: Node number set to 11709098 [ 94.448856][ T4517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 95.146502][ T4548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 95.198490][ T4550] netlink: 72 bytes leftover after parsing attributes in process `syz.4.54'. [ 96.024639][ T4531] NFSD: attempt to initialize umh client tracking in a container ignored. [ 96.040575][ T4531] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 96.050797][ T4531] NFSD: Unable to initialize client recovery tracking! (-22) [ 96.059694][ T4531] NFSD: starting 90-second grace period (net f0000574) [ 96.186736][ T4579] svc: failed to register lockdv1 RPC service (errno 111). [ 96.975432][ T4608] tipc: Cannot configure node identity twice [ 96.983504][ T4608] tipc: Enabled bearer , priority 1 [ 97.336945][ T4622] netlink: 'syz.2.79': attribute type 4 has an invalid length. [ 97.355171][ T4622] netlink: 'syz.2.79': attribute type 2 has an invalid length. [ 97.362798][ T4622] netlink: 'syz.2.79': attribute type 4 has an invalid length. [ 98.104693][ T4339] tipc: Node number set to 2841060945 [ 98.152247][ T4319] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 98.164969][ T4620] ceph: No mds server is up or the cluster is laggy [ 98.493438][ T4661] netlink: 40 bytes leftover after parsing attributes in process `syz.2.94'. [ 98.567448][ T4659] svc: failed to register lockdv1 RPC service (errno 111). [ 99.198737][ T4693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 100.064144][ T4723] tipc: Started in network mode [ 100.069109][ T4723] tipc: Node identity 0e22842cf686, cluster identity 4711 [ 100.098446][ T4723] tipc: Enabled bearer , priority 10 [ 100.411561][ T4733] FAULT_INJECTION: forcing a failure. [ 100.411561][ T4733] name fail_futex, interval 1, probability 0, space 0, times 0 [ 100.445205][ T4733] CPU: 0 PID: 4733 Comm: syz.0.121 Not tainted syzkaller #0 [ 100.452597][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.462698][ T4733] Call Trace: [ 100.466022][ T4733] [ 100.468993][ T4733] dump_stack_lvl+0x188/0x24e [ 100.473736][ T4733] ? show_regs_print_info+0x12/0x12 [ 100.478992][ T4733] ? load_image+0x410/0x410 [ 100.483538][ T4733] ? do_futex+0x2e2/0x320 [ 100.487912][ T4733] ? _copy_from_user+0x10b/0x170 [ 100.492894][ T4733] ? __ia32_sys_get_robust_list+0x100/0x100 [ 100.498819][ T4733] should_fail_ex+0x390/0x4c0 [ 100.503556][ T4733] __se_sys_futex+0x18b/0x410 [ 100.508290][ T4733] ? __x64_sys_futex+0xf0/0xf0 [ 100.513192][ T4733] ? __x64_sys_futex+0x1d/0xf0 [ 100.518004][ T4733] do_syscall_64+0x4c/0xa0 [ 100.522483][ T4733] ? clear_bhb_loop+0x60/0xb0 [ 100.527216][ T4733] ? clear_bhb_loop+0x60/0xb0 [ 100.531955][ T4733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.537894][ T4733] RIP: 0033:0x7ff70739de99 [ 100.542355][ T4733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.562017][ T4733] RSP: 002b:00007fff9a95a618 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 100.570487][ T4733] RAX: ffffffffffffffda RBX: 000000000001880f RCX: 00007ff70739de99 [ 100.578513][ T4733] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff707625fac [ 100.586545][ T4733] RBP: 0000000000000032 R08: 001503d77f7284ec R09: 0000000000000000 [ 100.594565][ T4733] R10: 00007fff9a95a720 R11: 0000000000000246 R12: 00007fff9a95a740 [ 100.602583][ T4733] R13: 00007ff707625fac R14: 0000000000018841 R15: 00007fff9a95a720 [ 100.610614][ T4733] [ 100.696519][ T4739] netlink: 108 bytes leftover after parsing attributes in process `syz.4.124'. [ 100.875838][ T4741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 100.906272][ T4741] netlink: 60 bytes leftover after parsing attributes in process `syz.3.125'. [ 101.034080][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 101.049887][ T4752] netlink: 268 bytes leftover after parsing attributes in process `syz.0.127'. [ 101.070896][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 101.176000][ T14] tipc: Node number set to 4171531308 [ 101.338833][ T4762] lo speed is unknown, defaulting to 1000 [ 101.352838][ T4762] lo speed is unknown, defaulting to 1000 [ 101.363619][ T4762] lo speed is unknown, defaulting to 1000 [ 101.588741][ T4772] netlink: 108 bytes leftover after parsing attributes in process `syz.2.133'. [ 101.741086][ T26] lo speed is unknown, defaulting to 1000 [ 101.747547][ T4762] infiniband syz0: set active [ 101.753109][ T4762] infiniband syz0: added lo [ 101.832186][ T4762] RDS/IB: syz0: added [ 101.842578][ T4762] smc: adding ib device syz0 with port count 1 [ 101.864419][ T4762] smc: ib device syz0 port 1 has pnetid [ 101.872192][ T26] lo speed is unknown, defaulting to 1000 [ 101.925913][ T4762] lo speed is unknown, defaulting to 1000 [ 102.192748][ T4762] lo speed is unknown, defaulting to 1000 [ 102.295520][ T4794] netlink: 104 bytes leftover after parsing attributes in process `syz.4.143'. [ 102.386138][ T4762] lo speed is unknown, defaulting to 1000 [ 102.576117][ T4762] lo speed is unknown, defaulting to 1000 [ 102.732964][ T4762] lo speed is unknown, defaulting to 1000 [ 102.906745][ T4802] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.173390][ T4809] netlink: 56 bytes leftover after parsing attributes in process `syz.4.151'. [ 103.182873][ T4813] tipc: Enabling of bearer rejected, failed to enable media [ 103.223984][ T4782] NFSD: attempt to initialize umh client tracking in a container ignored. [ 103.235651][ T4782] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 103.250081][ T4812] infiniband syz0: set down [ 103.255072][ T4782] NFSD: Unable to initialize client recovery tracking! (-22) [ 103.262659][ T4782] NFSD: starting 90-second grace period (net f0000568) [ 103.386727][ T4818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.153'. [ 103.401585][ T14] lo speed is unknown, defaulting to 1000 [ 103.435211][ T4339] lo speed is unknown, defaulting to 1000 [ 103.476871][ T4820] lo speed is unknown, defaulting to 1000 [ 103.653911][ T4826] tipc: New replicast peer: 127.0.0.1 [ 103.671387][ T4826] tipc: Enabled bearer , priority 10 [ 104.541960][ T4858] tipc: New replicast peer: 127.0.0.1 [ 104.552248][ T4858] tipc: Enabled bearer , priority 10 [ 104.578544][ T4858] tipc: Disabling bearer [ 104.912791][ T4868] tipc: Resetting bearer [ 105.433926][ T4846] NFSD: attempt to initialize umh client tracking in a container ignored. [ 105.452924][ T4846] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 105.472993][ T4846] NFSD: Unable to initialize client recovery tracking! (-22) [ 105.487982][ T4846] NFSD: starting 90-second grace period (net f0000568) [ 106.035798][ T4878] ceph: No mds server is up or the cluster is laggy [ 106.679671][ T4921] __nla_validate_parse: 9 callbacks suppressed [ 106.679691][ T4921] netlink: 108 bytes leftover after parsing attributes in process `syz.0.192'. [ 106.871471][ T4929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.194'. [ 106.888387][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 107.184750][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 107.316814][ T4947] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 107.632589][ T4955] svc: failed to register nfsdv3 RPC service (errno 111). [ 107.643161][ T4955] svc: failed to register nfsaclv3 RPC service (errno 111). [ 108.295288][ T4972] tipc: Disabling bearer [ 108.988171][ T4989] rdma_rxe: rxe_register_device failed with error -23 [ 109.006416][ T4989] rdma_rxe: failed to add veth0 [ 109.029924][ T4989] smc: net device veth0 applied user defined pnetid SYZ0 [ 109.193553][ T26] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 109.458562][ T22] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 109.819087][ T5009] netlink: 'syz.1.221': attribute type 2 has an invalid length. [ 109.837207][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 109.990004][ T22] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 109.998744][ T4997] ceph: No mds server is up or the cluster is laggy [ 110.367187][ T5024] netlink: 108 bytes leftover after parsing attributes in process `syz.2.227'. [ 112.525474][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 112.546516][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 112.599271][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 114.244176][ C1] tipc: RX(aaaaaaaaaa18): key[1] is activated [ 123.611580][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.621279][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.635024][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.645591][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.653375][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.660948][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.702394][ T5138] lo speed is unknown, defaulting to 1000 [ 123.949906][ T5138] chnl_net:caif_netlink_parms(): no params data found [ 124.002445][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.009790][ T5138] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.018954][ T5138] device bridge_slave_0 entered promiscuous mode [ 124.028510][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.035975][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.044245][ T5138] device bridge_slave_1 entered promiscuous mode [ 124.068635][ T5138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.080472][ T5138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.111678][ T5138] team0: Port device team_slave_0 added [ 124.121147][ T5138] team0: Port device team_slave_1 added [ 124.142077][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.149216][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.175821][ T5138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.188668][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.195971][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.223197][ T5138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.260309][ T5138] device hsr_slave_0 entered promiscuous mode [ 124.267391][ T5138] device hsr_slave_1 entered promiscuous mode [ 124.274203][ T5138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.281807][ T5138] Cannot create hsr debugfs directory [ 124.399511][ T5138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.410887][ T5138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.421094][ T5138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.430852][ T5138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.455188][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.462538][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.470343][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.477588][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.534359][ T5138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.550611][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.560989][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.573003][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.587939][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 124.605849][ T5138] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.619801][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.629880][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.637177][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.649879][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.659927][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.667124][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.692673][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.707181][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.723500][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.739432][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.752516][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.767609][ T5138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.979940][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.987635][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.003348][ T5138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.312269][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.329009][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.352341][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.366131][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.375753][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.384591][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.395902][ T5138] device veth0_vlan entered promiscuous mode [ 125.408272][ T5138] device veth1_vlan entered promiscuous mode [ 125.430979][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.448642][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.457242][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.466995][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.479078][ T5138] device veth0_macvtap entered promiscuous mode [ 125.491710][ T5138] device veth1_macvtap entered promiscuous mode [ 125.509586][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.520620][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.530920][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.542413][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.552691][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.563422][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.574436][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.585220][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.596281][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.608190][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.619925][ T5138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.630930][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.642297][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.650824][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.661316][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.671969][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.682814][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.693488][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 125.700247][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.711152][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.721156][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.732648][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.744441][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.755179][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.766412][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.776946][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.788577][ T5138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.799917][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.810285][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.821746][ T5138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.830674][ T5138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.840083][ T5138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.849945][ T5138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.921550][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.939630][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.950682][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.974065][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.981932][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.990632][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.423303][ T4279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 126.432413][ T4279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 126.440653][ T4279] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 126.448717][ T4279] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 126.459031][ T4279] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 126.466551][ T4279] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 126.532683][ T5166] lo speed is unknown, defaulting to 1000 [ 126.552135][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.261'. [ 126.845759][ T5166] chnl_net:caif_netlink_parms(): no params data found [ 126.961349][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.971177][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.979523][ T5166] device bridge_slave_0 entered promiscuous mode [ 126.993207][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.000508][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.009042][ T5166] device bridge_slave_1 entered promiscuous mode [ 127.036830][ T5166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.049814][ T5166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.081450][ T5166] team0: Port device team_slave_0 added [ 127.090590][ T5166] team0: Port device team_slave_1 added [ 127.101100][ T5182] netlink: 40 bytes leftover after parsing attributes in process `syz.5.265'. [ 127.119693][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.265'. [ 127.127367][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.136092][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.162735][ T5166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.187443][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.204000][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.232103][ T5166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.311059][ T5166] device hsr_slave_0 entered promiscuous mode [ 127.319136][ T5166] device hsr_slave_1 entered promiscuous mode [ 127.328288][ T5166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.336083][ T5166] Cannot create hsr debugfs directory [ 127.535630][ T5166] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.547019][ T5166] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.558018][ T5166] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.577447][ T5166] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.683151][ T5166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.723121][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 127.758481][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.764375][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 127.783645][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.796306][ T5166] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.827758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.837827][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.847870][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.855080][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.865795][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.875371][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.886382][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.893543][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.912125][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.941832][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.952797][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.962396][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.976204][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.999193][ T5166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.024575][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.045158][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.334541][ T4287] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.343567][ T4287] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.352851][ T4287] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.361673][ T4287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.369968][ T4287] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 128.377666][ T4287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.449439][ T5197] lo speed is unknown, defaulting to 1000 [ 128.512408][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.524657][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.539362][ T5166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.564885][ T4279] Bluetooth: hci6: command 0x0409 tx timeout [ 128.874533][ T5197] chnl_net:caif_netlink_parms(): no params data found [ 128.971329][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.980228][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.992530][ T5197] device bridge_slave_0 entered promiscuous mode [ 129.003500][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.011052][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.021078][ T5197] device bridge_slave_1 entered promiscuous mode [ 129.050172][ T5197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.063249][ T5197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.109662][ T5197] team0: Port device team_slave_0 added [ 129.119163][ T5197] team0: Port device team_slave_1 added [ 129.159576][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.166856][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.193433][ T5197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.207361][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.216309][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.244237][ T5197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.294625][ T5197] device hsr_slave_0 entered promiscuous mode [ 129.301555][ T5197] device hsr_slave_1 entered promiscuous mode [ 129.314110][ T5197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.321754][ T5197] Cannot create hsr debugfs directory [ 129.381976][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.391442][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.440221][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.451713][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.465426][ T5166] device veth0_vlan entered promiscuous mode [ 129.487196][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.503339][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.519576][ T5166] device veth1_vlan entered promiscuous mode [ 129.580413][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.589233][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.597947][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.608376][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.620586][ T5166] device veth0_macvtap entered promiscuous mode [ 129.642721][ T5166] device veth1_macvtap entered promiscuous mode [ 129.656224][ T5197] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 129.672586][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.684845][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.698597][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.709321][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.719476][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.730441][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.741663][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.752800][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.774771][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.793769][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.803665][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.823747][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.844240][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 129.855637][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.866058][ T5197] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 129.888919][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.913360][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.927057][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.937526][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.951825][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.977274][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.993581][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.015695][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.026227][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.036967][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.049845][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.060799][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.071453][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.082259][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.094078][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.112432][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.128034][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.136077][ T5197] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 130.162325][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.180260][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.193547][ T5166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.212181][ T5166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.221425][ T5166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.240960][ T5166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.266287][ T5197] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 130.393052][ T4287] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 130.403499][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.408192][ T4287] Bluetooth: hci7: command 0x0409 tx timeout [ 130.417904][ T4288] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 130.435439][ T4288] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 130.443355][ T4288] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 130.453386][ T4288] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 130.463110][ T4288] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 130.503830][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.518526][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.558635][ T5212] lo speed is unknown, defaulting to 1000 [ 130.572521][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.600757][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.641886][ T5197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.648921][ T4288] Bluetooth: hci6: command 0x041b tx timeout [ 130.671301][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.702646][ T5197] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.711578][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.732502][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.750001][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.766421][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.776487][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.783665][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.814317][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.836825][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.846771][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.892353][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.899583][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.948486][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.997241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.079850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.098716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.125878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.156551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.176917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.196676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.222688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.232371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.246602][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.259341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.511346][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 131.664658][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.692054][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.722826][ T5212] device bridge_slave_0 entered promiscuous mode [ 131.730404][ T4288] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 131.741566][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.750284][ T4288] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 131.766359][ T4288] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 131.770925][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.781842][ T4288] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 131.791175][ T4288] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 131.798911][ T4288] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 131.806266][ T5212] device bridge_slave_1 entered promiscuous mode [ 131.924121][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 131.930714][ T5233] lo speed is unknown, defaulting to 1000 [ 131.952337][ T5197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.966767][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.992917][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.004784][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.029786][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.064865][ T5212] team0: Port device team_slave_0 added [ 132.073588][ T5212] team0: Port device team_slave_1 added [ 132.122845][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.136786][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.200175][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.240405][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.264308][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.332115][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.479629][ T5212] device hsr_slave_0 entered promiscuous mode [ 132.486354][ T4279] Bluetooth: hci7: command 0x041b tx timeout [ 132.495076][ T4288] Bluetooth: hci8: command 0x0409 tx timeout [ 132.560992][ T5212] device hsr_slave_1 entered promiscuous mode [ 132.571382][ T5212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.600767][ T5212] Cannot create hsr debugfs directory [ 132.613812][ T5245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.280'. [ 132.724160][ T4288] Bluetooth: hci6: command 0x040f tx timeout [ 132.807082][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.813896][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.898328][ T5252] rdma_rxe: rxe_register_device failed with error -23 [ 132.924371][ T5252] rdma_rxe: failed to add veth0 [ 133.041009][ T5212] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 133.076638][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 133.126078][ T5212] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 133.137084][ T5212] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 133.172902][ T5212] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 133.264331][ T5252] infiniband syz1: set active [ 133.269479][ T5252] infiniband syz1: added veth1 [ 133.338348][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.348663][ T5252] RDS/IB: syz1: added [ 133.357775][ T5252] smc: adding ib device syz1 with port count 1 [ 133.362013][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.365912][ T5252] smc: ib device syz1 port 1 has pnetid [ 133.387366][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.395003][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.403572][ T5233] device bridge_slave_0 entered promiscuous mode [ 133.428836][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.441700][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.463876][ T5233] device bridge_slave_1 entered promiscuous mode [ 133.494298][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.503261][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.512883][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.521465][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.556953][ T5197] device veth0_vlan entered promiscuous mode [ 133.588729][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.611105][ T5197] device veth1_vlan entered promiscuous mode [ 133.636117][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.702446][ T5233] team0: Port device team_slave_0 added [ 133.734207][ T5233] team0: Port device team_slave_1 added [ 133.821587][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.843940][ T4288] Bluetooth: hci9: command 0x0409 tx timeout [ 133.868359][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.885382][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.940946][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.970329][ T5197] device veth0_macvtap entered promiscuous mode [ 133.979335][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.005638][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.021968][ T5263] loop5: detected capacity change from 0 to 2048 [ 134.038243][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.060376][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.071072][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.082541][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.102059][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.166789][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.193316][ T5197] device veth1_macvtap entered promiscuous mode [ 134.200874][ T5263] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 134.222284][ T5263] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.257034][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.266817][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.289777][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.325645][ T5263] fs-verity: sha512 using implementation "sha512-avx2" [ 134.360052][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.398797][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.411236][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.421130][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.428333][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.437704][ T5263] syz.5.283 (5263) used greatest stack depth: 20272 bytes left [ 134.447546][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.458409][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.478418][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.485649][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.537372][ T5233] device hsr_slave_0 entered promiscuous mode [ 134.554826][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 134.565151][ T4288] Bluetooth: hci7: command 0x040f tx timeout [ 134.571218][ T4288] Bluetooth: hci8: command 0x041b tx timeout [ 134.594974][ T5233] device hsr_slave_1 entered promiscuous mode [ 134.607717][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.648975][ T5233] Cannot create hsr debugfs directory [ 134.685134][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.693390][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.702827][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.711899][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.737247][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.765620][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.795172][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.805841][ T4288] Bluetooth: hci6: command 0x0419 tx timeout [ 134.814799][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.845267][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.857492][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.867611][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.878269][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.888956][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.899799][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.909959][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.920872][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.930907][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.943133][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.954860][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.967336][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.989962][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.015023][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.061998][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.096195][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.117779][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.134745][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.154332][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.179212][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.201852][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.222241][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.243091][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.263375][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.286902][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.297390][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.308139][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.318078][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.329073][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.350062][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.371561][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.386495][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.444474][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.471344][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.506222][ T5197] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.559616][ T5197] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.570293][ T5278] loop5: detected capacity change from 0 to 1024 [ 135.584305][ T5197] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.605779][ T5197] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.632203][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.657458][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.704160][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.734562][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.924174][ T4288] Bluetooth: hci9: command 0x041b tx timeout [ 136.646606][ T4288] Bluetooth: hci8: command 0x040f tx timeout [ 136.652733][ T4288] Bluetooth: hci7: command 0x0419 tx timeout [ 136.901942][ T5233] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 136.944660][ T5233] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 136.954272][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.962156][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.985366][ T5233] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 137.024310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.050473][ T5233] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 137.074226][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.082106][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.096054][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.103626][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.155060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.188106][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.372298][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.441403][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.474513][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.483270][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.532917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.555172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.594845][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.602006][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.662580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.691593][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.710964][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.741772][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.748994][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.815286][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.835208][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.878744][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.909732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.933431][ T5286] loop5: detected capacity change from 0 to 32768 [ 137.967131][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.985781][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.003783][ T4288] Bluetooth: hci9: command 0x040f tx timeout [ 138.037639][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.089241][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.137422][ T27] audit: type=1800 audit(1785198583.598:2): pid=5286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.287" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 138.192451][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.235823][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.264853][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.298099][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.755154][ T4288] Bluetooth: hci8: command 0x0419 tx timeout [ 139.716929][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.737045][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.023098][ T5212] device veth0_vlan entered promiscuous mode [ 140.145109][ T4279] Bluetooth: hci9: command 0x0419 tx timeout [ 140.399844][ T5212] device veth1_vlan entered promiscuous mode [ 140.471574][ T5320] loop5: detected capacity change from 0 to 16 [ 140.482569][ T5320] ======================================================= [ 140.482569][ T5320] WARNING: The mand mount option has been deprecated and [ 140.482569][ T5320] and is ignored by this kernel. Remove the mand [ 140.482569][ T5320] option from the mount to silence this warning. [ 140.482569][ T5320] ======================================================= [ 140.533052][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.541723][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.550692][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.556654][ T5320] erofs: (device loop5): mounted with root inode @ nid 36. [ 140.560696][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.575764][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.623919][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.662613][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.682257][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.716874][ T5322] netlink: 20 bytes leftover after parsing attributes in process `syz.7.294'. [ 140.746617][ T5212] device veth0_macvtap entered promiscuous mode [ 140.863766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 140.873763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 140.883746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 140.917230][ T5326] loop6: detected capacity change from 0 to 1024 [ 140.933764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 140.943745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 140.953743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 140.963737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 140.973747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 140.983737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 140.993737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 141.210301][ T5326] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 141.601446][ T5212] device veth1_macvtap entered promiscuous mode [ 141.631578][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.659154][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.781679][ T5331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 141.855099][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.903954][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.936051][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.956809][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.970437][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.981283][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.991484][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.002378][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.022803][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.034174][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.044446][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.055600][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.065967][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.076809][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.087315][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.098525][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.112644][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.120494][ T5336] netlink: 40 bytes leftover after parsing attributes in process `syz.5.295'. [ 142.171673][ T5337] netlink: 64 bytes leftover after parsing attributes in process `syz.7.296'. [ 142.239108][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.265669][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.297586][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.322786][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.354652][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.388441][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.413843][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.437332][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.457679][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.475010][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.495194][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.519759][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.537126][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.554909][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.566014][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.576799][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.587169][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.597976][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.640250][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.674877][ T5339] device syzkaller1 entered promiscuous mode [ 142.766674][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.776124][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.798177][ T5212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.808918][ T5346] loop6: detected capacity change from 0 to 2048 [ 142.826916][ T5212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.864987][ T5212] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.881882][ T5346] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 142.904886][ T5212] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.917223][ T5346] NILFS (loop6): invalid segment: Checksum error in segment payload [ 142.977136][ T5346] NILFS (loop6): unable to fall back to spare super block [ 142.990729][ T5125] udevd[5125]: incorrect nilfs2 checksum on /dev/loop6 [ 142.998006][ T5346] NILFS (loop6): error -22 while searching super root [ 143.037284][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.051854][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.087202][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.258352][ T5319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.328487][ T5319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.336240][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.190489][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.473832][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.482960][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.836907][ T5371] loop6: detected capacity change from 0 to 512 [ 144.844452][ T5371] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.871854][ T5371] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 144.895823][ T5371] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 144.985621][ T5371] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.305: invalid indirect mapped block 83886080 (level 1) [ 145.047518][ T5371] EXT4-fs (loop6): Remounting filesystem read-only [ 145.055790][ T5371] EXT4-fs (loop6): 1 orphan inode deleted [ 145.065245][ T5371] EXT4-fs (loop6): 1 truncate cleaned up [ 145.070964][ T5371] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 145.193431][ T5371] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #2: block 13: comm syz.6.305: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 145.241550][ T5371] EXT4-fs (loop6): Remounting filesystem read-only [ 145.263320][ T5371] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #2: comm syz.6.305: directory missing '..' [ 146.294322][ T5166] EXT4-fs (loop6): unmounting filesystem. [ 146.353807][ T4321] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 146.482681][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.502426][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.540198][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.564531][ T5399] loop6: detected capacity change from 0 to 8192 [ 146.589684][ T5399] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.603397][ T5399] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 146.613037][ T5399] REISERFS (device loop6): using ordered data mode [ 146.619842][ T5399] reiserfs: using flush barriers [ 146.627779][ T5399] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.645992][ T5399] REISERFS (device loop6): checking transaction log (loop6) [ 146.654650][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.666192][ T5233] device veth0_vlan entered promiscuous mode [ 146.690227][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.698606][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.708714][ T5233] device veth1_vlan entered promiscuous mode [ 146.729179][ T5399] REISERFS (device loop6): Using r5 hash to sort names [ 146.763540][ T5399] REISERFS (device loop6): using 3.5.x disk format [ 146.815931][ T5399] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 146.843870][ T4321] usb 9-1: Using ep0 maxpacket: 32 [ 146.855953][ T4321] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 146.875861][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.893768][ T4321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.020196][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.190492][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.435901][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.528451][ T4321] usb 9-1: Product: syz [ 147.532716][ T4321] usb 9-1: Manufacturer: syz [ 147.537413][ T4321] usb 9-1: SerialNumber: syz [ 147.544349][ T4321] usb 9-1: config 0 descriptor?? [ 147.592525][ T5233] device veth0_macvtap entered promiscuous mode [ 147.630421][ T5233] device veth1_macvtap entered promiscuous mode [ 147.682846][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.735269][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.785582][ T4321] snd-usb-6fire 9-1:0.0: unable to receive device firmware state. [ 147.813515][ T4321] snd-usb-6fire: probe of 9-1:0.0 failed with error -71 [ 147.835295][ T4321] usb 9-1: USB disconnect, device number 2 [ 147.913362][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.938240][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.964821][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.983770][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.142678][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.170813][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.221674][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.263732][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.291982][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.353784][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.364063][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.393932][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.413759][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.450786][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.489334][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.530660][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.544018][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.572851][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.622643][ T129] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 148.646517][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.664058][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.705051][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.742925][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.762309][ T5417] loop8: detected capacity change from 0 to 4096 [ 148.779376][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.835166][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.846139][ T129] usb 8-1: Using ep0 maxpacket: 32 [ 148.860917][ T129] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.905184][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.913942][ T129] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.943891][ T129] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.946720][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.966883][ T129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.014568][ T129] usb 8-1: config 0 descriptor?? [ 149.023734][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.053773][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.115487][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.174539][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.227388][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.248222][ T129] hub 8-1:0.0: USB hub found [ 149.270006][ T5417] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 149.298671][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.304271][ T5417] ntfs3: loop8: Failed to load $Extend. [ 149.348356][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.641283][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.857634][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.890481][ T5417] netlink: 84 bytes leftover after parsing attributes in process `syz.8.317'. [ 149.935138][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.946294][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.956848][ T129] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 149.964935][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.978654][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.045926][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.073841][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.175767][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.238385][ T5233] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.263263][ T5233] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.305542][ T5233] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.340979][ T5233] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.652572][ T5393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.671894][ T5393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.717868][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.806361][ T5319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.825467][ T5319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.869057][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.535689][ T129] usbhid 8-1:0.0: can't add hid device: -71 [ 151.541989][ T129] usbhid: probe of 8-1:0.0 failed with error -71 [ 151.634836][ T129] usb 8-1: USB disconnect, device number 2 [ 151.889699][ T5435] loop6: detected capacity change from 0 to 32768 [ 152.269947][ T5435] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 152.353053][ T5435] JBD2: Ignoring recovery information on journal [ 152.506141][ T5454] loop5: detected capacity change from 0 to 4096 [ 152.809881][ T5435] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 153.199964][ T5454] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 153.665285][ T5166] ocfs2: Unmounting device (7,6) on (node local) [ 153.765714][ T5464] device syzkaller0 entered promiscuous mode [ 155.679782][ T5138] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 157.026976][ T5485] autofs4:pid:5485:autofs_fill_super: called with bogus options [ 157.360636][ T5488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.596963][ T5510] loop7: detected capacity change from 0 to 4096 [ 160.619884][ T5510] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 161.258366][ T5516] process 'syz.8.344' launched './file0' with NULL argv: empty string added [ 161.550408][ T5518] netlink: 104 bytes leftover after parsing attributes in process `syz.7.345'. [ 162.555196][ T5522] netlink: 20 bytes leftover after parsing attributes in process `syz.7.347'. [ 162.843849][ T4358] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 163.207982][ T5522] team0 (unregistering): Port device team_slave_0 removed [ 163.803827][ T4358] usb 9-1: Using ep0 maxpacket: 32 [ 163.811126][ T4358] usb 9-1: config 2 has an invalid interface number: 45 but max is 0 [ 163.840721][ T4358] usb 9-1: config 2 has no interface number 0 [ 163.860756][ T4358] usb 9-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 163.915787][ T5522] team0 (unregistering): Port device team_slave_1 removed [ 163.933249][ T4358] usb 9-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.968177][ T4358] usb 9-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 163.998036][ T4358] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.018376][ T4358] usb 9-1: Product: syz [ 164.030178][ T4358] usb 9-1: Manufacturer: syz [ 164.035757][ T4358] usb 9-1: SerialNumber: syz [ 164.052229][ T4358] kobil_sct 9-1:2.45: KOBIL USB smart card terminal converter detected [ 164.156099][ T4358] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 164.478818][ T14] usb 9-1: USB disconnect, device number 3 [ 164.910419][ T5548] netlink: 132 bytes leftover after parsing attributes in process `syz.9.353'. [ 165.419975][ T14] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 165.543381][ T14] kobil_sct 9-1:2.45: device disconnected [ 165.646492][ T5556] using random self ethernet address [ 165.684578][ T5558] delete_channel: no stack [ 165.692133][ T5553] delete_channel: no stack [ 165.698417][ T5556] using random host ethernet address [ 165.738479][ T5559] Config c/1 of g_syz needs at least one function. [ 165.759501][ T5559] udc dummy_udc.0: failed to start g_syz: -22 [ 165.797426][ T5559] configfs-gadget.g_syz: probe of gadget.0 failed with error -22 [ 165.926213][ T5559] UDC core: g_syz: couldn't find an available UDC or it's busy [ 166.087763][ T5569] netlink: 132 bytes leftover after parsing attributes in process `syz.7.357'. [ 167.068987][ T5588] autofs4:pid:5588:autofs_fill_super: called with bogus options [ 167.357806][ T5595] loop9: detected capacity change from 0 to 256 [ 168.050438][ T5616] loop7: detected capacity change from 0 to 16 [ 168.092350][ T5616] erofs: (device loop7): mounted with root inode @ nid 36. [ 169.966596][ T5641] devpts: called with bogus options [ 170.240060][ T5644] user requested TSC rate below hardware speed [ 170.599203][ T5636] loop5: detected capacity change from 0 to 32768 [ 170.664645][ T5636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.381 (5636) [ 170.829093][ T5636] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.929337][ T5636] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 170.989079][ T5636] BTRFS info (device loop5): using free space tree [ 172.274531][ T5636] BTRFS info (device loop5): enabling ssd optimizations [ 172.434627][ T5693] device syzkaller0 entered promiscuous mode [ 173.708548][ T5138] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.673695][ C1] sched: RT throttling activated [ 176.682788][ T5746] loop5: detected capacity change from 0 to 16 [ 176.728246][ T5746] erofs: (device loop5): mounted with root inode @ nid 36. [ 177.309385][ T5735] loop9: detected capacity change from 0 to 32768 [ 177.335420][ T5735] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.405 (5735) [ 177.371924][ T5754] device syzkaller0 entered promiscuous mode [ 177.449961][ T5735] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.514953][ T5735] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 177.543883][ T5735] BTRFS info (device loop9): metadata ratio 0 [ 177.554460][ T5735] BTRFS info (device loop9): turning on sync discard [ 177.587115][ T5735] BTRFS info (device loop9): using free space tree [ 177.828102][ T5735] BTRFS info (device loop9): enabling ssd optimizations [ 177.906572][ T5775] loop7: detected capacity change from 0 to 2048 [ 178.002756][ T5775] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.070632][ T5233] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.085016][ T5778] loop5: detected capacity change from 0 to 4096 [ 179.020813][ T5805] loop5: detected capacity change from 0 to 512 [ 179.032068][ T5805] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 179.085958][ T5805] EXT4-fs (loop5): 1 truncate cleaned up [ 179.093077][ T5805] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 180.158918][ T5813] syz.5.420 (5813) used greatest stack depth: 19952 bytes left [ 180.254460][ T5812] tipc: Started in network mode [ 180.259660][ T5812] tipc: Node identity aa0b5f56e14e, cluster identity 4711 [ 180.276051][ T5812] tipc: Enabled bearer , priority 0 [ 180.286569][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 180.335943][ T5821] device syzkaller0 entered promiscuous mode [ 180.474578][ T5812] tipc: Resetting bearer [ 180.544032][ T5810] tipc: Resetting bearer [ 180.577802][ T5826] loop8: detected capacity change from 0 to 512 [ 180.590887][ T5826] EXT4-fs: quotafile must be on filesystem root [ 180.625121][ T5810] tipc: Disabling bearer [ 180.737205][ T5825] device syzkaller0 entered promiscuous mode [ 182.658560][ T5851] loop9: detected capacity change from 0 to 32768 [ 184.351820][ T5851] XFS (loop9): Mounting V5 Filesystem [ 184.421089][ T5876] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 185.498509][ T5877] loop8: detected capacity change from 0 to 131072 [ 185.510887][ T5852] loop5: detected capacity change from 0 to 4096 [ 185.526676][ T5851] XFS (loop9): AIL initialisation failed: error -12 [ 185.588193][ T5877] F2FS-fs (loop8): invalid crc value [ 185.625631][ T5851] XFS (loop9): log mount failed [ 185.661927][ T5877] F2FS-fs (loop8): Found nat_bits in checkpoint [ 185.718462][ T5877] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 185.740427][ T5877] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 185.977582][ T5214] I/O error, dev loop9, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.104027][ T5551] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 186.317003][ T5551] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.328332][ T5791] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 186.368254][ T5551] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 186.414993][ T5551] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.467638][ T5551] usb 8-1: config 0 descriptor?? [ 186.489523][ T5551] pwc: Askey VC010 type 2 USB webcam detected. [ 186.707280][ T5791] usb 7-1: unable to get BOS descriptor or descriptor too short [ 186.724523][ T5791] usb 7-1: not running at top speed; connect to a high speed hub [ 187.493180][ T5551] pwc: recv_control_msg error -32 req 02 val 2b00 [ 187.503087][ T5791] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.513580][ T5791] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.523188][ T5551] pwc: recv_control_msg error -32 req 02 val 2700 [ 187.534212][ T5551] pwc: recv_control_msg error -32 req 02 val 2c00 [ 187.542011][ T5551] pwc: recv_control_msg error -32 req 04 val 1000 [ 187.550454][ T5791] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 187.560045][ T5551] pwc: recv_control_msg error -32 req 04 val 1300 [ 187.573819][ T5791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.581901][ T5791] usb 7-1: Product: syz [ 187.587518][ T5551] pwc: recv_control_msg error -32 req 04 val 1400 [ 187.604671][ T5551] pwc: recv_control_msg error -32 req 02 val 2000 [ 187.612750][ T5791] usb 7-1: Manufacturer: syz [ 187.618967][ T5791] usb 7-1: SerialNumber: syz [ 187.625313][ T5551] pwc: recv_control_msg error -32 req 02 val 2100 [ 187.633416][ T5551] pwc: recv_control_msg error -32 req 04 val 1500 [ 187.652894][ T5551] pwc: recv_control_msg error -32 req 02 val 2500 [ 187.660733][ T5551] pwc: recv_control_msg error -32 req 02 val 2400 [ 187.678646][ T5551] pwc: recv_control_msg error -32 req 02 val 2600 [ 187.965415][ T5551] pwc: recv_control_msg error -71 req 02 val 2800 [ 187.979036][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.989183][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.996788][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.024665][ T5551] pwc: recv_control_msg error -71 req 04 val 1100 [ 188.041049][ T5551] pwc: recv_control_msg error -71 req 04 val 1200 [ 188.085220][ T5551] pwc: Registered as video103. [ 188.092076][ T5551] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input5 [ 188.255498][ T5791] usb 7-1: USB disconnect, device number 2 [ 188.267684][ T5551] usb 8-1: USB disconnect, device number 3 [ 188.559613][ T5897] loop5: detected capacity change from 0 to 32768 [ 188.974943][ T5897] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 189.159525][ T5897] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 189.295791][ T5897] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 189.341512][ T5897] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 189.341512][ T5897] inode = 4 2076 [ 189.341512][ T5897] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 471 [ 189.375895][ T5920] loop6: detected capacity change from 0 to 128 [ 189.385347][ T5897] gfs2: fsid=syz:syz.0: G: s:SH n:2/81c f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 189.405510][ T5897] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5897 [syz.5.444] gfs2_lookup_simple+0xab/0x100 [ 189.450072][ T5920] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 189.455944][ T5897] gfs2: fsid=syz:syz.0: I: n:4/2076 t:4 f:0x00 d:0x00000201 s:7696581398296 p:0 [ 189.477384][ T5287] udevd[5287]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.483869][ T5897] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 189.508832][ T5897] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 189.518061][ T5897] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 189.525979][ T5897] gfs2: fsid=syz:syz.0: File system withdrawn [ 189.532120][ T5897] CPU: 1 PID: 5897 Comm: syz.5.444 Not tainted syzkaller #0 [ 189.539452][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 189.549559][ T5897] Call Trace: [ 189.552877][ T5897] [ 189.555857][ T5897] dump_stack_lvl+0x188/0x24e [ 189.560693][ T5897] ? show_regs_print_info+0x12/0x12 [ 189.565949][ T5897] ? load_image+0x410/0x410 [ 189.570504][ T5897] ? kobject_uevent_env+0x364/0x890 [ 189.575769][ T5897] gfs2_withdraw+0xc69/0x1450 [ 189.580527][ T5897] ? gfs2_lm+0x240/0x240 [ 189.584828][ T5897] ? make_kgid+0x1c4/0x650 [ 189.589302][ T5897] ? from_kuid_munged+0x6e0/0x6e0 [ 189.594388][ T5897] ? gfs2_consist_inode_i+0xf1/0x110 [ 189.599738][ T5897] gfs2_inode_refresh+0xc80/0x1190 [ 189.604938][ T5897] ? gfs2_inode_metasync+0xf0/0xf0 [ 189.610108][ T5897] ? gfs2_glock_nq+0xcee/0x14d0 [ 189.615018][ T5897] gfs2_instantiate+0x15e/0x210 [ 189.619914][ T5897] gfs2_glock_wait+0x1d0/0x2a0 [ 189.624716][ T5897] gfs2_lookupi+0x40e/0x660 [ 189.629291][ T5897] ? gfs2_lookup_simple+0x100/0x100 [ 189.634532][ T5897] ? gfs2_lookup_simple+0xab/0x100 [ 189.639689][ T5897] ? crc32_le_base+0x7b0/0xd60 [ 189.644534][ T5897] gfs2_lookup_simple+0xab/0x100 [ 189.649533][ T5897] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 189.654693][ T5897] init_journal+0x1333/0x23a0 [ 189.659412][ T5897] ? init_inodes+0xdb/0x320 [ 189.663953][ T5897] ? _compound_head+0x120/0x120 [ 189.668848][ T5897] ? snprintf+0xe5/0x140 [ 189.673119][ T5897] ? init_inodes+0xdb/0x320 [ 189.677654][ T5897] ? vscnprintf+0x80/0x80 [ 189.682024][ T5897] ? gfs2_glock_nq_num+0x175/0x1b0 [ 189.687178][ T5897] init_inodes+0xdb/0x320 [ 189.691549][ T5897] gfs2_fill_super+0x17bf/0x2020 [ 189.696537][ T5897] ? gfs2_reconfigure+0xd80/0xd80 [ 189.701611][ T5897] ? init_locking+0xb8/0x200 [ 189.706242][ T5897] get_tree_bdev+0x3e6/0x610 [ 189.710864][ T5897] ? gfs2_reconfigure+0xd80/0xd80 [ 189.715922][ T5897] gfs2_get_tree+0x4d/0x1e0 [ 189.720466][ T5897] vfs_get_tree+0x88/0x270 [ 189.724913][ T5897] do_new_mount+0x247/0xa40 [ 189.729455][ T5897] __se_sys_mount+0x2e3/0x3d0 [ 189.734168][ T5897] ? __x64_sys_mount+0xc0/0xc0 [ 189.738959][ T5897] ? lockdep_hardirqs_on+0x94/0x140 [ 189.744188][ T5897] ? __x64_sys_mount+0x1c/0xc0 [ 189.748984][ T5897] do_syscall_64+0x4c/0xa0 [ 189.753438][ T5897] ? clear_bhb_loop+0x60/0xb0 [ 189.758145][ T5897] ? clear_bhb_loop+0x60/0xb0 [ 189.762854][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.768790][ T5897] RIP: 0033:0x7f1e4739f10a [ 189.773232][ T5897] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.792881][ T5897] RSP: 002b:00007f1e48219e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.801340][ T5897] RAX: ffffffffffffffda RBX: 00007f1e48219ee0 RCX: 00007f1e4739f10a [ 189.809344][ T5897] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f1e48219ea0 [ 189.817346][ T5897] RBP: 00002000000124c0 R08: 00007f1e48219ee0 R09: 0000000000000000 [ 189.825345][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 189.833340][ T5897] R13: 00007f1e48219ea0 R14: 000000000001265b R15: 0000200000000180 [ 189.841439][ T5897] [ 189.844539][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.871822][ T5920] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.904133][ T5897] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5 [ 190.114558][ T5932] loop7: detected capacity change from 0 to 164 [ 190.295680][ T5932] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 190.342301][ T5933] block device autoloading is deprecated and will be removed. [ 190.386307][ T5166] EXT4-fs (loop6): unmounting filesystem. [ 190.393768][ T5932] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 190.455154][ T5932] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 190.848410][ T5941] device syzkaller0 entered promiscuous mode [ 191.179342][ T5943] capability: warning: `syz.9.455' uses 32-bit capabilities (legacy support in use) [ 191.581787][ T5931] loop8: detected capacity change from 0 to 32768 [ 192.513868][ T27] audit: type=1800 audit(1785198637.958:3): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.451" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 193.128904][ T5982] loop9: detected capacity change from 0 to 256 [ 193.911332][ T5982] FAT-fs (loop9): "posix" option is obsolete, not supported now [ 194.164426][ T5981] loop5: detected capacity change from 0 to 4096 [ 194.179631][ T5981] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 194.669274][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.675697][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.252539][ T6009] tipc: Started in network mode [ 197.268062][ T6009] tipc: Node identity 1e2923d8bc64, cluster identity 4711 [ 197.287609][ T6009] tipc: Enabled bearer , priority 0 [ 197.406724][ T6012] device syzkaller0 entered promiscuous mode [ 197.670090][ T6012] tipc: Resetting bearer [ 198.244645][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.481'. [ 198.469371][ T6002] tipc: Resetting bearer [ 198.597580][ T6002] tipc: Disabling bearer [ 198.616411][ T5791] tipc: Node number set to 2722964440 [ 198.901279][ T6029] loop9: detected capacity change from 0 to 1764 [ 202.009845][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.492'. [ 202.032393][ T27] audit: type=1107 audit(1785198647.488:4): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 202.032393][ T27] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 202.032393][ T27] Вh0VZ2' [ 202.515177][ T5723] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 202.743822][ T5723] usb 6-1: Using ep0 maxpacket: 32 [ 202.773634][ T5723] usb 6-1: unable to get BOS descriptor or descriptor too short [ 202.913608][ T5723] usb 6-1: too many endpoints for config 1 interface 2 altsetting 1: 128, using maximum allowed: 30 [ 203.072824][ T5723] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 203.434886][ T6072] loop6: detected capacity change from 0 to 256 [ 204.127724][ T5723] usb 6-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 204.470687][ T5723] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 204.612852][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.709312][ T5723] usb 6-1: Product: syz [ 204.941028][ T5723] usb 6-1: Manufacturer: 庢៕ꍳ뽢㜩ૢå둦뤧찻閜㿆豙⃒Ì [ 205.851295][ T5723] usb 6-1: SerialNumber: syz [ 206.288589][ T5723] usb 6-1: can't set config #1, error -71 [ 206.563818][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 206.569896][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 206.576050][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 206.582066][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 207.508245][ T5723] usb 6-1: USB disconnect, device number 2 [ 207.780143][ T6097] device syzkaller0 entered promiscuous mode [ 207.801700][ T6097] tipc: Enabled bearer , priority 0 [ 207.815070][ T6096] tipc: Resetting bearer [ 208.230346][ T6096] tipc: Disabling bearer [ 209.437211][ T5723] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 209.526489][ T6117] device syzkaller0 entered promiscuous mode [ 209.663989][ T5723] usb 9-1: Using ep0 maxpacket: 32 [ 209.671025][ T5723] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 209.703823][ T5723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.747814][ T5723] usb 9-1: config 0 descriptor?? [ 210.322857][ T6127] loop6: detected capacity change from 0 to 256 [ 210.499556][ T5723] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 210.560921][ T6129] loop7: detected capacity change from 0 to 128 [ 212.784259][ T5723] gspca_vc032x: reg_w err -110 [ 212.789118][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.853849][ T5719] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 212.873958][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.879318][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.964942][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 212.983813][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.039617][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.063796][ T5719] usb 10-1: Using ep0 maxpacket: 8 [ 213.069956][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.079121][ T5719] usb 10-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 213.105982][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.155679][ T5719] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.170246][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.185754][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.197709][ T5719] usb 10-1: Product: syz [ 213.213088][ T5719] usb 10-1: Manufacturer: 픷쓴绂競⩛댚此䡙ㄨꎍ옗뉓ᡥ௤榭駖ꈣ赩㌦￳ῃǥ訝잌ᐸ垌込纫৔䌿ｰ屒뤰ꂗ䢢耪ꮦ䤭蜿琚嶈↮ᠭ雮⼌ⶲ콊풗᯴꩑蟙䓒◦㽄䢪䧨㐉红宕峓⑫쎎Ꙍ觤跔鉈ꓢ櫦ᒡ息𢢣 [ 213.238752][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.303483][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.313734][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.324774][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.338330][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.344152][ T5719] usb 10-1: SerialNumber: syz [ 213.354199][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.359579][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.394368][ T5723] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.411624][ T5723] gspca_vc032x: Unknown sensor... [ 213.427010][ T5723] vc032x: probe of 9-1:0.0 failed with error -22 [ 213.450146][ T5723] usb 9-1: USB disconnect, device number 4 [ 213.595577][ T5719] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 213.619609][ T5719] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 213.667996][ T6164] device syzkaller0 entered promiscuous mode [ 213.947520][ T5719] usb 10-1: USB disconnect, device number 2 [ 214.765719][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.493945][ T4318] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 215.670692][ T6201] libceph: resolve 'c' (ret=-3): failed [ 215.695670][ T4318] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.714386][ T4318] usb 9-1: config 0 has no interface number 0 [ 215.767213][ T4318] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 215.786669][ T4318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.804692][ T4318] usb 9-1: Product: syz [ 215.812255][ T4318] usb 9-1: Manufacturer: syz [ 215.873092][ T6205] I/O error, dev loop9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 215.904648][ T6205] gfs2: error 10 reading superblock [ 215.927532][ T4318] usb 9-1: SerialNumber: syz [ 215.934270][ T4318] usb 9-1: config 0 descriptor?? [ 215.958163][ T4318] usb 9-1: selecting invalid altsetting 1 [ 215.965735][ T4318] dvb_ttusb_budget: ttusb_init_controller: error [ 215.972307][ T4318] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 216.077370][ T6208] device syzkaller0 entered promiscuous mode [ 216.083834][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 216.273755][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 216.280847][ T22] usb 6-1: config 2 has an invalid interface number: 45 but max is 0 [ 216.299909][ T22] usb 6-1: config 2 has no interface number 0 [ 216.320159][ T22] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 123, changing to 10 [ 216.336601][ T4318] DVB: Unable to find symbol stv0299_attach() [ 216.347329][ T22] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 57771, setting to 1024 [ 216.390897][ T22] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 216.400627][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.409897][ T22] usb 6-1: Product: syz [ 216.417959][ T22] usb 6-1: Manufacturer: syz [ 216.422617][ T22] usb 6-1: SerialNumber: syz [ 216.432804][ T22] kobil_sct 6-1:2.45: KOBIL USB smart card terminal converter detected [ 216.469120][ T22] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 216.506124][ T6221] loop6: detected capacity change from 0 to 128 [ 216.534592][ T6221] FAT-fs (loop6): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 216.640047][ T4318] DVB: Unable to find symbol tda8083_attach() [ 216.647167][ T4318] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 216.829974][ T4320] usb 9-1: USB disconnect, device number 5 [ 217.169257][ T22] usb 6-1: USB disconnect, device number 3 [ 217.189447][ T22] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 217.214522][ T22] kobil_sct 6-1:2.45: device disconnected [ 218.054988][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.8.554'. [ 218.091218][ T6216] loop9: detected capacity change from 0 to 40427 [ 218.101628][ T6216] F2FS-fs (loop9): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 218.113313][ T6216] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 218.143591][ T6216] F2FS-fs (loop9): invalid crc value [ 218.171856][ T6216] F2FS-fs (loop9): Found nat_bits in checkpoint [ 219.015388][ T6216] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 219.066184][ T6216] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 219.193194][ T6242] loop8: detected capacity change from 0 to 4096 [ 219.225192][ T6242] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 219.380904][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.716094][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.985919][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.039814][ T6255] device syzkaller0 entered promiscuous mode [ 220.130602][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.714240][ T11] tipc: Left network mode [ 220.744851][ T4279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.755627][ T4279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.764417][ T4279] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.776714][ T4288] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.794279][ T4279] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.801758][ T4288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.561864][ T6270] lo speed is unknown, defaulting to 1000 [ 222.039967][ T6254] loop7: detected capacity change from 0 to 32768 [ 222.058462][ T6280] device dummy0 entered promiscuous mode [ 222.096209][ T6254] XFS (loop7): Mounting V5 Filesystem [ 222.149105][ T6254] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 222.153639][ T6279] device dummy0 left promiscuous mode [ 222.218281][ T6254] XFS (loop7): Starting recovery (logdev: internal) [ 222.358678][ T6254] XFS (loop7): Ending recovery (logdev: internal) [ 222.905174][ T4279] Bluetooth: hci6: command 0x0409 tx timeout [ 223.606412][ T6309] loop8: detected capacity change from 0 to 2048 [ 223.677291][ T5197] XFS (loop7): Unmounting Filesystem [ 223.687923][ T6309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.211240][ T4275] Bluetooth: hci6: command 0x041b tx timeout [ 225.524913][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.9.581'. [ 226.611095][ T6270] chnl_net:caif_netlink_parms(): no params data found [ 227.283814][ T4275] Bluetooth: hci6: command 0x040f tx timeout [ 227.760438][ T6353] device syzkaller0 entered promiscuous mode [ 228.262106][ T6371] loop9: detected capacity change from 0 to 4096 [ 228.428459][ T6378] loop8: detected capacity change from 0 to 128 [ 229.182952][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.197338][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.262493][ T6270] device bridge_slave_0 entered promiscuous mode [ 229.332651][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.363809][ T4275] Bluetooth: hci6: command 0x0419 tx timeout [ 229.399056][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.439541][ T6270] device bridge_slave_1 entered promiscuous mode [ 230.762284][ T6371] ntfs3: Unknown parameter 'V9;d€u [ 230.762284][ T6371] M78cLyP{y&mH޺K7dUE}'{N6$8NHN͵ ֤?`57}ܽvn?Ud:Z' [ 230.785871][ T6378] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 230.799436][ T6378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.909429][ T6270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.923178][ T6270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.963257][ T6270] team0: Port device team_slave_0 added [ 231.048685][ T6270] team0: Port device team_slave_1 added [ 231.137400][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.191084][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.463721][ T6270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.477393][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.485014][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.511399][ T6270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.200156][ T6409] autofs4:pid:6409:autofs_fill_super: called with bogus options [ 234.626384][ T6409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.635537][ T6409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.643067][ T6409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.868013][ T6270] device hsr_slave_0 entered promiscuous mode [ 234.922251][ T6270] device hsr_slave_1 entered promiscuous mode [ 234.972147][ T6270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.997337][ T6270] Cannot create hsr debugfs directory [ 235.247051][ T6423] loop9: detected capacity change from 0 to 4096 [ 236.513873][ T6423] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 237.781096][ T6270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.875006][ T11] device hsr_slave_0 left promiscuous mode [ 237.886316][ T11] device hsr_slave_1 left promiscuous mode [ 237.903555][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.922091][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.961938][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.983868][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.992101][ T11] device bridge_slave_1 left promiscuous mode [ 238.006382][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.060016][ T11] device bridge_slave_0 left promiscuous mode [ 238.084110][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.224480][ T11] device veth1_macvtap left promiscuous mode [ 238.231331][ T11] device veth0_macvtap left promiscuous mode [ 238.252238][ T11] device veth1_vlan left promiscuous mode [ 238.264292][ T11] device veth0_vlan left promiscuous mode [ 238.451523][ T6467] loop5: detected capacity change from 0 to 128 [ 238.523097][ T6467] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 238.624688][ T6467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.756282][ T11] infiniband syz1: set down [ 240.174121][ T5719] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 241.093817][ T5719] usb 8-1: Using ep0 maxpacket: 8 [ 241.114671][ T5719] usb 8-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 241.133770][ T5719] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.148608][ T5719] usb 8-1: Product: syz [ 241.153057][ T5719] usb 8-1: Manufacturer: 픷쓴绂競⩛댚此䡙ㄨꎍ옗뉓ᡥ௤榭駖ꈣ赩㌦￳ῃǥ訝잌ᐸ垌込纫৔䌿ｰ屒뤰ꂗ䢢耪ꮦ䤭蜿琚嶈↮ᠭ雮⼌ⶲ콊풗᯴꩑蟙䓒◦㽄䢪䧨㐉红宕峓⑫쎎Ꙍ觤跔鉈ꓢ櫦ᒡ息 [ 241.185038][ T5719] usb 8-1: SerialNumber: syz [ 241.413281][ T5719] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 241.439095][ T5719] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 241.484210][ T5719] usb 8-1: USB disconnect, device number 4 [ 241.766416][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.024840][ T11] team0 (unregistering): Port device team_slave_1 removed [ 242.144455][ T11] team0 (unregistering): Port device team_slave_0 removed [ 242.202130][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.269969][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.534102][ T4332] smc: removing ib device syz1 [ 242.750511][ T11] bond0 (unregistering): Released all slaves [ 242.920517][ T6270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.936407][ T6454] tipc: Started in network mode [ 242.941437][ T6454] tipc: Node identity 92f6a801c277, cluster identity 4711 [ 242.949365][ T6454] tipc: Enabled bearer , priority 0 [ 243.215049][ T6270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.195280][ T6455] device syzkaller0 entered promiscuous mode [ 245.202876][ T5723] tipc: Node number set to 1350674433 [ 246.290298][ T6270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.579412][ T6464] tipc: Resetting bearer [ 247.009783][ T6527] loop8: detected capacity change from 0 to 256 [ 247.276907][ T6452] tipc: Resetting bearer [ 247.515752][ T6452] tipc: Disabling bearer [ 247.693716][ T27] audit: type=1107 audit(1785198693.148:5): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 247.693716][ T27] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 247.693716][ T27] Вh0VZ2' [ 247.833819][ T4319] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 248.003973][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 248.319577][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.7.631'. [ 248.423887][ T4319] usb 6-1: Using ep0 maxpacket: 32 [ 248.468599][ T4319] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.502912][ T4319] usb 6-1: config 0 has no interface number 0 [ 248.581263][ T4319] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 248.657216][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.676315][ T4319] usb 6-1: Product: syz [ 248.686433][ T4319] usb 6-1: Manufacturer: syz [ 248.703798][ T4319] usb 6-1: SerialNumber: syz [ 248.768390][ T4319] usb 6-1: config 0 descriptor?? [ 248.807366][ T4319] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 248.839038][ T4319] usb 6-1: selecting invalid altsetting 1 [ 248.869991][ T4319] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 248.925424][ T4319] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 248.997193][ T4319] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 249.041540][ T4319] usb 6-1: media controller created [ 249.188276][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.216555][ T6270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.418806][ T4319] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 249.446261][ T4319] zl10353_read_register: readreg error (reg=127, ret==-71) [ 249.478726][ T4319] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 249.714466][ T6270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.825770][ T4319] usb 6-1: USB disconnect, device number 4 [ 249.949602][ T6270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.037643][ T6270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.331760][ T27] audit: type=1107 audit(1785198696.788:6): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 251.331760][ T27] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 251.331760][ T27] Вh0VZ2' [ 251.393134][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.8.641'. [ 252.093481][ T6587] loop9: detected capacity change from 0 to 2048 [ 252.107717][ T6587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.265607][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.443913][ T4275] Bluetooth: hci8: command 0x0406 tx timeout [ 253.450368][ T4275] Bluetooth: hci7: command 0x0406 tx timeout [ 253.499778][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.516528][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.529676][ T6599] loop5: detected capacity change from 0 to 256 [ 253.562455][ T6270] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.678124][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.710244][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.762739][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.770089][ T6601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.864306][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.873608][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.883221][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.890484][ T6601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.999587][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.078486][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.395561][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.495338][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.676037][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.900197][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.224033][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.768294][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.852307][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.861626][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.870336][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.091235][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.532744][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.763943][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.293378][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.057724][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.5.656'. [ 258.075420][ T27] audit: type=1107 audit(1785198703.538:7): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 258.075420][ T27] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 258.075420][ T27] Вh0VZ2' [ 258.566280][ T4275] Bluetooth: hci9: command 0x0406 tx timeout [ 259.260639][ T6652] loop5: detected capacity change from 0 to 256 [ 259.939593][ T6654] netlink: 'syz.8.662': attribute type 8 has an invalid length. [ 260.634138][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.648700][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.693980][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.782654][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.814338][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.899805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.960835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.971145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.981471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.993578][ T6270] device veth0_vlan entered promiscuous mode [ 261.316306][ T6270] device veth1_vlan entered promiscuous mode [ 261.722930][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.754275][ T28] INFO: task syz.2.234:5055 blocked for more than 144 seconds. [ 261.762235][ T28] Not tainted syzkaller #0 [ 261.768575][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.777500][ T28] task:syz.2.234 state:D stack:27920 pid:5055 ppid:4281 flags:0x00004004 [ 261.786856][ T28] Call Trace: [ 261.789898][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.790162][ T28] [ 261.801128][ T28] __schedule+0x107f/0x4030 [ 261.813704][ T27] audit: type=1107 audit(1785198707.268:8): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 261.813704][ T27] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 261.813704][ T27] Вh0VZ2' [ 261.858769][ T6270] device veth0_macvtap entered promiscuous mode [ 261.874067][ T28] ? __sched_text_start+0x8/0x8 [ 261.879024][ T28] ? __mutex_trylock_common+0x86/0x260 [ 261.901723][ T6270] device veth1_macvtap entered promiscuous mode [ 261.924363][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 261.963815][ T28] schedule+0xb9/0x180 [ 261.967996][ T28] schedule_preempt_disabled+0xf/0x20 [ 261.973442][ T28] __mutex_lock+0x548/0xae0 [ 261.993753][ T28] ? __mutex_lock+0x3ba/0xae0 [ 261.998557][ T28] ? nfsd_svc+0x61/0xab0 [ 262.028947][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.073885][ T28] ? mutex_lock_nested+0x10/0x10 [ 262.078971][ T28] ? net_generic+0x1e/0x240 [ 262.083541][ T28] ? net_generic+0x1e/0x240 [ 262.089699][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.126655][ T28] nfsd_svc+0x61/0xab0 [ 262.130857][ T28] ? qword_get+0x5a5/0x640 [ 262.135679][ T28] write_threads+0x2ea/0x350 [ 262.292866][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 262.355647][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.492449][ T28] ? __might_fault+0xc2/0x120 [ 262.526419][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.536906][ T28] ? _copy_from_user+0x10b/0x170 [ 262.568892][ T28] ? simple_transaction_get+0x119/0x140 [ 262.603441][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.617830][ T28] nfsctl_transaction_write+0x105/0x150 [ 262.641622][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 262.665382][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.689695][ T28] vfs_write+0x2dc/0x9a0 [ 262.709766][ T28] ? file_end_write+0x250/0x250 [ 262.739180][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.769194][ T28] ? __fget_files+0x28/0x460 [ 262.789526][ T28] ? __fget_files+0x3fc/0x460 [ 262.811372][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.822090][ T28] ? __fdget_pos+0x2ae/0x360 [ 262.839228][ T28] ? ksys_write+0x70/0x260 [ 262.853764][ T28] ksys_write+0x14d/0x260 [ 262.861829][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.883823][ T28] ? __ia32_sys_read+0x80/0x80 [ 262.906993][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.916976][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.927796][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.937921][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.948455][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.948856][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 262.961124][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.991821][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.016131][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.016146][ T28] do_syscall_64+0x4c/0xa0 [ 263.043731][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.054945][ T28] ? clear_bhb_loop+0x60/0xb0 [ 263.064592][ T28] ? clear_bhb_loop+0x60/0xb0 [ 263.069393][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.075452][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.085954][ T28] RIP: 0033:0x7fdfcb79de99 [ 263.090426][ T28] RSP: 002b:00007fdfcc58d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.098982][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.111049][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.124029][ T28] RAX: ffffffffffffffda RBX: 00007fdfcba26090 RCX: 00007fdfcb79de99 [ 263.132087][ T28] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 263.165169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.174142][ T28] RBP: 00007fdfcb833eaf R08: 0000000000000000 R09: 0000000000000000 [ 263.182192][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.184644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.216341][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.223306][ T28] R13: 00007fdfcba26128 R14: 00007fdfcba26090 R15: 00007ffdad8d1878 [ 263.233807][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.264972][ T28] [ 263.268127][ T28] INFO: task syz.0.246:5085 blocked for more than 146 seconds. [ 263.282976][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.303746][ T28] Not tainted syzkaller #0 [ 263.308772][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.317570][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.328420][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.339046][ T28] task:syz.0.246 state:D stack:27088 pid:5085 ppid:4271 flags:0x00004004 [ 263.354259][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.365464][ T28] Call Trace: [ 263.371839][ T28] [ 263.375203][ T28] __schedule+0x107f/0x4030 [ 263.379801][ T28] ? __sched_text_start+0x8/0x8 [ 263.385181][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.395944][ T28] ? __mutex_trylock_common+0x86/0x260 [ 263.401477][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 263.408078][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.418784][ T28] schedule+0xb9/0x180 [ 263.422929][ T28] schedule_preempt_disabled+0xf/0x20 [ 263.428800][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.439620][ T28] __mutex_lock+0x548/0xae0 [ 263.444492][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.454703][ T28] ? __mutex_lock+0x3ba/0xae0 [ 263.459557][ T28] ? write_versions+0x90/0xbb0 [ 263.465044][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.478127][ T28] ? mutex_lock_nested+0x10/0x10 [ 263.483259][ T28] write_versions+0x90/0xbb0 [ 263.489357][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 263.495310][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.505526][ T28] ? __virt_addr_valid+0x188/0x540 [ 263.510809][ T28] ? write_pool_threads+0x5e0/0x5e0 [ 263.516545][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.527383][ T28] ? __might_fault+0xc2/0x120 [ 263.532245][ T28] ? __might_fault+0xa6/0x120 [ 263.537466][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.547698][ T28] ? _copy_from_user+0x10b/0x170 [ 263.552871][ T28] ? simple_transaction_get+0x119/0x140 [ 263.558959][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.570062][ T28] nfsctl_transaction_write+0x105/0x150 [ 263.578827][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.589771][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 263.595945][ T28] vfs_write+0x2dc/0x9a0 [ 263.600462][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.611494][ T28] ? file_end_write+0x250/0x250 [ 263.616778][ T28] ? __fget_files+0x28/0x460 [ 263.621511][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.631770][ T28] ? __fget_files+0x3fc/0x460 [ 263.636889][ T28] ? __fdget_pos+0x2ae/0x360 [ 263.642769][ T28] ? ksys_write+0x70/0x260 [ 263.648354][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.655798][ T28] ksys_write+0x14d/0x260 [ 263.661170][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.661649][ T28] ? __ia32_sys_read+0x80/0x80 [ 263.675756][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.683985][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 263.684023][ T28] do_syscall_64+0x4c/0xa0 [ 263.697303][ T28] ? clear_bhb_loop+0x60/0xb0 [ 263.702158][ T28] ? clear_bhb_loop+0x60/0xb0 [ 263.708772][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.715707][ T28] RIP: 0033:0x7ff70739de99 [ 263.720274][ T28] RSP: 002b:00007ff708304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.729195][ T28] RAX: ffffffffffffffda RBX: 00007ff707625fa0 RCX: 00007ff70739de99 [ 263.740392][ T6270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.750415][ T28] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 263.758841][ T6270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.768238][ T28] RBP: 00007ff707433eaf R08: 0000000000000000 R09: 0000000000000000 [ 263.787071][ T6270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.800439][ T6270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.801376][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.841331][ T28] R13: 00007ff707626038 R14: 00007ff707625fa0 R15: 00007fff9a95a4b8 [ 263.850098][ T28] [ 263.853201][ T28] INFO: task syz.0.246:5088 blocked for more than 147 seconds. [ 263.868480][ T28] Not tainted syzkaller #0 [ 263.873557][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.883982][ T28] task:syz.0.246 state:D stack:27088 pid:5088 ppid:4271 flags:0x00004004 [ 263.893271][ T28] Call Trace: [ 263.896675][ T28] [ 263.899659][ T28] __schedule+0x107f/0x4030 [ 263.905789][ T28] ? __sched_text_start+0x8/0x8 [ 263.910932][ T28] ? __mutex_trylock_common+0x86/0x260 [ 263.924448][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 263.930732][ T28] schedule+0xb9/0x180 [ 263.953789][ T28] schedule_preempt_disabled+0xf/0x20 [ 263.959505][ T28] __mutex_lock+0x548/0xae0 [ 263.964297][ T28] ? __mutex_lock+0x3ba/0xae0 [ 263.969060][ T28] ? write_ports+0xb3/0xb80 [ 263.973626][ T28] ? mutex_lock_nested+0x10/0x10 [ 263.978825][ T28] write_ports+0xb3/0xb80 [ 263.985181][ T28] ? write_versions+0xbb0/0xbb0 [ 263.990144][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 263.995318][ T28] ? __virt_addr_valid+0x188/0x540 [ 264.000514][ T28] ? __might_fault+0xc2/0x120 [ 264.005767][ T28] ? __might_fault+0xa6/0x120 [ 264.010528][ T28] ? _copy_from_user+0x10b/0x170 [ 264.015680][ T28] ? simple_transaction_get+0x119/0x140 [ 264.021385][ T28] nfsctl_transaction_write+0x105/0x150 [ 264.029175][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 264.035181][ T28] vfs_write+0x2dc/0x9a0 [ 264.039517][ T28] ? file_end_write+0x250/0x250 [ 264.046644][ T28] ? __fget_files+0x28/0x460 [ 264.051327][ T28] ? __fget_files+0x3fc/0x460 [ 264.060815][ T28] ? __fdget_pos+0x2ae/0x360 [ 264.065686][ T28] ? ksys_write+0x70/0x260 [ 264.070289][ T28] ksys_write+0x14d/0x260 [ 264.074901][ T28] ? __ia32_sys_read+0x80/0x80 [ 264.079838][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 264.089232][ T28] do_syscall_64+0x4c/0xa0 [ 264.093997][ T28] ? clear_bhb_loop+0x60/0xb0 [ 264.098852][ T28] ? clear_bhb_loop+0x60/0xb0 [ 264.104020][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.110082][ T28] RIP: 0033:0x7ff70739de99 [ 264.114678][ T28] RSP: 002b:00007ff7082e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.123177][ T28] RAX: ffffffffffffffda RBX: 00007ff707626090 RCX: 00007ff70739de99 [ 264.132075][ T28] RDX: 0000000000000009 RSI: 0000200000000180 RDI: 0000000000000004 [ 264.140285][ T28] RBP: 00007ff707433eaf R08: 0000000000000000 R09: 0000000000000000 [ 264.149137][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.158116][ T28] R13: 00007ff707626128 R14: 00007ff707626090 R15: 00007fff9a95a4b8 [ 264.168535][ T28] [ 264.171657][ T28] INFO: task syz.0.246:5091 blocked for more than 147 seconds. [ 264.184549][ T28] Not tainted syzkaller #0 [ 264.202832][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.212999][ T28] task:syz.0.246 state:D stack:27088 pid:5091 ppid:4271 flags:0x00004004 [ 264.234375][ T28] Call Trace: [ 264.237903][ T28] [ 264.240965][ T28] __schedule+0x107f/0x4030 [ 264.246804][ T28] ? __sched_text_start+0x8/0x8 [ 264.251819][ T28] ? __mutex_trylock_common+0x86/0x260 [ 264.258228][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 264.265488][ T28] schedule+0xb9/0x180 [ 264.269718][ T28] schedule_preempt_disabled+0xf/0x20 [ 264.277394][ T28] __mutex_lock+0x548/0xae0 [ 264.282075][ T28] ? __mutex_lock+0x3ba/0xae0 [ 264.290211][ T28] ? nfsd_svc+0x61/0xab0 [ 264.295389][ T28] ? mutex_lock_nested+0x10/0x10 [ 264.304134][ T28] ? net_generic+0x1e/0x240 [ 264.313260][ T28] ? net_generic+0x1e/0x240 [ 264.326728][ T28] nfsd_svc+0x61/0xab0 [ 264.335438][ T28] ? qword_get+0x5a5/0x640 [ 264.344496][ T28] write_threads+0x2ea/0x350 [ 264.354971][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 264.365661][ T28] ? __might_fault+0xc2/0x120 [ 264.375055][ T28] ? _copy_from_user+0x10b/0x170 [ 264.385349][ T28] ? simple_transaction_get+0x119/0x140 [ 264.393190][ T28] nfsctl_transaction_write+0x105/0x150 [ 264.399068][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 264.405282][ T28] vfs_write+0x2dc/0x9a0 [ 264.409732][ T28] ? file_end_write+0x250/0x250 [ 264.414860][ T28] ? __fget_files+0x28/0x460 [ 264.419614][ T28] ? __fget_files+0x3fc/0x460 [ 264.424491][ T28] ? __fdget_pos+0x2ae/0x360 [ 264.429343][ T28] ? ksys_write+0x70/0x260 [ 264.434000][ T28] ksys_write+0x14d/0x260 [ 264.438481][ T28] ? __ia32_sys_read+0x80/0x80 [ 264.443388][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 264.448808][ T28] do_syscall_64+0x4c/0xa0 [ 264.453362][ T28] ? clear_bhb_loop+0x60/0xb0 [ 264.458242][ T28] ? clear_bhb_loop+0x60/0xb0 [ 264.463087][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.469212][ T28] RIP: 0033:0x7ff70739de99 [ 264.475416][ T28] RSP: 002b:00007ff7082c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.500113][ T28] RAX: ffffffffffffffda RBX: 00007ff707626180 RCX: 00007ff70739de99 [ 264.523727][ T28] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000005 [ 264.531778][ T28] RBP: 00007ff707433eaf R08: 0000000000000000 R09: 0000000000000000 [ 264.539860][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.547984][ T28] R13: 00007ff707626218 R14: 00007ff707626180 R15: 00007fff9a95a4b8 [ 264.556091][ T28] [ 264.559242][ T28] INFO: task syz.4.254:5107 blocked for more than 147 seconds. [ 264.576103][ T28] Not tainted syzkaller #0 [ 264.581143][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.605499][ T28] task:syz.4.254 state:D stack:27920 pid:5107 ppid:4278 flags:0x00004004 [ 264.626631][ T28] Call Trace: [ 264.629995][ T28] [ 264.632972][ T28] __schedule+0x107f/0x4030 [ 264.649811][ T28] ? __sched_text_start+0x8/0x8 [ 264.655163][ T28] ? __mutex_trylock_common+0x86/0x260 [ 264.660700][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 264.674381][ T28] schedule+0xb9/0x180 [ 264.678587][ T28] schedule_preempt_disabled+0xf/0x20 [ 264.685271][ T28] __mutex_lock+0x548/0xae0 [ 264.689864][ T28] ? __mutex_lock+0x3ba/0xae0 [ 264.695790][ T28] ? write_ports+0xb3/0xb80 [ 264.702762][ T28] ? mutex_lock_nested+0x10/0x10 [ 264.710441][ T28] write_ports+0xb3/0xb80 [ 264.715284][ T28] ? write_versions+0xbb0/0xbb0 [ 264.720210][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 264.733008][ T28] ? __virt_addr_valid+0x188/0x540 [ 264.741211][ T28] ? __might_fault+0xc2/0x120 [ 264.758969][ T28] ? __might_fault+0xa6/0x120 [ 264.770612][ T28] ? _copy_from_user+0x10b/0x170 [ 264.780268][ T28] ? simple_transaction_get+0x119/0x140 [ 264.792645][ T28] nfsctl_transaction_write+0x105/0x150 [ 264.802010][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 264.809499][ T28] vfs_write+0x2dc/0x9a0 [ 264.816455][ T28] ? file_end_write+0x250/0x250 [ 264.821409][ T28] ? __fget_files+0x28/0x460 [ 264.826603][ T28] ? __fget_files+0x3fc/0x460 [ 264.831387][ T28] ? __fdget_pos+0x2ae/0x360 [ 264.837215][ T28] ? ksys_write+0x70/0x260 [ 264.841719][ T28] ksys_write+0x14d/0x260 [ 264.856108][ T28] ? __ia32_sys_read+0x80/0x80 [ 264.860997][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 264.873707][ T28] do_syscall_64+0x4c/0xa0 [ 264.878238][ T28] ? clear_bhb_loop+0x60/0xb0 [ 264.883018][ T28] ? clear_bhb_loop+0x60/0xb0 [ 264.898895][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.907992][ T28] RIP: 0033:0x7f5fc059de99 [ 264.912484][ T28] RSP: 002b:00007f5fc148a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.925129][ T28] RAX: ffffffffffffffda RBX: 00007f5fc0825fa0 RCX: 00007f5fc059de99 [ 264.933210][ T28] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000004 [ 264.941835][ T28] RBP: 00007f5fc0633eaf R08: 0000000000000000 R09: 0000000000000000 [ 264.950935][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.960003][ T28] R13: 00007f5fc0826038 R14: 00007f5fc0825fa0 R15: 00007ffeee1b7bd8 [ 264.983826][ T28] [ 265.014259][ T6270] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 265.015130][ T28] INFO: task syz.4.254:5108 blocked for more than 148 seconds. [ 265.042079][ T28] Not tainted syzkaller #0 [ 265.052301][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.076293][ T28] task:syz.4.254 state:D stack:27760 pid:5108 ppid:4278 flags:0x00004004 [ 265.103605][ T28] Call Trace: [ 265.108202][ T28] [ 265.111203][ T28] __schedule+0x107f/0x4030 [ 265.133801][ T28] ? __sched_text_start+0x8/0x8 [ 265.138773][ T28] ? __mutex_trylock_common+0x86/0x260 [ 265.154820][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 265.161092][ T28] schedule+0xb9/0x180 [ 265.180293][ T28] schedule_preempt_disabled+0xf/0x20 [ 265.185995][ T28] __mutex_lock+0x548/0xae0 [ 265.190664][ T28] ? __mutex_lock+0x3ba/0xae0 [ 265.210248][ T28] ? nfsd_svc+0x61/0xab0 [ 265.214744][ T28] ? mutex_lock_nested+0x10/0x10 [ 265.219763][ T28] ? net_generic+0x1e/0x240 [ 265.233861][ T28] ? net_generic+0x1e/0x240 [ 265.238476][ T28] nfsd_svc+0x61/0xab0 [ 265.242625][ T28] ? qword_get+0x5a5/0x640 [ 265.247371][ T28] write_threads+0x2ea/0x350 [ 265.252032][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 265.265484][ T28] ? __might_fault+0xc2/0x120 [ 265.270252][ T28] ? _copy_from_user+0x10b/0x170 [ 265.285722][ T28] ? simple_transaction_get+0x119/0x140 [ 265.291370][ T28] nfsctl_transaction_write+0x105/0x150 [ 265.297275][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 265.302990][ T28] vfs_write+0x2dc/0x9a0 [ 265.307515][ T28] ? file_end_write+0x250/0x250 [ 265.315530][ T28] ? __fget_files+0x28/0x460 [ 265.320238][ T28] ? __fget_files+0x3fc/0x460 [ 265.325099][ T28] ? __fdget_pos+0x2ae/0x360 [ 265.329753][ T28] ? ksys_write+0x70/0x260 [ 265.334316][ T28] ksys_write+0x14d/0x260 [ 265.338721][ T28] ? __ia32_sys_read+0x80/0x80 [ 265.343557][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 265.350365][ T28] do_syscall_64+0x4c/0xa0 [ 265.354964][ T28] ? clear_bhb_loop+0x60/0xb0 [ 265.359707][ T28] ? clear_bhb_loop+0x60/0xb0 [ 265.365261][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.371231][ T28] RIP: 0033:0x7f5fc059de99 [ 265.377547][ T28] RSP: 002b:00007f5fc1469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.386263][ T28] RAX: ffffffffffffffda RBX: 00007f5fc0826090 RCX: 00007f5fc059de99 [ 265.395490][ T28] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000005 [ 265.403617][ T28] RBP: 00007f5fc0633eaf R08: 0000000000000000 R09: 0000000000000000 [ 265.412870][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.426850][ T28] R13: 00007f5fc0826128 R14: 00007f5fc0826090 R15: 00007ffeee1b7bd8 [ 265.435325][ T28] [ 265.445531][ T6270] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 265.447562][ T6601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.464869][ T28] INFO: task syz.1.256:5114 blocked for more than 148 seconds. [ 265.472592][ T28] Not tainted syzkaller #0 [ 265.479466][ T6601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.494809][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.513525][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.521833][ T28] task:syz.1.256 state:D stack:27920 pid:5114 ppid:4270 flags:0x00004004 [ 265.521885][ T28] Call Trace: [ 265.521894][ T28] [ 265.521908][ T28] __schedule+0x107f/0x4030 [ 265.521973][ T28] ? __sched_text_start+0x8/0x8 [ 265.561780][ T28] ? __mutex_trylock_common+0x86/0x260 [ 265.567766][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 265.574473][ T28] schedule+0xb9/0x180 [ 265.578620][ T28] schedule_preempt_disabled+0xf/0x20 [ 265.585267][ T28] __mutex_lock+0x548/0xae0 [ 265.589868][ T28] ? __mutex_lock+0x3ba/0xae0 [ 265.596509][ T28] ? write_ports+0xb3/0xb80 [ 265.601097][ T28] ? mutex_lock_nested+0x10/0x10 [ 265.610113][ T28] write_ports+0xb3/0xb80 [ 265.616218][ T28] ? write_versions+0xbb0/0xbb0 [ 265.622208][ T6601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.645104][ T6601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.652740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.660602][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 265.674313][ T28] ? __virt_addr_valid+0x188/0x540 [ 265.679667][ T28] ? __might_fault+0xc2/0x120 [ 265.693786][ T28] ? __might_fault+0xa6/0x120 [ 265.700216][ T28] ? _copy_from_user+0x10b/0x170 [ 265.714611][ T28] ? simple_transaction_get+0x119/0x140 [ 265.720239][ T28] nfsctl_transaction_write+0x105/0x150 [ 265.743800][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 265.749546][ T28] vfs_write+0x2dc/0x9a0 [ 265.764030][ T28] ? file_end_write+0x250/0x250 [ 265.768984][ T28] ? __fget_files+0x28/0x460 [ 265.783984][ T28] ? __fget_files+0x3fc/0x460 [ 265.788780][ T28] ? __fdget_pos+0x2ae/0x360 [ 265.793479][ T28] ? ksys_write+0x70/0x260 [ 265.803041][ T28] ksys_write+0x14d/0x260 [ 265.807644][ T28] ? __ia32_sys_read+0x80/0x80 [ 265.812494][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 265.817872][ T28] do_syscall_64+0x4c/0xa0 [ 265.822353][ T28] ? clear_bhb_loop+0x60/0xb0 [ 265.843829][ T28] ? clear_bhb_loop+0x60/0xb0 [ 265.848628][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.854672][ T28] RIP: 0033:0x7f823919de99 [ 265.859139][ T28] RSP: 002b:00007f823a010028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.883718][ T28] RAX: ffffffffffffffda RBX: 00007f8239425fa0 RCX: 00007f823919de99 [ 265.891796][ T28] RDX: 0000000000000009 RSI: 0000200000000240 RDI: 0000000000000003 [ 265.913741][ T28] RBP: 00007f8239233eaf R08: 0000000000000000 R09: 0000000000000000 [ 265.921810][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.953931][ T28] R13: 00007f8239426038 R14: 00007f8239425fa0 R15: 00007ffd1dbbbf78 [ 265.962024][ T28] [ 265.965326][ T28] INFO: task syz.1.256:5115 blocked for more than 149 seconds. [ 265.972924][ T28] Not tainted syzkaller #0 [ 265.978127][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.986937][ T28] task:syz.1.256 state:D stack:27920 pid:5115 ppid:4270 flags:0x00004004 [ 265.996326][ T28] Call Trace: [ 265.999687][ T28] [ 266.002663][ T28] __schedule+0x107f/0x4030 [ 266.013340][ T28] ? __sched_text_start+0x8/0x8 [ 266.019125][ T28] ? __mutex_trylock_common+0x86/0x260 [ 266.024712][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 266.033398][ T28] schedule+0xb9/0x180 [ 266.042800][ T28] schedule_preempt_disabled+0xf/0x20 [ 266.050718][ T28] __mutex_lock+0x548/0xae0 [ 266.075073][ T28] ? __mutex_lock+0x3ba/0xae0 [ 266.079874][ T28] ? nfsd_svc+0x61/0xab0 [ 266.099601][ T28] ? mutex_lock_nested+0x10/0x10 [ 266.104910][ T28] ? net_generic+0x1e/0x240 [ 266.109481][ T28] ? net_generic+0x1e/0x240 [ 266.127316][ T28] nfsd_svc+0x61/0xab0 [ 266.141632][ T28] ? qword_get+0x5a5/0x640 [ 266.150243][ T28] write_threads+0x2ea/0x350 [ 266.162976][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 266.174694][ T28] ? __might_fault+0xc2/0x120 [ 266.179493][ T28] ? _copy_from_user+0x10b/0x170 [ 266.200569][ T28] ? simple_transaction_get+0x119/0x140 [ 266.206367][ T28] nfsctl_transaction_write+0x105/0x150 [ 266.212075][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 266.229506][ T28] vfs_write+0x2dc/0x9a0 [ 266.241797][ T28] ? file_end_write+0x250/0x250 [ 266.247760][ T28] ? __fget_files+0x28/0x460 [ 266.252441][ T28] ? __fget_files+0x3fc/0x460 [ 266.258087][ T28] ? __fdget_pos+0x2ae/0x360 [ 266.262761][ T28] ? ksys_write+0x70/0x260 [ 266.267465][ T28] ksys_write+0x14d/0x260 [ 266.271898][ T28] ? __ia32_sys_read+0x80/0x80 [ 266.277562][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 266.282826][ T28] do_syscall_64+0x4c/0xa0 [ 266.288083][ T28] ? clear_bhb_loop+0x60/0xb0 [ 266.292838][ T28] ? clear_bhb_loop+0x60/0xb0 [ 266.309254][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.320808][ T28] RIP: 0033:0x7f823919de99 [ 266.330840][ T28] RSP: 002b:00007f8239fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.345532][ T28] RAX: ffffffffffffffda RBX: 00007f8239426090 RCX: 00007f823919de99 [ 266.353601][ T28] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 266.362589][ T28] RBP: 00007f8239233eaf R08: 0000000000000000 R09: 0000000000000000 [ 266.371531][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.379836][ T28] R13: 00007f8239426128 R14: 00007f8239426090 R15: 00007ffd1dbbbf78 [ 266.388723][ T28] [ 266.391921][ T28] [ 266.391921][ T28] Showing all locks held in the system: [ 266.412795][ T28] 1 lock held by rcu_tasks_kthre/12: [ 266.418383][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 266.484446][ T28] 1 lock held by rcu_tasks_trace/13: [ 266.489940][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 266.512875][ T28] 1 lock held by khungtaskd/28: [ 266.520893][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 266.543952][ T28] 2 locks held by getty/4026: [ 266.548721][ T28] #0: ffff88802fd87098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 266.571875][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 266.596286][ T28] 2 locks held by syz-executor/4280: [ 266.601659][ T28] #0: ffff8880755640e0 (&type->s_umount_key#51){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 266.624526][ T28] #1: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4f/0x1a0 [ 266.646851][ T28] 3 locks held by syz.2.234/5053: [ 266.651965][ T28] #0: ffff88802e1f60e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 266.664798][ T28] #1: ffff8880521f8460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 266.674048][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 266.682954][ T28] 3 locks held by syz.2.234/5055: [ 266.688102][ T28] #0: ffff88801e3db768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 266.709320][ T28] #1: ffff8880521f8460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 266.730894][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 266.753613][ T28] 3 locks held by syz.0.246/5085: [ 266.758877][ T28] #0: ffff888078e540e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 266.779627][ T28] #1: ffff88807a410460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 266.793240][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x90/0xbb0 [ 266.803387][ T28] 3 locks held by syz.0.246/5088: [ 266.817249][ T28] #0: ffff88807cfe3268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 266.835137][ T28] #1: ffff88807a410460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 266.844494][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 266.856053][ T28] 3 locks held by syz.0.246/5091: [ 266.861232][ T28] #0: ffff88807d8a7768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 266.870685][ T28] #1: ffff88807a410460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 266.879944][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 266.889698][ T28] 3 locks held by syz.4.254/5107: [ 266.894944][ T28] #0: ffff88807e649268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 266.906006][ T28] #1: ffff888051ade460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 266.915985][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 266.926624][ T28] 3 locks held by syz.4.254/5108: [ 266.931787][ T28] #0: ffff88807b86f768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 266.951331][ T28] #1: ffff888051ade460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 266.969974][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 266.989527][ T28] 3 locks held by syz.1.256/5114: [ 266.999686][ T28] #0: ffff88807e54e0e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 267.016098][ T28] #1: ffff88807c2d6460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 267.035558][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 267.055988][ T28] 3 locks held by syz.1.256/5115: [ 267.061215][ T28] #0: ffff88807e54f4e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 267.070786][ T28] #1: ffff88807c2d6460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 267.080041][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 267.088831][ T28] 1 lock held by cmp/6716: [ 267.093429][ T28] [ 267.095951][ T28] ============================================= [ 267.095951][ T28] [ 267.104573][ T28] NMI backtrace for cpu 1 [ 267.108941][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 267.116378][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 267.126493][ T28] Call Trace: [ 267.129815][ T28] [ 267.132776][ T28] dump_stack_lvl+0x188/0x24e [ 267.137515][ T28] ? irq_work_queue+0xb8/0x140 [ 267.142342][ T28] ? show_regs_print_info+0x12/0x12 [ 267.147601][ T28] ? load_image+0x410/0x410 [ 267.152153][ T28] ? vprintk_emit+0x59f/0x6a0 [ 267.156983][ T28] ? printk_sprint+0x460/0x460 [ 267.161822][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 267.166832][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 267.173042][ T28] ? _printk+0xda/0x130 [ 267.177246][ T28] ? load_image+0x410/0x410 [ 267.181845][ T28] ? load_image+0x410/0x410 [ 267.186398][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 267.192516][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 267.198636][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 267.204696][ T28] watchdog+0xf0e/0xf50 [ 267.208906][ T28] ? watchdog+0x1ed/0xf50 [ 267.213297][ T28] kthread+0x29d/0x330 [ 267.217466][ T28] ? hungtask_pm_notify+0x40/0x40 [ 267.222528][ T28] ? kthread_blkcg+0xd0/0xd0 [ 267.227148][ T28] ret_from_fork+0x1f/0x30 [ 267.231611][ T28] [ 267.237647][ T28] Sending NMI from CPU 1 to CPUs 0: [ 267.243398][ C0] NMI backtrace for cpu 0 [ 267.243408][ C0] CPU: 0 PID: 4410 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 267.243425][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 267.243435][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 267.243463][ C0] RIP: 0010:unwind_next_frame+0xa7/0x1fd0 [ 267.243486][ C0] Code: 40 4c 89 6c 24 68 4c 89 64 24 48 4c 89 7c 24 10 bf 01 00 00 00 e8 09 c1 1f 00 4c 8d 7b 50 4c 89 f8 48 c1 e8 03 48 89 44 24 30 <42> 80 3c 30 00 74 08 4c 89 ff e8 5a 65 9a 00 4d 8b 37 4d 85 f6 74 [ 267.243501][ C0] RSP: 0018:ffffc90004cb7620 EFLAGS: 00000a02 [ 267.243514][ C0] RAX: 1ffff92000996ee3 RBX: ffffc90004cb76c8 RCX: ffffffff96c16103 [ 267.243527][ C0] RDX: dffffc0000000000 RSI: ffffffff815577ab RDI: 0000000000000001 [ 267.243539][ C0] RBP: 1ffff92000996ee0 R08: ffffc90004cb7790 R09: 0000000000000006 [ 267.243550][ C0] R10: dffffc0000000000 R11: fffff52000996ee5 R12: ffffffff815577ab [ 267.243562][ C0] R13: ffffc90004cb7c40 R14: dffffc0000000000 R15: ffffc90004cb7718 [ 267.243575][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 267.243589][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.243601][ C0] CR2: 00007f8f92e9d000 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 267.243616][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 267.243625][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 267.243640][ C0] Call Trace: [ 267.243644][ C0] [ 267.243653][ C0] ? process_one_work+0x8ab/0x1160 [ 267.243675][ C0] ? process_one_work+0x8ab/0x1160 [ 267.243698][ C0] ? stack_trace_save+0xf0/0xf0 [ 267.243720][ C0] arch_stack_walk+0x10c/0x140 [ 267.243743][ C0] ? process_one_work+0x8ab/0x1160 [ 267.243764][ C0] stack_trace_save+0xa6/0xf0 [ 267.243784][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 267.243807][ C0] ? verify_lock_unused+0x140/0x140 [ 267.243829][ C0] ? stack_trace_save+0xa6/0xf0 [ 267.243850][ C0] ? memset+0x1e/0x40 [ 267.243866][ C0] kasan_set_track+0x4b/0x70 [ 267.243888][ C0] ? kasan_set_track+0x4b/0x70 [ 267.243908][ C0] ? __kasan_slab_alloc+0x6b/0x80 [ 267.243931][ C0] ? slab_post_alloc_hook+0x4b/0x490 [ 267.243949][ C0] ? kmem_cache_alloc_node+0x1ad/0x310 [ 267.243966][ C0] ? __alloc_skb+0xf9/0x7d0 [ 267.243988][ C0] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 267.244010][ C0] ? process_one_work+0x8ab/0x1160 [ 267.244051][ C0] __kasan_slab_alloc+0x6b/0x80 [ 267.244075][ C0] slab_post_alloc_hook+0x4b/0x490 [ 267.244097][ C0] kmem_cache_alloc_node+0x1ad/0x310 [ 267.244115][ C0] ? __alloc_skb+0xf9/0x7d0 [ 267.244139][ C0] __alloc_skb+0xf9/0x7d0 [ 267.244164][ C0] nsim_dev_trap_report_work+0x24f/0xa80 [ 267.244192][ C0] ? process_one_work+0x7b4/0x1160 [ 267.244220][ C0] process_one_work+0x8ab/0x1160 [ 267.244246][ C0] ? worker_detach_from_pool+0x240/0x240 [ 267.244267][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 267.244285][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 267.244306][ C0] ? wq_worker_running+0x97/0x190 [ 267.244333][ C0] worker_thread+0xaf5/0x12a0 [ 267.244365][ C0] kthread+0x29d/0x330 [ 267.244378][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 267.244397][ C0] ? kthread_blkcg+0xd0/0xd0 [ 267.244412][ C0] ret_from_fork+0x1f/0x30 [ 267.244441][ C0] [ 267.530242][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 267.530289][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 267.530352][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 267.530386][ T28] Call Trace: [ 267.530406][ T28] [ 267.530429][ T28] dump_stack_lvl+0x188/0x24e [ 267.530577][ T28] ? memcpy+0x3c/0x60 [ 267.530633][ T28] ? show_regs_print_info+0x12/0x12 [ 267.530723][ T28] ? load_image+0x410/0x410 [ 267.530821][ T28] panic+0x2d3/0x710 [ 267.530884][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 267.530995][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 267.531049][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 267.531152][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 267.531259][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 267.531339][ T28] watchdog+0xf4d/0xf50 [ 267.531430][ T28] ? watchdog+0x1ed/0xf50 [ 267.531506][ T28] kthread+0x29d/0x330 [ 267.531550][ T28] ? hungtask_pm_notify+0x40/0x40 [ 267.531623][ T28] ? kthread_blkcg+0xd0/0xd0 [ 267.671188][ T28] ret_from_fork+0x1f/0x30 [ 267.675653][ T28] [ 267.679287][ T28] Kernel Offset: disabled [ 267.683633][ T28] Rebooting in 86400 seconds..