last executing test programs: 26m39.393406736s ago: executing program 32 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000415000/0x3000)=nil, 0x3000, 0x1000009, 0x4010, 0xffffffffffffffff, 0x95832000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002340)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64=r2, @ANYBLOB="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"], 0x198) r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x1, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747}) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r8, &(0x7f0000004900)={0x2020}, 0x2020) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m5.265912793s ago: executing program 3 (id=1737): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x2710}) 17m5.070933379s ago: executing program 3 (id=1740): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 17m1.427474451s ago: executing program 3 (id=1744): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e1d}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44600}, 0x30004040) 16m50.184656585s ago: executing program 33 (id=1736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40380, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 16m47.729115857s ago: executing program 34 (id=1742): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 16m47.635702776s ago: executing program 35 (id=1741): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 16m46.221759573s ago: executing program 36 (id=1744): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e1d}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44600}, 0x30004040) 16m43.240003033s ago: executing program 37 (id=1748): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500"], 0x50}}, 0x2) 12m28.156007782s ago: executing program 38 (id=2270): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) unshare(0x8040480) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r3, 0x0, 0x20, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200"], 0x0}, 0x94) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 11m30.515355216s ago: executing program 39 (id=2383): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20016100) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18024cf7b0b1fcc0feae000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00d3ff008c71ef28ff4b"], 0xffdd) 11m24.600036761s ago: executing program 40 (id=2390): syz_emit_ethernet(0x1f7, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0) syz_emit_ethernet(0x48, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000002fc0)=""/4109, 0x100d) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x9, 0x6, 0x8, 0x8}, {0x400, 0x76, 0x4, 0x10}, {0x7d, 0x0, 0x5, 0x800}, {0x7, 0x9, 0x6, 0x4}, {0xa, 0x9, 0x6, 0xff}, {0x3, 0x6, 0x6, 0x200}]}) open$dir(0x0, 0x101000, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000100000003f00000008000300", @ANYRES32=r7, @ANYBLOB="1c005e"], 0x38}}, 0x0) 11m24.464299379s ago: executing program 41 (id=2391): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x1, 0x3, {0xa, 0x4e20, 0xa001, @empty, 0xfffffff9}}}, 0xd2, 0x0}, 0x804) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) 5m49.010196631s ago: executing program 42 (id=2735): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x60, 0x1403, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080000}, 0x10) 2m31.817276872s ago: executing program 5 (id=3077): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='-4\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) 2m20.411288052s ago: executing program 3 (id=2394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 2m20.203813541s ago: executing program 3 (id=3091): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 2m20.02149679s ago: executing program 3 (id=3093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='+3 -4\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) 2m16.277871s ago: executing program 43 (id=3077): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='-4\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) 2m15.248173814s ago: executing program 4 (id=3098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) userfaultfd(0x80801) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x108806, 0x3, 0x1ffffffd, 0x3ff}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe11) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r3, 0x18, 0x0, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltclass={0x34, 0x29, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {0x8, 0xd}, {0x2, 0x8}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=@newtfilter={0x54, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xf, 0xffff}, {0x5, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x6, 0x1, 0x1, 0x0, 0x2, 0x7, 0x5, [{0x2, 0x1, 0x8, 0x1}]}}]}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xe, 0x8000000000000001}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000180)="e568a66ff7d158db6f", 0x9}], 0x2}, 0x0) 2m13.083971647s ago: executing program 4 (id=3099): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/mhi/drivers\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/mhi_ep/drivers\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/mhi/drivers/ath11k_pci\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/mhi/drivers/mhi_ath11k\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/mhi/drivers/ath11k_mhi_driver\x00', 0x0, 0x0) 2m12.967707165s ago: executing program 4 (id=3100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/thunderbolt/devices/domain0\x00', 0x0, 0x0) 2m12.922425724s ago: executing program 4 (id=3101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver\x00', 0x0, 0x0) 2m12.819851321s ago: executing program 4 (id=3102): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 2m12.634853865s ago: executing program 4 (id=3103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='+4\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) 2m4.835761806s ago: executing program 44 (id=3093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='+3 -4\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) 1m57.540714395s ago: executing program 45 (id=3103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='+4\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) 1m41.877749717s ago: executing program 2 (id=3156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0x193) msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8, 0x800) msgsnd(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r1, &(0x7f0000000380)={0x0, ""/214}, 0xde, 0x2, 0x2000) 1m40.844020313s ago: executing program 2 (id=3158): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000500)=[{0x3d, 0x1, 0x2, 0x2972}, {0x6, 0x73, 0x9, 0xfffffff6}, {0x6, 0x2, 0x4, 0xd3a8}]}, 0x10) 1m40.715442932s ago: executing program 2 (id=3159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/smartpqi\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/aic94xx\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/hisi_sas_v3_hw\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/megaraid_sas\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/esas2r\x00', 0x0, 0x0) 1m40.4271034s ago: executing program 2 (id=3161): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x2300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x50) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x5000003, 0x82011, r4, 0x3000) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703", 0x334, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) 1m38.201912588s ago: executing program 2 (id=3162): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x7, 0x0, &(0x7f0000000000)="259a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m38.11441915s ago: executing program 2 (id=3163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipe\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipe\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) nanosleep(&(0x7f0000000280)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./pipe/nfsd/cld\x00', 0x2, 0x0) 1m23.820301979s ago: executing program 8 (id=3187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0x400, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0x7, 0x1}, {0xffff, 0xffff}, {0xfff6, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x853, 0x1fb, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x19, 0x13, 0xa, 0x1, 0x1, {0x4, 0xd4ed, 0xfffffff8, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c040) r0 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r2, &(0x7f0000005400)=[{&(0x7f0000005440)}], 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x2802, 0x30, 0x18}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000400098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) 1m23.625288402s ago: executing program 8 (id=3188): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='foo\n', 0x4) close(r0) 1m23.311010781s ago: executing program 8 (id=3189): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./c237\x00', 0x81b6, 0xaed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./c237\x00', 0x2, 0x0) ioctl(r0, 0xc138fd00, &(0x7f0000000100)="040000003000000000000000380100"/48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./c238\x00', 0x81b6, 0xaee) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./c238\x00', 0x2, 0x0) ioctl(r1, 0xc138fd00, &(0x7f0000000100)="040000003000000000000000380100"/48) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./c239\x00', 0x81b6, 0xaef) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./c239\x00', 0x2, 0x0) ioctl(r2, 0xc138fd00, &(0x7f0000000100)="040000003000000000000000380100"/48) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./c240\x00', 0x81b6, 0xaf0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./c240\x00', 0x2, 0x0) ioctl(r3, 0xc138fd00, &(0x7f0000000100)="040000003000000000000000380100"/48) 1m22.943948894s ago: executing program 46 (id=3163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipe\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipe\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) nanosleep(&(0x7f0000000280)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./pipe/nfsd/cld\x00', 0x2, 0x0) 1m22.900500246s ago: executing program 8 (id=3193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 1m21.880477219s ago: executing program 8 (id=3196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unshare(0x2c020400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) 1m18.102122843s ago: executing program 8 (id=3199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='localhost 1 \\x00000000 2147483647 /\n', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='localhost / 2147483647 74753 0 0 0\n', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='1\n', 0x2) mount$nfs4(&(0x7f00000003c0)='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,vers=4.0,clientaddr=127.0.0.1\x00']) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/etc/passwd\x00', 0x0, 0x0) flock(r5, 0x2) fcntl$lock(r5, 0x6, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x10}) 1m14.02003659s ago: executing program 9 (id=3208): mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./control\x00', 0x81b6, 0xaec) openat(0xffffffffffffff9c, &(0x7f0000000200)='./control\x00', 0x2, 0x0) 1m12.607606615s ago: executing program 9 (id=3211): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 1m11.926972777s ago: executing program 9 (id=3213): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94) 1m7.140201521s ago: executing program 9 (id=3224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='3\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, r5, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7a, 0x6, 0x81, 0xffff, 0x4, 0x8005, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) 1m5.548106828s ago: executing program 9 (id=3226): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) close(0x3) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r4) recvmmsg(r4, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x10000, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1m4.204578899s ago: executing program 9 (id=3228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000130)='-2\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) 1m2.386109359s ago: executing program 47 (id=3199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='localhost 1 \\x00000000 2147483647 /\n', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='localhost / 2147483647 74753 0 0 0\n', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='1\n', 0x2) mount$nfs4(&(0x7f00000003c0)='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,vers=4.0,clientaddr=127.0.0.1\x00']) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/etc/passwd\x00', 0x0, 0x0) flock(r5, 0x2) fcntl$lock(r5, 0x6, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x10}) 1m0.379050381s ago: executing program 7 (id=3233): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/nfsd/parameters/nfs4_disable_idmapping\x00', 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/nfsd/parameters/cltrack_legacy_disable\x00', 0x0, 0x0) close(r1) 1m0.151649937s ago: executing program 7 (id=3235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='3\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, r5, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7a, 0x6, 0x81, 0xffff, 0x4, 0x8005, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) 58.686637385s ago: executing program 6 (id=3237): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ram0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/loop0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/sda\x00', 0x2, 0x0) 58.472167915s ago: executing program 6 (id=3238): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x4000880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000100001002bbd7000fddbdf25fe880000000000000000000000000001ac141429000000000000000000000000000107144e230005000000803c", @ANYBLOB="ac141417"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180), 0x0}, 0x20) 58.297668932s ago: executing program 7 (id=3239): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.08345708s ago: executing program 6 (id=3240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 57.014657315s ago: executing program 7 (id=3241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) userfaultfd(0x80801) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x108806, 0x3, 0x1ffffffd, 0x3ff}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe11) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltclass={0x34, 0x29, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {0x8, 0xd}, {0x2, 0x8}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=@newtfilter={0x54, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xf, 0xffff}, {0x5, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x6, 0x1, 0x1, 0x0, 0x2, 0x7, 0x5, [{0x2, 0x1, 0x8, 0x1}]}}]}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xe, 0x8000000000000001}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000180)="e568a66ff7d158db6f", 0x9}], 0x2}, 0x0) 55.878525003s ago: executing program 6 (id=3242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./sys\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus/pci/drivers/gve/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='test\x00', 0x5) 55.559022021s ago: executing program 6 (id=3243): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x2d6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000400)={0xa, 0x4e20, 0x2, @local, 0xe}, 0x1c) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x10}, 0x1c) r7 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r4, 0x0, r7, 0x0, 0x2, 0x5) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffe3e) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x12, 0xffffffffffffffff, 0x0) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x8, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000300)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x6b09, 0x1a5f, 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 54.78181306s ago: executing program 6 (id=3244): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4', 0x8) 52.587825017s ago: executing program 7 (id=3245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/pool_threads\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/v4_end_grace\x00', 0x0, 0x0) 52.45552338s ago: executing program 7 (id=3246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/power\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/subsystem\x00', 0x0, 0x0) 48.505479364s ago: executing program 48 (id=3228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000130)='-2\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) 41.9384718s ago: executing program 0 (id=3253): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x169100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r2 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x5400}], 0x1, 0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) io_uring_setup(0x3450, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x10000, 0x5, 0x8001, 0x8000, 0x507, 0x4, 0x4}) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) keyctl$unlink(0x9, r2, r2) 38.76075241s ago: executing program 49 (id=3244): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4', 0x8) 38.741790897s ago: executing program 0 (id=3255): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0x400, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0x7, 0x1}, {0xffff, 0xffff}, {0xfff6, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x853, 0x1fb, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x19, 0x13, 0xa, 0x1, 0x1, {0x4, 0xd4ed, 0xfffffff8, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c040) r0 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r2, &(0x7f0000005400)=[{&(0x7f0000005440)="994b7372433f40b7dc8743e65285b2f966dd667ba378d42a5d28e7755590ab29f26bc78bfdb6d6f80e94c469c6126d556a04e65a31f8a53e9313b0f7be0b4df0f29938b84f3ddb13a659a36c31bf50e780e3c414aa91f1d3bb7f633196aafc5d28d7196a0b7d9cc94134d9c8d36990d05a66c22efce3df34cbbb257201d8cb03f7488b2ba731a04910e873232c5e9b123fce3873fe20fa7e2afd0d24a7b9e22ec740ddd30fbc1ae5b9b1dfbe6895", 0xae}], 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x2802, 0x30, 0x18}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000400098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) 35.470246367s ago: executing program 50 (id=3246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/power\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/subsystem\x00', 0x0, 0x0) 35.445118789s ago: executing program 0 (id=3257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000003c0)=@secondary) 33.99843809s ago: executing program 0 (id=3258): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.39631494s ago: executing program 0 (id=3259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='-2 -3\n', 0x6) read(r0, &(0x7f0000000200)=""/100, 0x64) 30.026656034s ago: executing program 0 (id=3260): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x0, 0x4000000, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2000000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e20000008000700000003e80c00058008000100524153000c000d80080001007f000002"], 0x9c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000100)="280000010000007f00000106b7", 0xd, 0x0, &(0x7f0000000200)={0x2, 0x6b7, @loopback}, 0x10) 14.680339649s ago: executing program 51 (id=3260): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x0, 0x4000000, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2000000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e20000008000700000003e80c00058008000100524153000c000d80080001007f000002"], 0x9c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000100)="280000010000007f00000106b7", 0xd, 0x0, &(0x7f0000000200)={0x2, 0x6b7, @loopback}, 0x10) 12.713888703s ago: executing program 1 (id=3275): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 11.622337774s ago: executing program 1 (id=3276): unshare(0x60000000) r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xfffc, 0x800001ff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x41c}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e24, 0xfffffffc, @private2, 0x4}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$unix(0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8.019910155s ago: executing program 1 (id=3277): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='driver_override\x00', 0x2, 0x0) close(r0) write(r1, &(0x7f0000000140)='isp1760\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/isp1760\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='bind\x00', 0x1, 0x0) close(r2) write(r3, &(0x7f0000000200)='pcspkr\x00', 0x7) close(r3) 7.310948768s ago: executing program 1 (id=3278): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x169100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r2 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) io_uring_setup(0x3450, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) keyctl$unlink(0x9, r2, r2) 3.922157358s ago: executing program 1 (id=3279): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.997381366s ago: executing program 1 (id=3280): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000001c0)={0x40, 0x4, 0x2, ' \x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001") nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.602687933s ago: executing program 5 (id=3247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='3\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, r5, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7a, 0x6, 0x81, 0xffff, 0x4, 0x8005, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) 1.292002424s ago: executing program 5 (id=3281): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x200c01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x440d4) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x50d8}, 0x1, 0x0, 0x0, 0x8800}, 0xc000) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0xffff, 0x5}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x12000, 0x0) 665.766336ms ago: executing program 5 (id=3282): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/cpuinfo\x00', 0x0, 0x0) read(r0, &(0x7f0000000300), 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/kvm/parameters/enable_vmware_backdoor\x00', 0x0, 0x0) read(r1, &(0x7f0000000500), 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm_amd/parameters/dump_invalid_vmcb\x00', 0x0, 0x0) read(r2, &(0x7f0000000700), 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/kvm_intel/parameters/dump_invalid_vmcs\x00', 0x0, 0x0) read(r3, &(0x7f0000000900), 0x100) 558.457002ms ago: executing program 5 (id=3283): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r2, 0x3e8}}, 0x48) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000800)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) 0s ago: executing program 5 (id=3284): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): ink [ 1476.230384][T18443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.502040][T18453] team0: Port device team_slave_0 added [ 1476.603392][T18453] team0: Port device team_slave_1 added [ 1476.781036][T18443] team0: Port device team_slave_0 added [ 1477.162816][T18443] team0: Port device team_slave_1 added [ 1477.934211][T18453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.934226][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.934243][T18453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.007679][T18453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.007701][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.007732][T18453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.142683][ T5594] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1478.311300][ T5594] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1478.311366][ T5594] usb 9-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 1478.335570][ T5594] usb 9-1: config 4 has an invalid interface number: 4 but max is 0 [ 1478.335602][ T5594] usb 9-1: config 4 has no interface number 0 [ 1478.335638][ T5594] usb 9-1: config 4 interface 4 has no altsetting 0 [ 1478.340795][ T5594] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.340827][ T5594] usb 9-1: Product: syz [ 1478.340843][ T5594] usb 9-1: Manufacturer: syz [ 1478.340859][ T5594] usb 9-1: SerialNumber: syz [ 1478.446687][T18443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.446708][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.446799][T18443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.515963][T18443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.515979][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.515997][T18443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.262138][T18453] hsr_slave_0: entered promiscuous mode [ 1479.273625][T18453] hsr_slave_1: entered promiscuous mode [ 1479.274520][T18453] debugfs: 'hsr0' already exists in 'hsr' [ 1479.274546][T18453] Cannot create hsr debugfs directory [ 1479.623034][ T5594] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 1479.626347][ T5594] gspca_sunplus: reg_w_riv err -71 [ 1479.626497][ T5594] sunplus 9-1:4.4: probe with driver sunplus failed with error -71 [ 1479.657566][ T5594] usb 9-1: USB disconnect, device number 2 [ 1480.045036][T18443] hsr_slave_0: entered promiscuous mode [ 1480.048178][T18443] hsr_slave_1: entered promiscuous mode [ 1480.050608][T18443] debugfs: 'hsr0' already exists in 'hsr' [ 1480.050638][T18443] Cannot create hsr debugfs directory [ 1480.149740][T18263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1480.186013][T18263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1480.259100][T18263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1480.308156][T18263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1480.614970][T18263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1480.658412][T18263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1481.708875][T18263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1481.779258][T18263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1484.431316][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1484.542334][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1484.554259][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1484.559781][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1484.580896][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1485.934811][ T5720] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1486.082696][ T5720] usb 6-1: Using ep0 maxpacket: 32 [ 1486.083710][ T5720] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1486.085431][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.121750][ T5720] usb 6-1: config 0 descriptor?? [ 1486.144847][ T5720] as10x_usb: device has been detected [ 1486.147959][ T5720] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1486.326466][ T5720] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1486.389873][ T5720] as10x_usb: error during firmware upload part1 [ 1486.390636][ T5720] Registered device nBox DVB-T Dongle [ 1486.563236][T18829] jffs2: notice: (18829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1486.606215][ T5794] usb 6-1: USB disconnect, device number 35 [ 1487.098754][T11812] Bluetooth: hci0: command tx timeout [ 1487.210050][ T5794] Unregistered device nBox DVB-T Dongle [ 1487.309832][ T5794] as10x_usb: device has been disconnected [ 1489.140077][T11812] Bluetooth: hci0: command tx timeout [ 1491.222688][T11812] Bluetooth: hci0: command tx timeout [ 1491.529577][T18908] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2854'. [ 1492.055794][ T5794] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1492.213905][ T5794] usb 6-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 1492.215485][ T5794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.215528][ T5794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.215554][ T5794] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1492.215601][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.432731][ T5794] usb 6-1: config 0 descriptor?? [ 1492.702149][T18909] ecryptfs: Unknown parameter 'ecŒ|}«' [ 1492.906102][T18794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.906296][T18794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.906491][T18794] bridge_slave_0: entered allmulticast mode [ 1492.913415][T18794] bridge_slave_0: entered promiscuous mode [ 1492.925556][T18794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.934003][T18794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.934221][T18794] bridge_slave_1: entered allmulticast mode [ 1492.940568][T18794] bridge_slave_1: entered promiscuous mode [ 1493.248246][ T5794] usbhid 6-1:0.0: can't add hid device: -71 [ 1493.248383][ T5794] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1493.277819][ T5794] usb 6-1: USB disconnect, device number 36 [ 1493.292639][T11812] Bluetooth: hci0: command tx timeout [ 1493.292793][ T76] IPVS: starting estimator thread 0... [ 1493.331618][ T2834] bridge_slave_1: left allmulticast mode [ 1493.331646][ T2834] bridge_slave_1: left promiscuous mode [ 1493.331832][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.382804][T18940] IPVS: using max 14 ests per chain, 33600 per kthread [ 1493.404089][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2859'. [ 1493.454309][ T2834] bridge_slave_0: left allmulticast mode [ 1493.454337][ T2834] bridge_slave_0: left promiscuous mode [ 1493.454534][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.379545][ T2834] bridge_slave_1: left allmulticast mode [ 1494.379757][ T2834] bridge_slave_1: left promiscuous mode [ 1494.380746][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.574126][ T2834] bridge_slave_0: left allmulticast mode [ 1494.574155][ T2834] bridge_slave_0: left promiscuous mode [ 1494.574323][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.792877][ T2834] bridge_slave_1: left allmulticast mode [ 1494.792916][ T2834] bridge_slave_1: left promiscuous mode [ 1494.793098][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.826216][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.894812][ T2834] bridge_slave_0: left allmulticast mode [ 1494.894857][ T2834] bridge_slave_0: left promiscuous mode [ 1494.895134][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.025472][ T2834] dvmrp6: left allmulticast mode [ 1495.293503][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.373540][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.438913][ T2834] bond0 (unregistering): Released all slaves [ 1495.663312][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.743249][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.804481][ T2834] bond0 (unregistering): Released all slaves [ 1496.422888][ T974] smbdirect: ib_dev[syz5] removed [ 1496.424954][ T2834] bond0 (unregistering): (slave 30): Releasing backup interface [ 1496.513332][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.533440][ T2834] bond0 (unregistering): Released all slaves [ 1496.582191][ T5252] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1496.596077][T18794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.716188][T18944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1496.784733][T18944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1496.954958][T18952] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2860'. [ 1496.960731][T18794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.992364][ T2834] : left promiscuous mode [ 1497.363285][T18443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1497.508686][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1497.515550][T18794] team0: Port device team_slave_0 added [ 1498.120406][T18443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1498.428030][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1498.433845][T18794] team0: Port device team_slave_1 added [ 1498.747726][T18443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1498.848950][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1498.995217][T18443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1499.150132][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1499.246204][T18794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.246253][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.246325][T18794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.983818][T18794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.983841][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.983875][T18794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.577998][T18994] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2868'. [ 1501.621374][T18794] hsr_slave_0: entered promiscuous mode [ 1501.631716][T18794] hsr_slave_1: entered promiscuous mode [ 1501.639516][T18794] debugfs: 'hsr0' already exists in 'hsr' [ 1501.639545][T18794] Cannot create hsr debugfs directory [ 1502.087165][T18453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1502.207829][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 1502.209179][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1502.318441][ T5252] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1502.318700][T18453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1502.409238][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1502.602181][T18453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1502.659897][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1502.741233][T18453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1502.817747][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1503.268604][T19016] jffs2: notice: (19016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1504.003408][T19026] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2873'. [ 1504.105402][T19026] netlink: 'syz.8.2873': attribute type 17 has an invalid length. [ 1506.340573][T18443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.478497][T18443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.384144][T19047] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2876'. [ 1510.432130][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.432301][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.636505][T19066] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2882'. [ 1510.646198][T19068] jffs2: notice: (19068) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1510.706800][T19071] netlink: 'syz.5.2882': attribute type 17 has an invalid length. [ 1511.065190][ T2834] hsr_slave_0: left promiscuous mode [ 1511.092579][ T2834] hsr_slave_1: left promiscuous mode [ 1511.093500][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.123209][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.232690][ T2834] hsr_slave_0: left promiscuous mode [ 1511.252741][ T2834] hsr_slave_1: left promiscuous mode [ 1511.253666][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.284100][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.382837][ T2834] hsr_slave_0: left promiscuous mode [ 1511.402603][ T2834] hsr_slave_1: left promiscuous mode [ 1511.403517][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.433225][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.783170][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1511.807544][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1512.194928][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1512.219256][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1512.605143][ T2831] smc: removing ib device syz2 [ 1512.793103][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1512.824713][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1513.080625][ T5252] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1513.109595][T18453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.166682][T18453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.084033][T19080] netlink: zone id is out of range [ 1514.084080][T19080] netlink: zone id is out of range [ 1514.084115][T19080] netlink: zone id is out of range [ 1514.084150][T19080] netlink: zone id is out of range [ 1514.084185][T19080] netlink: zone id is out of range [ 1514.084219][T19080] netlink: zone id is out of range [ 1514.084620][T19080] netlink: zone id is out of range [ 1514.084658][T19080] netlink: zone id is out of range [ 1514.084705][T19080] netlink: zone id is out of range [ 1514.084739][T19080] netlink: zone id is out of range [ 1515.016227][ T2831] smbdirect: ib_dev[syz2] removed [ 1515.217665][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1515.288342][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1515.327539][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1515.328950][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1515.330108][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1517.479145][ T9722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1517.692584][ T9722] Bluetooth: hci2: command tx timeout [ 1517.760322][ T9722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1517.778941][ T9722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1517.799664][ T9722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1517.801032][ T9722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1519.786839][ T9722] Bluetooth: hci2: command tx timeout [ 1520.133059][ T9722] Bluetooth: hci5: command tx timeout [ 1520.640659][T19120] FAULT_INJECTION: forcing a failure. [ 1520.640659][T19120] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.640708][T19120] CPU: 0 UID: 0 PID: 19120 Comm: syz.5.2887 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1520.640742][T19120] Tainted: [L]=SOFTLOCKUP [ 1520.640752][T19120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1520.640767][T19120] Call Trace: [ 1520.640777][T19120] [ 1520.640788][T19120] dump_stack_lvl+0xe8/0x150 [ 1520.640834][T19120] should_fail_ex+0x46b/0x600 [ 1520.640880][T19120] should_failslab+0xa8/0x100 [ 1520.640919][T19120] __kmalloc_cache_noprof+0xa1/0x680 [ 1520.640952][T19120] ? garp_init_applicant+0x16e/0x470 [ 1520.641077][T19120] ? garp_init_applicant+0x16e/0x470 [ 1520.641114][T19120] garp_init_applicant+0x16e/0x470 [ 1520.641144][T19120] ? vlan_gvrp_init_applicant+0xd/0x20 [ 1520.641254][T19120] register_vlan_dev+0x1f4/0x850 [ 1520.641293][T19120] register_vlan_device+0x393/0x4b0 [ 1520.641327][T19120] ? __pfx_register_vlan_device+0x10/0x10 [ 1520.641357][T19120] ? security_capable+0x7e/0x2c0 [ 1520.641407][T19120] vlan_ioctl_handler+0x248/0x630 [ 1520.641440][T19120] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1520.641478][T19120] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1520.641512][T19120] ? mutex_lock_nested+0x152/0x1d0 [ 1520.641538][T19120] ? sock_ioctl+0x5ee/0x7f0 [ 1520.641570][T19120] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1520.641599][T19120] sock_ioctl+0x615/0x7f0 [ 1520.641629][T19120] ? __pfx_sock_ioctl+0x10/0x10 [ 1520.641658][T19120] ? __fget_files+0x2a/0x420 [ 1520.641682][T19120] ? __fget_files+0x3a8/0x420 [ 1520.641705][T19120] ? __fget_files+0x2a/0x420 [ 1520.641734][T19120] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1520.641761][T19120] ? __pfx_sock_ioctl+0x10/0x10 [ 1520.641789][T19120] __se_sys_ioctl+0xff/0x170 [ 1520.641823][T19120] do_syscall_64+0x166/0x520 [ 1520.641855][T19120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.641879][T19120] ? clear_bhb_loop+0x70/0xc0 [ 1520.641909][T19120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.641932][T19120] RIP: 0033:0x7f47a306e159 [ 1520.641955][T19120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.641975][T19120] RSP: 002b:00007f47a12c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.642002][T19120] RAX: ffffffffffffffda RBX: 00007f47a32f5fa0 RCX: 00007f47a306e159 [ 1520.642019][T19120] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000005 [ 1520.642035][T19120] RBP: 00007f47a310503b R08: 0000000000000000 R09: 0000000000000000 [ 1520.642051][T19120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.642065][T19120] R13: 00007f47a32f6038 R14: 00007f47a32f5fa0 R15: 00007ffe2c1e2148 [ 1520.642105][T19120] [ 1520.653907][ T5252] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1521.739293][T19143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2890'. [ 1521.791232][T19145] netlink: 'syz.5.2890': attribute type 17 has an invalid length. [ 1521.862535][ T9722] Bluetooth: hci2: command tx timeout [ 1522.173633][ T9722] Bluetooth: hci5: command tx timeout [ 1523.392988][T19164] net_ratelimit: 147 callbacks suppressed [ 1523.393097][T19164] netlink: zone id is out of range [ 1523.393140][T19164] netlink: zone id is out of range [ 1523.393174][T19164] netlink: zone id is out of range [ 1523.393209][T19164] netlink: zone id is out of range [ 1523.393244][T19164] netlink: zone id is out of range [ 1523.393278][T19164] netlink: zone id is out of range [ 1523.393348][T19164] netlink: zone id is out of range [ 1523.393384][T19164] netlink: zone id is out of range [ 1523.393418][T19164] netlink: zone id is out of range [ 1523.393452][T19164] netlink: zone id is out of range [ 1523.933135][ T9722] Bluetooth: hci2: command tx timeout [ 1524.261552][ T9722] Bluetooth: hci5: command tx timeout [ 1526.332608][ T9722] Bluetooth: hci5: command tx timeout [ 1526.910012][T19200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2898'. [ 1526.966574][T19203] netlink: 'syz.5.2898': attribute type 17 has an invalid length. [ 1529.488204][T19206] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2899'. [ 1531.376631][T18794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1531.528699][T18794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1531.594948][T18794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1531.887641][T18794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1532.762943][T18794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1532.900161][T18794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1533.067235][T18794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1533.147710][T18794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1533.219760][T15399] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1533.263962][T19278] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2907'. [ 1533.264340][T19094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.264499][T19094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.264657][T19094] bridge_slave_0: entered allmulticast mode [ 1533.266265][T19094] bridge_slave_0: entered promiscuous mode [ 1533.315860][T19281] netlink: 'syz.8.2907': attribute type 17 has an invalid length. [ 1533.318536][T19094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.318651][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.318806][T19094] bridge_slave_1: entered allmulticast mode [ 1533.320488][T19094] bridge_slave_1: entered promiscuous mode [ 1533.375037][T15399] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1533.375502][T15399] usb 6-1: not running at top speed; connect to a high speed hub [ 1533.375526][T15399] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.40 [ 1533.376456][T15399] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1533.386763][T15399] usb 6-1: string descriptor 0 read error: -22 [ 1533.387003][T15399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.480362][T19083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.480573][T19083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.480766][T19083] bridge_slave_0: entered allmulticast mode [ 1533.508839][T19083] bridge_slave_0: entered promiscuous mode [ 1533.541393][T19083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.558907][T19083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.559332][T19083] bridge_slave_1: entered allmulticast mode [ 1533.567213][T19083] bridge_slave_1: entered promiscuous mode [ 1533.604615][T19094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.659797][T19094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.960367][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1533.960405][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1533.960431][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1533.960491][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1533.960520][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1533.960546][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1533.960573][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1533.960600][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1533.960627][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1533.960654][T15399] logitech 0003:046D:C286.0012: unknown main item tag 0x0 [ 1534.410538][T15399] logitech 0003:046D:C286.0012: hidraw0: USB HID v0.0a Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0 [ 1534.410634][T15399] logitech 0003:046D:C286.0012: no inputs found [ 1534.455323][T15399] usb 6-1: USB disconnect, device number 37 [ 1534.501307][T19083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.563641][T19083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.569629][T19094] team0: Port device team_slave_0 added [ 1534.642899][T19094] team0: Port device team_slave_1 added [ 1534.725128][T19292] fido_id[19292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1534.821599][T19083] team0: Port device team_slave_0 added [ 1535.103531][T19300] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2912'. [ 1535.656241][T19083] team0: Port device team_slave_1 added [ 1535.659998][T19094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.660017][T19094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.660042][T19094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.869242][T19094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.869262][T19094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.869293][T19094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.035449][T19083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.035470][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.035495][T19083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.132642][T19083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.132662][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.132687][T19083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.167970][T19313] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2915'. [ 1536.221085][T19314] netlink: 'syz.8.2915': attribute type 17 has an invalid length. [ 1537.487051][T19094] hsr_slave_0: entered promiscuous mode [ 1537.489548][T19094] hsr_slave_1: entered promiscuous mode [ 1537.580282][T19083] hsr_slave_0: entered promiscuous mode [ 1537.593644][T19083] hsr_slave_1: entered promiscuous mode [ 1537.594699][T19083] debugfs: 'hsr0' already exists in 'hsr' [ 1537.594727][T19083] Cannot create hsr debugfs directory [ 1540.204097][T19342] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2923'. [ 1540.272851][T19343] netlink: 'syz.5.2923': attribute type 17 has an invalid length. [ 1542.251424][ T37] audit: type=1326 audit(1789419240.952:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.251906][ T37] audit: type=1326 audit(1789419240.952:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.252217][ T37] audit: type=1326 audit(1789419240.952:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.252908][ T37] audit: type=1326 audit(1789419240.952:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.253309][ T37] audit: type=1326 audit(1789419240.962:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.253605][ T37] audit: type=1326 audit(1789419240.962:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.253986][ T37] audit: type=1326 audit(1789419240.962:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.256269][ T37] audit: type=1326 audit(1789419240.962:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.256985][ T37] audit: type=1326 audit(1789419240.962:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.272187][ T37] audit: type=1326 audit(1789419240.962:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19353 comm="syz.8.2927" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1542.285382][T18794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.800650][T18794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.065503][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.066706][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.123275][T13379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.123494][T13379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.528621][T19379] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2931'. [ 1544.585329][T19382] netlink: 'syz.5.2931': attribute type 17 has an invalid length. [ 1544.588339][T11812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1544.680851][T11812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1544.719427][T11812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1544.839057][T11812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1544.867564][T11812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1546.972854][ T9722] Bluetooth: hci4: command tx timeout [ 1547.665009][ T5594] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1547.813441][ T5594] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1547.816801][ T5594] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1547.816837][ T5594] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1547.816861][ T5594] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1547.820214][ T5594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.820245][ T5594] usb 6-1: Product: syz [ 1547.820260][ T5594] usb 6-1: Manufacturer: syz [ 1547.820276][ T5594] usb 6-1: SerialNumber: syz [ 1547.894881][ T5594] usb 6-1: config 0 descriptor?? [ 1547.896149][T19403] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1548.122899][ T5594] usb 6-1: USB disconnect, device number 38 [ 1549.084171][ T9722] Bluetooth: hci4: command tx timeout [ 1549.447285][ T5720] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1549.732653][ T5720] usb 9-1: Using ep0 maxpacket: 8 [ 1549.733762][ T5720] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1549.735657][ T5720] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1549.735687][ T5720] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.735741][ T5720] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1549.735763][ T5720] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1549.735788][ T5720] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1549.735834][ T5720] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.753529][ T5720] usbtmc 9-1:16.0: bulk endpoints not found [ 1550.967037][T19440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.970454][T19440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.142459][ T9722] Bluetooth: hci4: command tx timeout [ 1551.221100][T19380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.221350][T19380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.221577][T19380] bridge_slave_0: entered allmulticast mode [ 1551.236436][T19380] bridge_slave_0: entered promiscuous mode [ 1551.243886][T19380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.244105][T19380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.245519][T19380] bridge_slave_1: entered allmulticast mode [ 1551.315010][T19380] bridge_slave_1: entered promiscuous mode [ 1551.630236][T19380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.644704][T19380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.945432][ T2834] bridge_slave_1: left allmulticast mode [ 1551.945475][ T2834] bridge_slave_1: left promiscuous mode [ 1551.945776][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.014754][ T6193] usb 9-1: USB disconnect, device number 3 [ 1552.248389][ T2834] bridge_slave_0: left allmulticast mode [ 1552.248430][ T2834] bridge_slave_0: left promiscuous mode [ 1552.248736][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.676824][ T2834] bridge_slave_1: left allmulticast mode [ 1552.676867][ T2834] bridge_slave_1: left promiscuous mode [ 1552.677136][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.836005][ T2834] bridge_slave_0: left allmulticast mode [ 1552.836048][ T2834] bridge_slave_0: left promiscuous mode [ 1552.836321][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.042674][ T6193] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1553.124053][ T2834] bridge_slave_1: left allmulticast mode [ 1553.124081][ T2834] bridge_slave_1: left promiscuous mode [ 1553.124256][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.206276][ T6193] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1553.206343][ T6193] usb 9-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=59.64 [ 1553.210106][ T6193] usb 9-1: config 4 has an invalid interface number: 176 but max is 0 [ 1553.210136][ T6193] usb 9-1: config 4 has no interface number 0 [ 1553.210170][ T6193] usb 9-1: config 4 interface 176 has no altsetting 0 [ 1553.212538][T11812] Bluetooth: hci4: command tx timeout [ 1553.216060][ T6193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.216090][ T6193] usb 9-1: Product: syz [ 1553.216105][ T6193] usb 9-1: Manufacturer: syz [ 1553.216120][ T6193] usb 9-1: SerialNumber: syz [ 1553.384647][ T2834] bridge_slave_0: left allmulticast mode [ 1553.384931][ T2834] bridge_slave_0: left promiscuous mode [ 1553.386328][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.441860][T19471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.445172][T19471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.653831][T19471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.655981][T19471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.662304][T19471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.691006][T19471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.903704][T19471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.905100][T19471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.044863][ T6193] mvusb_mdio 9-1:4.176: probe with driver mvusb_mdio failed with error -5 [ 1554.058707][ T6193] usb 9-1: USB disconnect, device number 4 [ 1554.783789][T19493] jffs2: notice: (19493) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1554.968941][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.063283][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.124420][ T2834] bond0 (unregistering): Released all slaves [ 1555.684069][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.787375][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.845839][ T2834] bond0 (unregistering): Released all slaves [ 1556.258358][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.383421][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.483440][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.545546][ T2834] bond0 (unregistering): Released all slaves [ 1557.850901][T19380] team0: Port device team_slave_0 added [ 1557.864249][T19380] team0: Port device team_slave_1 added [ 1557.913858][T19380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.913898][T19380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.913928][T19380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.916463][T19380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.916478][T19380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.916507][T19380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.678609][T19380] hsr_slave_0: entered promiscuous mode [ 1558.680145][T19380] hsr_slave_1: entered promiscuous mode [ 1558.681244][T19380] debugfs: 'hsr0' already exists in 'hsr' [ 1558.681271][T19380] Cannot create hsr debugfs directory [ 1560.445545][ T2834] hsr_slave_0: left promiscuous mode [ 1560.478860][ T2834] hsr_slave_1: left promiscuous mode [ 1560.480071][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.083715][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.542624][ T2834] hsr_slave_0: left promiscuous mode [ 1561.584080][ T2834] hsr_slave_1: left promiscuous mode [ 1561.585514][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.623560][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.783556][ T2834] hsr_slave_0: left promiscuous mode [ 1561.822811][ T2834] hsr_slave_1: left promiscuous mode [ 1561.826656][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.874618][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.333296][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1562.395292][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1562.469241][T19559] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2960'. [ 1563.003016][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1563.033322][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1563.544896][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1563.583308][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1563.986518][ T5252] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1567.816999][T19094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1567.930336][T19617] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2968'. [ 1567.971557][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1567.993573][T19094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1568.049765][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1568.075384][T19094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1568.145001][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1568.175718][T19094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1568.265091][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1568.478714][T19610] netlink: 'syz.5.2967': attribute type 4 has an invalid length. [ 1571.960833][T19094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1572.457627][T19094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1572.598843][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.598929][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.629911][ T2829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.631642][ T2829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.152785][ T2834] bridge_slave_1: left allmulticast mode [ 1574.152827][ T2834] bridge_slave_1: left promiscuous mode [ 1574.153110][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.294492][ T2834] bridge_slave_0: left allmulticast mode [ 1574.294533][ T2834] bridge_slave_0: left promiscuous mode [ 1574.294818][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.423300][T19695] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2976'. [ 1574.615261][ T9722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1574.642905][ T9722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1574.670952][ T9722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1574.720155][ T9722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1575.437038][T19702] net_ratelimit: 147 callbacks suppressed [ 1575.437101][T19702] netlink: zone id is out of range [ 1575.437139][T19702] netlink: zone id is out of range [ 1575.437185][T19702] netlink: zone id is out of range [ 1575.437220][T19702] netlink: zone id is out of range [ 1575.437255][T19702] netlink: zone id is out of range [ 1575.437290][T19702] netlink: zone id is out of range [ 1575.437355][T19702] netlink: zone id is out of range [ 1575.437391][T19702] netlink: zone id is out of range [ 1575.437426][T19702] netlink: zone id is out of range [ 1575.437461][T19702] netlink: zone id is out of range [ 1575.714304][ T9722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1576.703095][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1576.783505][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1576.804564][ T2834] bond0 (unregistering): Released all slaves [ 1578.031866][T11812] Bluetooth: hci0: command tx timeout [ 1578.786865][ T9722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1578.898408][ T9722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1578.926346][ T9722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1578.940410][ T9722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1578.957716][ T9722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1580.092511][T11812] Bluetooth: hci0: command tx timeout [ 1580.442202][T19746] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2985'. [ 1580.952648][ T2834] hsr_slave_0: left promiscuous mode [ 1581.082932][ T2834] hsr_slave_1: left promiscuous mode [ 1581.084381][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1581.128294][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.292857][T11812] Bluetooth: hci6: command tx timeout [ 1582.094409][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1582.172825][T11812] Bluetooth: hci0: command tx timeout [ 1582.193897][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1584.207035][T19380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1584.224741][T11812] Bluetooth: hci6: command tx timeout [ 1584.252681][T11812] Bluetooth: hci0: command tx timeout [ 1584.632484][T19380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1584.651147][T19380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1584.749114][T19380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1584.761805][T19380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1584.832061][T19784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2993'. [ 1584.838200][T19380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1584.862651][T19380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1585.022588][T19380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1586.354101][T19806] net_ratelimit: 147 callbacks suppressed [ 1586.354156][T19806] netlink: zone id is out of range [ 1586.354193][T19806] netlink: zone id is out of range [ 1586.354228][T19806] netlink: zone id is out of range [ 1586.354263][T19806] netlink: zone id is out of range [ 1586.354299][T19806] netlink: zone id is out of range [ 1586.354334][T19806] netlink: zone id is out of range [ 1586.354400][T19806] netlink: zone id is out of range [ 1586.354435][T19806] netlink: zone id is out of range [ 1586.354470][T19806] netlink: zone id is out of range [ 1586.354504][T19806] netlink: zone id is out of range [ 1586.712549][T11812] Bluetooth: hci6: command tx timeout [ 1587.857299][T19698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.858063][T19698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.858258][T19698] bridge_slave_0: entered allmulticast mode [ 1587.886885][T19698] bridge_slave_0: entered promiscuous mode [ 1587.967515][T19698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.967664][T19698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.967867][T19698] bridge_slave_1: entered allmulticast mode [ 1587.997409][T19698] bridge_slave_1: entered promiscuous mode [ 1588.310608][T19698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.734684][T11812] Bluetooth: hci6: command tx timeout [ 1588.789391][T19847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3002'. [ 1588.994501][T19698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.216434][T19698] team0: Port device team_slave_0 added [ 1589.257945][T19698] team0: Port device team_slave_1 added [ 1589.824869][T19698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.824891][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.824922][T19698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.121391][T19698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.121412][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.121435][T19698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.441219][T19725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.441351][T19725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.441459][T19725] bridge_slave_0: entered allmulticast mode [ 1591.468040][T19725] bridge_slave_0: entered promiscuous mode [ 1591.498990][T19698] hsr_slave_0: entered promiscuous mode [ 1591.499851][T19698] hsr_slave_1: entered promiscuous mode [ 1591.503905][T19698] debugfs: 'hsr0' already exists in 'hsr' [ 1591.503939][T19698] Cannot create hsr debugfs directory [ 1591.512967][T19380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.037580][T19725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.037771][T19725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.038001][T19725] bridge_slave_1: entered allmulticast mode [ 1592.040259][T19725] bridge_slave_1: entered promiscuous mode [ 1592.219909][T19725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.315297][T19725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.758968][T19725] team0: Port device team_slave_0 added [ 1593.815928][T19380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.834620][T19725] team0: Port device team_slave_1 added [ 1594.112923][T19725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.112944][T19725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.112973][T19725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.544790][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.544967][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1594.556391][T19725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.556409][T19725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.556435][T19725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.973802][T13379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.974018][T13379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.638297][T19725] hsr_slave_0: entered promiscuous mode [ 1595.639832][T19725] hsr_slave_1: entered promiscuous mode [ 1595.640931][T19725] debugfs: 'hsr0' already exists in 'hsr' [ 1595.640958][T19725] Cannot create hsr debugfs directory [ 1595.797126][T19945] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3023'. [ 1595.849389][T19947] netlink: 'syz.5.3023': attribute type 17 has an invalid length. [ 1595.890618][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1595.890636][ T37] audit: type=1326 audit(1789419294.592:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1595.891404][ T37] audit: type=1326 audit(1789419294.592:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1595.891778][ T37] audit: type=1326 audit(1789419294.592:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1595.892185][ T37] audit: type=1326 audit(1789419294.592:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1595.893445][ T37] audit: type=1326 audit(1789419294.592:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1595.894619][ T37] audit: type=1326 audit(1789419294.602:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1595.895264][ T37] audit: type=1326 audit(1789419294.602:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1595.895731][ T37] audit: type=1326 audit(1789419294.602:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1595.896110][ T37] audit: type=1326 audit(1789419294.602:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1595.896451][ T37] audit: type=1326 audit(1789419294.602:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19942 comm="syz.8.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1597.771130][ T5252] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1598.122791][ T2834] bridge_slave_1: left allmulticast mode [ 1598.122834][ T2834] bridge_slave_1: left promiscuous mode [ 1598.123126][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.304439][ T2834] bridge_slave_0: left allmulticast mode [ 1598.304479][ T2834] bridge_slave_0: left promiscuous mode [ 1598.304786][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.572725][ T2834] bridge_slave_1: left allmulticast mode [ 1598.572765][ T2834] bridge_slave_1: left promiscuous mode [ 1598.573033][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.647717][ T2834] bridge_slave_0: left allmulticast mode [ 1599.647760][ T2834] bridge_slave_0: left promiscuous mode [ 1599.648196][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.643109][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.723167][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.744950][ T2834] bond0 (unregistering): Released all slaves [ 1601.044746][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.125598][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.184584][ T2834] bond0 (unregistering): Released all slaves [ 1601.241240][ T5252] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1601.816909][T20012] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3031'. [ 1601.880312][T20013] netlink: 'syz.5.3031': attribute type 17 has an invalid length. [ 1601.904438][T19380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1602.314112][ T2834] hsr_slave_0: left promiscuous mode [ 1602.372601][ T2834] hsr_slave_1: left promiscuous mode [ 1602.374065][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.423574][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.663974][ T2834] hsr_slave_0: left promiscuous mode [ 1602.702623][ T2834] hsr_slave_1: left promiscuous mode [ 1602.706567][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.754684][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.424846][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1604.494641][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1604.763726][ T9722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1604.871901][ T9722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1604.890190][ T9722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1604.891863][ T9722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1604.907366][ T9722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1605.827191][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1605.893367][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1607.133447][T11812] Bluetooth: hci2: command tx timeout [ 1607.585231][ T5252] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1607.613867][T20064] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3038'. [ 1608.031187][T20072] netlink: 'syz.5.3039': attribute type 17 has an invalid length. [ 1609.212772][T11812] Bluetooth: hci2: command tx timeout [ 1610.890626][T20127] netlink: 'syz.5.3047': attribute type 17 has an invalid length. [ 1610.996652][T20125] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3046'. [ 1611.312609][T11812] Bluetooth: hci2: command tx timeout [ 1613.050538][T20042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.050779][T20042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.050986][T20042] bridge_slave_0: entered allmulticast mode [ 1613.060936][T20042] bridge_slave_0: entered promiscuous mode [ 1613.110542][T20042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.112212][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.113032][T20042] bridge_slave_1: entered allmulticast mode [ 1613.118380][T20042] bridge_slave_1: entered promiscuous mode [ 1613.286019][T20177] netlink: 'syz.8.3055': attribute type 17 has an invalid length. [ 1613.372515][T11812] Bluetooth: hci2: command tx timeout [ 1614.612559][T20042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.696130][T20042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.829697][T19698] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1614.888248][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1615.049716][T19698] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1615.089244][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1615.112339][T20042] team0: Port device team_slave_0 added [ 1615.353790][T19698] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1615.376117][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1615.394378][T20042] team0: Port device team_slave_1 added [ 1615.395402][T19698] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1615.446943][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1615.809821][T20042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.809842][T20042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.809870][T20042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.926432][T20042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.926453][T20042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.926483][T20042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.486402][T20042] hsr_slave_0: entered promiscuous mode [ 1616.487828][T20042] hsr_slave_1: entered promiscuous mode [ 1616.516029][T19725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1616.546669][T19725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1616.722768][T19725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1616.766525][T19725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1617.618775][T19725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1617.743105][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.809817][T19725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1617.874602][T20219] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3065'. [ 1617.928406][T19725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1617.977743][T19725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1618.604985][T20234] netlink: 'syz.5.3066': attribute type 10 has an invalid length. [ 1619.894280][ T2834] bridge_slave_1: left allmulticast mode [ 1619.894322][ T2834] bridge_slave_1: left promiscuous mode [ 1619.894615][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.024321][ T2834] bridge_slave_0: left allmulticast mode [ 1620.024357][ T2834] bridge_slave_0: left promiscuous mode [ 1620.024520][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.143238][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.223311][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.264621][ T2834] bond0 (unregistering): Released all slaves [ 1621.934206][ T2834] hsr_slave_0: left promiscuous mode [ 1621.972682][ T2834] hsr_slave_1: left promiscuous mode [ 1621.974117][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.023262][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.543733][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 1622.593305][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 1622.791203][T19698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.060896][T19698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1623.275724][T19725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.323513][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.323762][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1623.365079][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.365288][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1623.841103][T19725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1623.898385][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.898707][ T974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1623.957640][ T974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.959529][ T974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.205915][ T5252] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1626.078390][T19698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1626.348663][T20042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1626.397937][T20042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1626.410415][T20042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1626.489133][T20042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1626.517961][T20042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1626.630119][T20042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1626.654842][T20042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1626.714847][T20042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1626.767840][T19725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1626.840485][T19698] veth0_vlan: entered promiscuous mode [ 1626.899586][T19698] veth1_vlan: entered promiscuous mode [ 1627.133575][T20332] trusted_key: encrypted_key: insufficient parameters specified [ 1627.177275][T19725] veth0_vlan: entered promiscuous mode [ 1627.195805][T19698] veth0_macvtap: entered promiscuous mode [ 1627.224291][T19725] veth1_vlan: entered promiscuous mode [ 1627.226083][T19698] veth1_macvtap: entered promiscuous mode [ 1627.261977][T20042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.288087][T19698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1627.311122][T19698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1627.330867][T20042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.357576][T19725] veth0_macvtap: entered promiscuous mode [ 1627.389543][ T2831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.389671][ T2831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.391340][T19725] veth1_macvtap: entered promiscuous mode [ 1627.454613][ T2831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.454741][ T2831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.162675][T19725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1628.428278][T19725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1628.666759][T13379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.666785][T13379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.748380][T20340] jffs2: notice: (20340) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1629.527884][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.527909][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.217143][ T2831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.225310][T13379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.225621][T13379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.248030][T13379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.691885][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.691906][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.792737][ T1142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.794367][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.794754][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.901043][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.901069][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.978417][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.409192][T20042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.347210][T20042] veth0_vlan: entered promiscuous mode [ 1632.378906][T20042] veth1_vlan: entered promiscuous mode [ 1632.442139][T20042] veth0_macvtap: entered promiscuous mode [ 1632.505853][T20042] veth1_macvtap: entered promiscuous mode [ 1632.581660][T20042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1632.633554][T20042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1632.874327][T20391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.875272][T20391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.114023][T20391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1633.129679][T20391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1633.797081][T20396] lo speed is unknown, defaulting to 1000 [ 1633.804964][T20396] lo speed is unknown, defaulting to 1000 [ 1633.848835][T20396] lo speed is unknown, defaulting to 1000 [ 1633.892863][ T974] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.921232][T20400] jffs2: notice: (20400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1634.463384][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.464976][ T2834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.465016][ T2834] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.465049][ T2834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.465079][ T2834] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.465110][ T2834] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.465141][ T2834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.336293][ T2834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.336317][ T2834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.394877][T20396] infiniband syz0: set active [ 1635.394976][T20396] infiniband syz0: added lo [ 1635.423732][T20396] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1635.455327][T10755] lo speed is unknown, defaulting to 1000 [ 1635.586932][T20396] infiniband syz0: Couldn't open port 1 [ 1635.594373][T20396] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1635.594410][T20396] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1635.594448][T20396] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1635.790719][T20396] RDS/IB: syz0: added [ 1635.790814][T20396] smc: adding ib device syz0 with port count 1 [ 1635.790840][T20396] smc: ib device syz0 port 1 has no pnetid [ 1636.119411][T16382] lo speed is unknown, defaulting to 1000 [ 1636.122313][T20396] lo speed is unknown, defaulting to 1000 [ 1636.141783][ T2834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.141807][ T2834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.251570][ T9722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1636.298170][ T9722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1636.322698][ T9722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1636.327699][ T9722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1636.329315][ T9722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1637.201526][T20421] netlink: 'syz.4.3098': attribute type 10 has an invalid length. [ 1637.396750][T20421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1637.403495][T20421] team0: Port device netdevsim1 added [ 1637.445440][T20396] lo speed is unknown, defaulting to 1000 [ 1638.194332][T20396] lo speed is unknown, defaulting to 1000 [ 1638.389254][T20396] lo speed is unknown, defaulting to 1000 [ 1638.594490][T20396] lo speed is unknown, defaulting to 1000 [ 1638.660167][T11812] Bluetooth: hci4: command tx timeout [ 1638.872044][T20396] lo speed is unknown, defaulting to 1000 [ 1639.321231][T20396] lo speed is unknown, defaulting to 1000 [ 1640.732521][T11812] Bluetooth: hci4: command tx timeout [ 1640.761145][T20407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.761393][T20407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.761579][T20407] bridge_slave_0: entered allmulticast mode [ 1640.765549][T20407] bridge_slave_0: entered promiscuous mode [ 1640.768662][T20407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.768894][T20407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.769058][T20407] bridge_slave_1: entered allmulticast mode [ 1640.771733][T20407] bridge_slave_1: entered promiscuous mode [ 1640.874927][T20407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.891635][T20407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.975273][T20407] team0: Port device team_slave_0 added [ 1640.980699][T20407] team0: Port device team_slave_1 added [ 1641.057681][T20407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.057703][T20407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.057733][T20407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.060795][T20407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.060812][T20407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.060842][T20407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.258542][T20407] hsr_slave_0: entered promiscuous mode [ 1641.260022][T20407] hsr_slave_1: entered promiscuous mode [ 1641.261027][T20407] debugfs: 'hsr0' already exists in 'hsr' [ 1641.261055][T20407] Cannot create hsr debugfs directory [ 1642.024279][T20458] netlink: 'syz.8.3108': attribute type 10 has an invalid length. [ 1642.420413][T20466] rdma_rxe: rxe_newlink: failed to add lo [ 1642.814066][T11812] Bluetooth: hci4: command tx timeout [ 1642.926764][T20458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1642.930187][T20458] team0: Port device netdevsim1 added [ 1642.939520][T20478] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1642.939556][T20478] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1642.939594][T20478] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1642.968431][T20478] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1643.889792][T20503] jffs2: notice: (20503) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1644.311702][T20513] lo speed is unknown, defaulting to 1000 [ 1644.892596][T11812] Bluetooth: hci4: command tx timeout [ 1645.638961][T20529] i8042 kbd 00:00: in use; can't configure [ 1645.639277][T20529] i8042 kbd 00:00: in use; can't configure [ 1645.640794][T20529] i8042 aux 00:01: in use; can't configure [ 1645.640955][T20529] i8042 aux 00:01: in use; can't configure [ 1645.642275][T20529] serial 00:02: in use; can't configure [ 1645.675371][T20529] serial 00:02: in use; can't configure [ 1645.717656][T20529] serial 00:03: in use; can't configure [ 1645.717812][T20529] serial 00:03: in use; can't configure [ 1647.594786][T20407] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1647.655553][T20407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1647.657152][T20407] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1647.742231][T20407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1647.753652][ T9722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1647.808749][T20407] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1647.833779][ T9722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1647.839724][ T9722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1647.841088][ T9722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1647.841980][ T9722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1648.153556][T20407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1648.163698][T20407] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1648.205451][T20407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1648.292591][ T8315] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1648.443534][ T8315] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00 [ 1648.445146][ T8315] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1648.445179][ T8315] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1648.445223][ T8315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.511091][T20561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1648.511291][T20561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1648.677405][ T8315] ushc 3-1:1.0: probe with driver ushc failed with error -110 [ 1648.827996][T20407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.887313][T20407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.919509][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.919766][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.960990][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.961168][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1649.160455][T20579] netlink: 'syz.8.3123': attribute type 10 has an invalid length. [ 1649.476799][T20558] lo speed is unknown, defaulting to 1000 [ 1649.932670][T11812] Bluetooth: hci5: command tx timeout [ 1650.438695][T20605] lo speed is unknown, defaulting to 1000 [ 1650.725525][T20407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.008578][ T5720] usb 3-1: USB disconnect, device number 30 [ 1651.679659][T20558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.680864][T20558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.681077][T20558] bridge_slave_0: entered allmulticast mode [ 1651.690132][T20558] bridge_slave_0: entered promiscuous mode [ 1651.753181][T20558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.753326][T20558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.759457][T20558] bridge_slave_1: entered allmulticast mode [ 1651.783012][T20558] bridge_slave_1: entered promiscuous mode [ 1651.927765][T20558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.949595][T20558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.012647][T11812] Bluetooth: hci5: command tx timeout [ 1652.168178][T20558] team0: Port device team_slave_0 added [ 1652.176922][T20558] team0: Port device team_slave_1 added [ 1652.373936][T20558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1652.373957][T20558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.373988][T20558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1652.411247][T20558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1652.411266][T20558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.411293][T20558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1652.915666][T20407] veth0_vlan: entered promiscuous mode [ 1653.147313][T20558] hsr_slave_0: entered promiscuous mode [ 1653.149669][T20558] hsr_slave_1: entered promiscuous mode [ 1653.170171][T20558] debugfs: 'hsr0' already exists in 'hsr' [ 1653.170202][T20558] Cannot create hsr debugfs directory [ 1653.363563][T20407] veth1_vlan: entered promiscuous mode [ 1654.028679][T20407] veth0_macvtap: entered promiscuous mode [ 1654.089715][T20407] veth1_macvtap: entered promiscuous mode [ 1654.098681][T11812] Bluetooth: hci5: command tx timeout [ 1654.123316][T20684] jffs2: notice: (20684) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1654.185075][T20407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1654.266751][T20407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1654.770703][T20686] lo speed is unknown, defaulting to 1000 [ 1655.032971][ T8315] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1655.186811][ T8315] usb 3-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice= 0.00 [ 1655.188297][ T8315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.535632][ T9722] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1655.589415][ T9722] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1655.599676][ T9722] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1655.608886][ T9722] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1655.611687][ T9722] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1656.182518][ T9722] Bluetooth: hci5: command tx timeout [ 1656.516552][ T8315] plfxlc 3-1:1.0: Firmware Version: 0 [ 1656.516608][ T8315] plfxlc 3-1:1.0: Unit type is station [ 1657.180063][T20717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3134'. [ 1657.180551][T20717] netlink: 'syz.2.3134': attribute type 17 has an invalid length. [ 1658.093150][ T9722] Bluetooth: hci7: command tx timeout [ 1658.167246][T20731] misc userio: No port type given on /dev/userio [ 1658.228454][T20730] misc userio: The device must be registered before sending interrupts [ 1658.228770][T20730] misc userio: The device must be registered before sending interrupts [ 1658.228915][T20730] misc userio: The device must be registered before sending interrupts [ 1658.292479][ T8315] plfxlc 3-1:1.0: vendor command failed (-71) [ 1658.292506][ T8315] plfxlc 3-1:1.0: FPGA download failed (-22) [ 1659.155090][T20746] netlink: 'syz.2.3137': attribute type 4 has an invalid length. [ 1660.075876][T20744] lo speed is unknown, defaulting to 1000 [ 1660.188103][ T9722] Bluetooth: hci7: command tx timeout [ 1660.482561][ T2834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.482589][ T2834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.544925][ T8315] plfxlc 3-1:1.0: pureLifi:Device error [ 1660.544974][ T8315] plfxlc 3-1:1.0: probe with driver plfxlc failed with error -22 [ 1660.613619][ T8315] usb 3-1: USB disconnect, device number 31 [ 1660.919991][T20699] lo speed is unknown, defaulting to 1000 [ 1660.943901][ T2834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.943925][ T2834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.011412][ T2831] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.011480][ T2831] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.012525][ T2831] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.012569][ T2831] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.252442][ T9722] Bluetooth: hci7: command tx timeout [ 1662.475903][T20785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.431174][T20558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1663.479753][T20558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1663.536162][T20558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1663.586490][T20558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1663.604683][T20558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1663.691459][T20558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1663.762538][T20558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1663.834266][T20558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1664.332747][ T9722] Bluetooth: hci7: command tx timeout [ 1664.515495][T20825] lo speed is unknown, defaulting to 1000 [ 1665.761810][T20699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.761959][T20699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.762170][T20699] bridge_slave_0: entered allmulticast mode [ 1665.780937][T20699] bridge_slave_0: entered promiscuous mode [ 1665.807616][T20699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.807762][T20699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.807967][T20699] bridge_slave_1: entered allmulticast mode [ 1665.822947][T20699] bridge_slave_1: entered promiscuous mode [ 1666.192240][T20699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1666.200568][T20699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.309531][T20558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1666.337161][T20699] team0: Port device team_slave_0 added [ 1666.369042][T20699] team0: Port device team_slave_1 added [ 1666.675210][T20875] jffs2: notice: (20875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1666.910242][T20878] lo speed is unknown, defaulting to 1000 [ 1667.700855][T20699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.700876][T20699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.700904][T20699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.015098][T20881] rdma_rxe: rxe_newlink: failed to add lo [ 1668.116614][T20699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.116635][T20699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.116665][T20699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.287208][T20888] rdma_rxe: rxe_newlink: failed to add dummy0 [ 1668.666385][T20558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.002132][T20901] netlink: 'syz.9.3151': attribute type 4 has an invalid length. [ 1669.099418][T13379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.099559][T13379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.288283][T20699] hsr_slave_0: entered promiscuous mode [ 1669.298814][T20699] hsr_slave_1: entered promiscuous mode [ 1669.301860][T20699] debugfs: 'hsr0' already exists in 'hsr' [ 1669.301889][T20699] Cannot create hsr debugfs directory [ 1669.417349][T13379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.417504][T13379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.606631][T20899] lo speed is unknown, defaulting to 1000 [ 1670.713311][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1670.713335][ T37] audit: type=1326 audit(1789419368.430:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1670.713468][ T37] audit: type=1326 audit(1789419368.430:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1670.716071][ T37] audit: type=1326 audit(1789419368.430:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1670.716288][ T37] audit: type=1326 audit(1789419368.430:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1670.716548][ T37] audit: type=1326 audit(1789419368.430:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1670.717263][ T37] audit: type=1326 audit(1789419368.430:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1670.717871][ T37] audit: type=1326 audit(1789419368.430:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1670.721863][ T37] audit: type=1326 audit(1789419368.430:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1670.772545][ T37] audit: type=1326 audit(1789419368.440:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1670.772605][ T37] audit: type=1326 audit(1789419368.440:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.8.3157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017474e159 code=0x7ffc0000 [ 1675.277148][ T36] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1675.298981][T20987] ceph: No mds server is up or the cluster is laggy [ 1675.360254][ T36] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1675.626832][ T36] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1676.439485][T20558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.034442][T20558] veth0_vlan: entered promiscuous mode [ 1679.385548][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1680.129683][T20558] veth1_vlan: entered promiscuous mode [ 1680.519156][T21062] lo speed is unknown, defaulting to 1000 [ 1681.220146][T20558] veth0_macvtap: entered promiscuous mode [ 1681.234917][T20699] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1681.339551][T20699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1681.358868][T20699] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1681.425999][T20699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1681.431028][T20699] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1681.471085][T20699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1681.484383][T20558] veth1_macvtap: entered promiscuous mode [ 1681.503979][T20699] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1681.563597][T20699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1681.991491][T20558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1682.058019][T20558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.857125][ T2831] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.857873][ T2831] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.858323][ T2831] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.127253][ T2831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.127278][ T2831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.196051][T20699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.353984][ T2831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.354034][ T2831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.476573][T20699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1684.548186][ T2831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.548271][ T2831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1684.608245][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.609508][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.637739][ T1142] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.538368][T10755] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1686.707971][T21141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.724422][T10755] usb 10-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 1686.727124][T10755] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1686.727166][T10755] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1686.730828][T10755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.730855][T10755] usb 10-1: Product: syz [ 1686.730872][T10755] usb 10-1: Manufacturer: syz [ 1686.730886][T10755] usb 10-1: SerialNumber: syz [ 1687.098923][T10755] kaweth 10-1:1.0: Firmware present in device. [ 1687.261646][T10755] kaweth 10-1:1.0: Statistics collection: 0 [ 1687.261676][T10755] kaweth 10-1:1.0: Multicast filter limit: 0 [ 1687.261693][T10755] kaweth 10-1:1.0: MTU: 0 [ 1687.261709][T10755] kaweth 10-1:1.0: Read MAC address 00:00:00:00:00:00 [ 1687.934084][T10755] kaweth 10-1:1.0: Error setting receive filter [ 1687.934404][T10755] kaweth 10-1:1.0: probe with driver kaweth failed with error -5 [ 1687.979585][T10755] usb 10-1: USB disconnect, device number 2 [ 1688.121887][T21164] netlink: 220 bytes leftover after parsing attributes in process `syz.8.3186'. [ 1688.121905][T21164] tc_dump_action: action bad kind [ 1688.187522][T20699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1689.056003][T20699] veth0_vlan: entered promiscuous mode [ 1689.076386][T20699] veth1_vlan: entered promiscuous mode [ 1689.331709][T20699] veth0_macvtap: entered promiscuous mode [ 1689.365371][T20699] veth1_macvtap: entered promiscuous mode [ 1689.397482][T21193] rdma_rxe: rxe_newlink: failed to add lo [ 1689.523660][T20699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1690.020360][T20699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1690.051471][T11812] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1690.163553][T11812] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1690.193398][ T2834] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.193927][ T2834] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.194004][ T2834] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.196254][ T1115] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.210296][T11812] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1690.258728][T11812] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1690.259791][T11812] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1690.828202][T21210] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3196'. [ 1690.828220][T21210] tc_dump_action: action bad kind [ 1691.974992][ T5794] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1692.177627][ T5794] usb 10-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1692.274714][ T5794] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.274752][ T5794] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.274796][ T5794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.716852][ T9722] Bluetooth: hci8: command tx timeout [ 1694.243657][ T5794] usbhid 10-1:1.0: can't add hid device: -71 [ 1694.243794][ T5794] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1694.369352][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.369378][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.394204][ T5794] usb 10-1: USB disconnect, device number 3 [ 1694.817768][ T9722] Bluetooth: hci8: command tx timeout [ 1695.311293][ T5794] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1695.516165][ T2834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.516191][ T2834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.577938][ T5794] usb 10-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice= 0.01 [ 1695.579779][ T5794] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1695.579813][ T5794] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1695.582954][ T5794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.582982][ T5794] usb 10-1: Product: syz [ 1695.582997][ T5794] usb 10-1: Manufacturer: syz [ 1695.583014][ T5794] usb 10-1: SerialNumber: syz [ 1695.666628][T21231] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1695.666884][T21231] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1695.739545][T21203] lo speed is unknown, defaulting to 1000 [ 1696.869972][ T5794] asix 10-1:1.0: probe with driver asix failed with error -71 [ 1696.892696][ T9722] Bluetooth: hci8: command tx timeout [ 1696.999930][ T5794] usb 10-1: USB disconnect, device number 4 [ 1697.090565][T21252] netlink: 'syz.6.3202': attribute type 4 has an invalid length. [ 1698.099191][T21283] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3207'. [ 1698.099217][T21283] tc_dump_action: action bad kind [ 1698.973946][ T9722] Bluetooth: hci8: command tx timeout [ 1699.899872][T21314] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3210'. [ 1701.208828][T21203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.210538][T21203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.210762][T21203] bridge_slave_0: entered allmulticast mode [ 1701.240593][T21203] bridge_slave_0: entered promiscuous mode [ 1701.264670][T21203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.264826][T21203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.265046][T21203] bridge_slave_1: entered allmulticast mode [ 1701.271069][T21203] bridge_slave_1: entered promiscuous mode [ 1701.382761][T21203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.387976][T21203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.586099][T21342] Bluetooth: MGMT ver 1.23 [ 1701.715588][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 1701.772481][ T60] Bluetooth: hci6: command 0x0406 tx timeout [ 1702.038646][T21203] team0: Port device team_slave_0 added [ 1702.140569][T21203] team0: Port device team_slave_1 added [ 1702.297870][T21203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.297890][T21203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.297919][T21203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.352514][T21203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.352535][T21203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.352567][T21203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.362193][T21203] hsr_slave_0: entered promiscuous mode [ 1703.369640][T21203] hsr_slave_1: entered promiscuous mode [ 1703.374213][T21203] debugfs: 'hsr0' already exists in 'hsr' [ 1703.374241][T21203] Cannot create hsr debugfs directory [ 1706.493621][ T5594] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1706.535447][ T5594] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1706.547681][T21384] ceph: No mds server is up or the cluster is laggy [ 1706.714628][T21396] netlink: 'syz.7.3225': attribute type 10 has an invalid length. [ 1708.207345][T21396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1708.210973][T21396] team0: Port device netdevsim1 added [ 1710.324423][ T9722] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1710.410681][ T9722] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1710.434116][ T9722] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1710.466290][ T9722] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1710.467605][ T9722] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1713.268366][ T9722] Bluetooth: hci9: command tx timeout [ 1715.143908][T21433] lo speed is unknown, defaulting to 1000 [ 1715.292480][ T9722] Bluetooth: hci9: command tx timeout [ 1715.767545][T21496] netlink: 'syz.7.3241': attribute type 10 has an invalid length. [ 1717.372896][ T9722] Bluetooth: hci9: command tx timeout [ 1717.423317][T21203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1717.469601][T21203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1717.490040][T21203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1717.541667][T21203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1717.560065][T21203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1717.630014][T21203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1717.640232][T21203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1717.693320][T21203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1718.623427][T21433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.623664][T21433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.623863][T21433] bridge_slave_0: entered allmulticast mode [ 1718.627756][T21433] bridge_slave_0: entered promiscuous mode [ 1718.639705][T21203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1718.640278][T21433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.640478][T21433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.640658][T21433] bridge_slave_1: entered allmulticast mode [ 1718.645694][T21433] bridge_slave_1: entered promiscuous mode [ 1718.754780][T21433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1718.760937][T21203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1718.772130][T21433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.989015][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.990867][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.011276][T21433] team0: Port device team_slave_0 added [ 1719.080788][T21433] team0: Port device team_slave_1 added [ 1719.208616][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.210381][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.238238][T21433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1719.238258][T21433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.238288][T21433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1719.257876][T21433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.257893][T21433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.257919][T21433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.453313][ T9722] Bluetooth: hci9: command tx timeout [ 1719.474421][T21433] hsr_slave_0: entered promiscuous mode [ 1719.479604][T21433] hsr_slave_1: entered promiscuous mode [ 1719.482586][T21433] debugfs: 'hsr0' already exists in 'hsr' [ 1719.482615][T21433] Cannot create hsr debugfs directory [ 1721.836123][T21203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.968875][T21203] veth0_vlan: entered promiscuous mode [ 1721.982276][T21203] veth1_vlan: entered promiscuous mode [ 1722.467011][T21203] veth0_macvtap: entered promiscuous mode [ 1722.481380][T21203] veth1_macvtap: entered promiscuous mode [ 1722.550338][T21203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1722.581253][T21203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1722.678623][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.680377][ T2831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.681184][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.782673][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.340937][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1723.340963][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1724.202159][ T9722] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1724.289909][ T9722] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1724.326730][ T9722] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1724.349720][ T9722] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1724.350519][ T9722] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1724.670343][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1724.670365][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.506955][T21433] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1725.559419][T21433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1725.561112][T21433] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1725.604177][T21433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1725.607627][T21433] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1726.642302][T21433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1726.644481][T21433] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1726.657530][T11812] Bluetooth: hci10: command tx timeout [ 1726.760923][T21433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1727.101716][T21633] lo speed is unknown, defaulting to 1000 [ 1727.292436][T11812] Bluetooth: hci2: command 0x0406 tx timeout [ 1727.352653][T21433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1727.486157][T21433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.504877][T21292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.505091][T21292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1727.556020][T21292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.556158][T21292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1728.734116][ T9722] Bluetooth: hci10: command tx timeout [ 1729.010499][T21689] nvme nvme0: failed to connect socket: -512 [ 1729.613695][T21433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1729.993613][T21433] veth0_vlan: entered promiscuous mode [ 1730.150825][T21433] veth1_vlan: entered promiscuous mode [ 1730.313833][T21633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.314863][T21633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.315082][T21633] bridge_slave_0: entered allmulticast mode [ 1730.318360][T21633] bridge_slave_0: entered promiscuous mode [ 1730.372275][T21738] netlink: 'syz.0.3253': attribute type 9 has an invalid length. [ 1730.380484][T21633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.380628][T21633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.380867][T21633] bridge_slave_1: entered allmulticast mode [ 1730.411447][T21633] bridge_slave_1: entered promiscuous mode [ 1730.824841][ T9722] Bluetooth: hci10: command tx timeout [ 1732.894446][ T9722] Bluetooth: hci10: command tx timeout [ 1733.375643][T21633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.431956][T21633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.641631][T21433] veth0_macvtap: entered promiscuous mode [ 1733.663380][T21633] team0: Port device team_slave_0 added [ 1734.066325][T21633] team0: Port device team_slave_1 added [ 1734.314285][T21433] veth1_macvtap: entered promiscuous mode [ 1734.546135][T11812] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1734.600713][T11812] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1734.630487][T11812] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1734.646229][T11812] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1734.649516][T11812] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1736.696465][T21633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.696486][T21633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.696515][T21633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.798817][T21633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.798837][T21633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.798867][T21633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.179780][T11812] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1738.141454][T11812] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1738.155355][T11812] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1738.196530][T11812] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1738.217887][T11812] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1738.244207][T21633] hsr_slave_0: entered promiscuous mode [ 1738.245512][T21633] hsr_slave_1: entered promiscuous mode [ 1738.246422][T21633] debugfs: 'hsr0' already exists in 'hsr' [ 1738.433794][T21633] Cannot create hsr debugfs directory [ 1738.442162][T21433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1738.582586][T11812] Bluetooth: hci11: command tx timeout [ 1738.710990][T21433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.628823][T21751] lo speed is unknown, defaulting to 1000 [ 1739.646453][T21758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.647962][T21758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.648010][T21758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.648048][T21758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.385314][T21758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.385336][T21758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.428313][T11812] Bluetooth: hci12: command tx timeout [ 1740.632169][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.652939][T11812] Bluetooth: hci11: command tx timeout [ 1741.713785][T21769] lo speed is unknown, defaulting to 1000 [ 1741.993355][T21757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.993382][T21757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.478941][T21820] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1742.493484][T11812] Bluetooth: hci12: command tx timeout [ 1742.732985][T11812] Bluetooth: hci11: command tx timeout [ 1742.990668][T21633] team0: Port device netdevsim1 removed [ 1743.728782][T21842] netlink: 'syz.1.3262': attribute type 9 has an invalid length. [ 1744.572477][T11812] Bluetooth: hci12: command tx timeout [ 1744.813469][T11812] Bluetooth: hci11: command tx timeout [ 1744.838857][T21751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.839046][T21751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.839289][T21751] bridge_slave_0: entered allmulticast mode [ 1744.851999][T21751] bridge_slave_0: entered promiscuous mode [ 1745.038482][T21751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.039052][T21751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.039316][T21751] bridge_slave_1: entered allmulticast mode [ 1745.061907][T21751] bridge_slave_1: entered promiscuous mode [ 1745.414163][T21751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.469505][T21751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.682474][T11812] Bluetooth: hci12: command tx timeout [ 1746.856464][T21769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.856626][T21769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.856902][T21769] bridge_slave_0: entered allmulticast mode [ 1746.862706][T21769] bridge_slave_0: entered promiscuous mode [ 1746.882933][T21751] team0: Port device team_slave_0 added [ 1746.886274][T21769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.886421][T21769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.886646][T21769] bridge_slave_1: entered allmulticast mode [ 1746.889968][T21769] bridge_slave_1: entered promiscuous mode [ 1746.925386][T21751] team0: Port device team_slave_1 added [ 1747.463164][T21769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.559886][T21751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.559907][T21751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.559938][T21751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1747.646782][T21769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1747.655013][T21894] net_ratelimit: 147 callbacks suppressed [ 1747.655035][T21894] netlink: zone id is out of range [ 1747.655046][T21894] netlink: zone id is out of range [ 1747.655055][T21894] netlink: zone id is out of range [ 1747.655064][T21894] netlink: zone id is out of range [ 1747.655073][T21894] netlink: zone id is out of range [ 1747.655083][T21894] netlink: zone id is out of range [ 1747.655099][T21894] netlink: zone id is out of range [ 1747.655108][T21894] netlink: zone id is out of range [ 1747.655117][T21894] netlink: zone id is out of range [ 1747.655127][T21894] netlink: zone id is out of range [ 1747.927979][T21751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.927998][T21751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.928024][T21751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1748.161654][T21769] team0: Port device team_slave_0 added [ 1748.178671][T21769] team0: Port device team_slave_1 added [ 1748.353832][T21633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1748.388053][T21633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1748.514438][T21633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1748.571388][T21633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1748.596728][T21751] hsr_slave_0: entered promiscuous mode [ 1748.598436][T21751] hsr_slave_1: entered promiscuous mode [ 1748.599349][T21751] debugfs: 'hsr0' already exists in 'hsr' [ 1748.599378][T21751] Cannot create hsr debugfs directory [ 1748.600469][T21769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.600479][T21769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.600495][T21769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.601152][T21898] lo speed is unknown, defaulting to 1000 [ 1748.603914][T21633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1748.710486][T21633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1748.722973][T21769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.722992][T21769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.723022][T21769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1748.727917][T21633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1748.957612][T21633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1749.528876][T21769] hsr_slave_0: entered promiscuous mode [ 1749.530385][T21769] hsr_slave_1: entered promiscuous mode [ 1749.530987][T21769] debugfs: 'hsr0' already exists in 'hsr' [ 1749.531014][T21769] Cannot create hsr debugfs directory [ 1751.031847][T21751] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.663461][T21751] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.957987][T21633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1752.387568][T21970] netlink: 'syz.1.3270': attribute type 9 has an invalid length. [ 1752.441252][T21751] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.590906][T21633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.686862][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.687506][ T974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.451647][ T2839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.451814][ T2839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.399334][T21751] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.154642][ T9722] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1758.247222][ T9722] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1758.287832][T22017] oxu210hp-hcd pcspkr: error -ENXIO: IRQ index 0 not found [ 1758.310517][ T9722] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1758.349608][ T9722] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1758.372842][ T9722] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1758.674015][T22023] net_ratelimit: 147 callbacks suppressed [ 1758.674041][T22023] netlink: zone id is out of range [ 1758.674052][T22023] netlink: zone id is out of range [ 1758.674062][T22023] netlink: zone id is out of range [ 1758.674071][T22023] netlink: zone id is out of range [ 1758.674081][T22023] netlink: zone id is out of range [ 1758.674090][T22023] netlink: zone id is out of range [ 1758.674106][T22023] netlink: zone id is out of range [ 1758.674116][T22023] netlink: zone id is out of range [ 1758.674126][T22023] netlink: zone id is out of range [ 1758.674135][T22023] netlink: zone id is out of range [ 1758.688079][T21769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.431779][T21633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1759.850794][T22044] trusted_key: encrypted_key: key user:syz not found [ 1760.119346][T21769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.502768][T11812] Bluetooth: hci13: command tx timeout [ 1760.848902][T21769] team0: Port device netdevsim1 removed [ 1760.851074][T21769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.266644][T22059] lo speed is unknown, defaulting to 1000 [ 1761.271429][T21633] veth0_vlan: entered promiscuous mode [ 1761.361397][T21633] veth1_vlan: entered promiscuous mode [ 1761.818008][T21769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.944566][T22011] lo speed is unknown, defaulting to 1000 [ 1762.179681][T21633] veth0_macvtap: entered promiscuous mode [ 1762.188261][T21633] veth1_macvtap: entered promiscuous mode [ 1762.576161][T11812] Bluetooth: hci13: command tx timeout [ 1762.809088][T21633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1762.990416][T21633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.139234][T11812] Bluetooth: hci4: command 0x0406 tx timeout [ 1763.883693][T21751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1763.990113][T21751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1764.156438][T21751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1764.348749][T21751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1764.493648][T21751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1764.695604][ T9722] Bluetooth: hci13: command tx timeout [ 1764.809222][T21751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1764.943705][T21751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1764.989661][T21751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1766.733410][ T9722] Bluetooth: hci13: command tx timeout [ 1768.030187][T22072] netlink: 'syz.1.3278': attribute type 9 has an invalid length. [ 1768.296821][ T2834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.296846][ T2834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.165433][T21769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1769.206344][T21769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1769.236506][T21769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1769.237150][ T974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.237169][ T974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.300574][T21769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1769.301174][T22011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.302236][T22011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.315419][T22011] bridge_slave_0: entered allmulticast mode [ 1769.318329][T22011] bridge_slave_0: entered promiscuous mode [ 1769.331751][T21769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1769.389114][T21769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1769.393588][T22011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.393763][T22011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.393998][T22011] bridge_slave_1: entered allmulticast mode [ 1769.396678][T22011] bridge_slave_1: entered promiscuous mode [ 1769.407039][T21769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1769.412692][T16382] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1769.478962][T21769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1769.584047][T16382] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1769.619636][T16382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.619669][T16382] usb 2-1: Product: syz [ 1769.619686][T16382] usb 2-1: Manufacturer: syz [ 1769.619702][T16382] usb 2-1: SerialNumber: syz [ 1769.823781][T22011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1770.539685][T16382] usb 2-1: Cannot retrieve CPort count: -110 [ 1770.539747][T16382] usb 2-1: Cannot retrieve CPort count: -110 [ 1770.539787][T16382] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1770.614234][T22011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1770.976304][T22107] net_ratelimit: 147 callbacks suppressed [ 1770.976330][T22107] netlink: zone id is out of range [ 1770.976341][T22107] netlink: zone id is out of range [ 1770.976351][T22107] netlink: zone id is out of range [ 1770.976360][T22107] netlink: zone id is out of range [ 1770.976370][T22107] netlink: zone id is out of range [ 1770.976380][T22107] netlink: zone id is out of range [ 1770.976395][T22107] netlink: zone id is out of range [ 1770.976405][T22107] netlink: zone id is out of range [ 1770.976415][T22107] netlink: zone id is out of range [ 1770.976424][T22107] netlink: zone id is out of range [ 1771.395764][T22011] team0: Port device team_slave_0 added [ 1771.401895][T22011] team0: Port device team_slave_1 added [ 1771.517598][T22011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1771.517618][T22011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1771.517647][T22011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1771.576124][T22011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1771.576144][T22011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1771.576170][T22011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1771.776768][T22011] hsr_slave_0: entered promiscuous mode [ 1771.778238][T22011] hsr_slave_1: entered promiscuous mode [ 1771.779432][T22011] debugfs: 'hsr0' already exists in 'hsr' [ 1771.779461][T22011] Cannot create hsr debugfs directory [ 1771.920315][T22113] rdma_rxe: rxe_newlink: failed to add lo [ 1772.204662][T21751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1772.426211][T21769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1772.450471][T21751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1772.485978][T21757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.486136][T21757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1772.525242][T21757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.525380][T21757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1772.624018][ T38] INFO: task syz.5.3077:20259 blocked for more than 143 seconds. [ 1772.624052][ T38] Tainted: G L syzkaller #0 [ 1772.624065][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1772.624076][ T38] task:syz.5.3077 state:D stack:26648 pid:20259 tgid:20257 ppid:15719 ** replaying previous printk message ** [ 1772.624076][ T38] task:syz.5.3077 state:D stack:26648 pid:20259 tgid:20257 ppid:15719 task_flags:0x400040 flags:0x00080002 [ 1772.624155][ T38] Call Trace: [ 1772.624165][ T38] [ 1772.624182][ T38] __schedule+0x16d9/0x5700 [ 1772.624254][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1772.624288][ T38] ? __pfx___schedule+0x10/0x10 [ 1772.624335][ T38] rt_mutex_schedule+0x76/0xf0 [ 1772.624368][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1772.624405][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1772.624434][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1772.624463][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1772.624490][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1772.624538][ T38] ? write_threads+0x3b4/0x610 [ 1772.624615][ T38] ? write_threads+0x3b4/0x610 [ 1772.624636][ T38] mutex_lock_nested+0x168/0x1d0 [ 1772.624667][ T38] write_threads+0x3b4/0x610 [ 1772.624694][ T38] ? __pfx_write_threads+0x10/0x10 [ 1772.624740][ T38] ? _copy_from_user+0x94/0xb0 [ 1772.624773][ T38] ? simple_transaction_get+0x130/0x170 [ 1772.624808][ T38] nfsctl_transaction_write+0x112/0x160 [ 1772.624834][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1772.624858][ T38] vfs_write+0x29f/0xbb0 [ 1772.624897][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1772.624924][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1772.624974][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1772.625004][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1772.625026][ T38] ? fdget_pos+0x252/0x320 [ 1772.625059][ T38] ksys_write+0x156/0x270 [ 1772.625095][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1772.625136][ T38] do_syscall_64+0x166/0x520 [ 1772.625251][ T38] ? trace_irq_disable+0x3b/0x140 [ 1772.625283][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.625308][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1772.625338][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.625361][ T38] RIP: 0033:0x7f47a306e159 [ 1772.625400][ T38] RSP: 002b:00007f47a12a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1772.625426][ T38] RAX: ffffffffffffffda RBX: 00007f47a32f6090 RCX: 00007f47a306e159 [ 1772.625443][ T38] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1772.625458][ T38] RBP: 00007f47a310503b R08: 0000000000000000 R09: 0000000000000000 [ 1772.625473][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1772.625488][ T38] R13: 00007f47a32f6128 R14: 00007f47a32f6090 R15: 00007ffe2c1e2148 [ 1772.625525][ T38] [ 1772.625589][ T38] [ 1772.625589][ T38] Showing all locks held in the system: [ 1772.625601][ T38] locks held by ktimers/1/29: 9, last CPU#1: [ 1772.625669][ T38] #0: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1772.625783][ T38] #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x790 [ 1772.627516][ T38] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: sched_balance_domains+0xe8/0x880 [ 1772.627549][ T38] #3: ffff8880b8724160 (tasklet_sync_callback.cb_lock.lock.wait_lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 1772.627587][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1772.627618][ T38] #5: ffff888096651c58 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 1772.627649][ T38] #6: ffff8880b87293d0 ((lock).lock.wait_lock#3){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 1772.627683][ T38] #7: ffff888096651cd8 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 1772.627725][ T38] #8: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __queue_work+0x225/0x1120 [ 1772.627774][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1772.627784][ T38] #0: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1772.627841][ T38] locks held by kworker/u8:8/1113: 3, on CPU#0: [ 1772.627850][ T38] #0: ffff8880325c1138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.627884][ T38] #1: ffffc90006ad7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.627918][ T38] #2: ffffffff8f5d3f78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 1772.628005][ T38] locks held by kworker/u8:18/2944: 5, last CPU#0: [ 1772.628015][ T38] #0: ffff888032875938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.628048][ T38] #1: ffffc9000e8b7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.628108][ T38] #2: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1772.628167][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1772.628214][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1772.628247][ T38] locks held by getty/5347: 2, on CPU#1: [ 1772.628257][ T38] #0: ffff8880328090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1772.628327][ T38] #1: ffffc900044d62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1772.628363][ T38] locks held by kworker/1:9/10735: 3, on CPU#1: [ 1772.628372][ T38] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.628406][ T38] #1: ffffc900102e7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.628440][ T38] #2: ffffffff8f5d3f78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1772.628582][ T38] locks held by kworker/u9:4/11812: 3, on CPU#0: [ 1772.628599][ T38] #0: ffff888066e27938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.628648][ T38] #1: ffffc90004a9fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.628682][ T38] #2: ffff88805fa90f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1772.628743][ T38] locks held by kworker/1:2/16382: 2, on CPU#1: [ 1772.628753][ T38] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.628786][ T38] #1: ffffc90006b17c40 ((work_completion)(&dev->recv_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1772.628824][ T38] locks held by syz.5.3077/20258: 3, on CPU#0: [ 1772.628833][ T38] #0: ffff8880358f1928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.628864][ T38] #1: ffff888050fd2510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.628899][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1772.628930][ T38] locks held by syz.5.3077/20259: 3, on CPU#0: [ 1772.628939][ T38] #0: ffff88802fbf8728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.640872][ T38] #1: ffff888050fd2510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.640932][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1772.640981][ T38] locks held by syz.3.3093/20382: 3, on CPU#0: [ 1772.640997][ T38] #0: ffff8880604eb528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.641044][ T38] #1: ffff888061f50510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.641108][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1772.641155][ T38] locks held by syz.3.3093/20385: 3, on CPU#0: [ 1772.641170][ T38] #0: ffff888029e44128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.641217][ T38] #1: ffff888061f50510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.641270][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1772.641316][ T38] locks held by syz.3.3093/20386: 3, on CPU#1: [ 1772.641330][ T38] #0: ffff888029e44328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.641378][ T38] #1: ffff888061f50510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.641430][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1772.641477][ T38] locks held by syz.4.3103/20433: 3, on CPU#0: [ 1772.641491][ T38] #0: ffff888033f79328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.641537][ T38] #1: ffff888036ed0510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.641590][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1772.641637][ T38] locks held by syz.4.3103/20434: 3, on CPU#1: [ 1772.641650][ T38] #0: ffff888033bd1f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.641698][ T38] #1: ffff888036ed0510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.641751][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1772.641797][ T38] locks held by syz.4.3103/20435: 3, on CPU#0: [ 1772.641811][ T38] #0: ffff888033f78d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.641863][ T38] #1: ffff888036ed0510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.641918][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1772.641967][ T38] locks held by syz-executor/20699: 2, on CPU#0: [ 1772.641982][ T38] #0: ffff88805e2ca0e0 (&type->s_umount_key#68){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1772.642034][ T38] #1: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1772.642095][ T38] locks held by syz.2.3163/20982: 3, on CPU#1: [ 1772.642110][ T38] #0: ffff88806078a128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.642159][ T38] #1: ffff88805e7dc510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.642211][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1772.642276][ T38] locks held by syz.2.3163/20983: 3, on CPU#1: [ 1772.646165][ T38] #0: ffff888059eba728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.646226][ T38] #1: ffff88805e7dc510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.646280][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1772.646328][ T38] locks held by syz.2.3163/20989: 3, on CPU#0: [ 1772.646343][ T38] #0: ffff888026abfb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.646391][ T38] #1: ffff88805e7dc510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.646443][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1772.646492][ T38] locks held by syz-executor/21203: 2, on CPU#1: [ 1772.646506][ T38] #0: ffff88802c3880e0 (&type->s_umount_key#68){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1772.646558][ T38] #1: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1772.646612][ T38] locks held by syz.8.3199/21224: 2, on CPU#1: [ 1772.646626][ T38] #0: ffff88803fee40e0 (&type->s_umount_key#68){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1772.646677][ T38] #1: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1772.646733][ T38] locks held by syz.9.3228/21419: 3, on CPU#0: [ 1772.646747][ T38] #0: ffff8880557b2328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.646796][ T38] #1: ffff88802625e510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.646853][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1772.646903][ T38] locks held by syz.9.3228/21420: 3, on CPU#0: [ 1772.646918][ T38] #0: ffff8880557b3f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.646966][ T38] #1: ffff88802625e510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.647019][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1772.647065][ T38] locks held by syz.9.3228/21422: 3, on CPU#1: [ 1772.647087][ T38] #0: ffff888062460d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.647135][ T38] #1: ffff88802625e510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.647188][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1772.647331][ T38] locks held by syz.6.3244/21519: 3, on CPU#1: [ 1772.647345][ T38] #0: ffff8880125e9528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1772.647393][ T38] #1: ffff888033390510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.647446][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1772.647498][ T38] locks held by syz-executor/21751: 1, on CPU#1: [ 1772.647513][ T38] #0: ffffffff8f5d3f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1772.647615][ T38] locks held by kworker/u8:7/21757: 1, last CPU#0: [ 1772.653702][ T38] #0: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1772.653765][ T38] locks held by syz-executor/21769: 1, on CPU#1: [ 1772.653780][ T38] #0: ffffffff8f5d3f78 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 1772.653887][ T38] locks held by syz-executor/22011: 8, last CPU#0: [ 1772.653902][ T38] #0: ffff888034a98510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1772.653958][ T38] #1: ffff888092a33878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1772.654015][ T38] #2: ffff8880297e2788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1772.654075][ T38] #3: ffffffff8ee44818 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1772.654229][ T38] #4: ffff88802c677160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1772.654311][ T38] #5: ffff88802a302310 (&devlink->lock_key#37){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1772.654362][ T38] #6: ffffffff8f5d3f78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1772.654437][ T38] #7: ffff888071109060 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x11d0/0x2130 [ 1772.654502][ T38] [ 1772.654508][ T38] ============================================= [ 1772.654508][ T38] [ 1772.654518][ T38] NMI backtrace for cpu 0 [ 1772.654535][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1772.654561][ T38] Tainted: [L]=SOFTLOCKUP [ 1772.654569][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1772.654580][ T38] Call Trace: [ 1772.654589][ T38] [ 1772.654597][ T38] dump_stack_lvl+0xe8/0x150 [ 1772.654627][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1772.654674][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1772.654697][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1772.654723][ T38] sys_info+0x135/0x170 [ 1772.654743][ T38] watchdog+0xfd7/0x1030 [ 1772.654782][ T38] ? watchdog+0x1c7/0x1030 [ 1772.654813][ T38] kthread+0x38b/0x470 [ 1772.654833][ T38] ? __pfx_watchdog+0x10/0x10 [ 1772.654855][ T38] ? __pfx_kthread+0x10/0x10 [ 1772.654876][ T38] ret_from_fork+0x514/0xb70 [ 1772.654901][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1772.654921][ T38] ? __switch_to+0xc89/0x1420 [ 1772.654968][ T38] ? __pfx_kthread+0x10/0x10 [ 1772.654989][ T38] ret_from_fork_asm+0x1a/0x30 [ 1772.655023][ T38] [ 1772.655031][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1772.655059][ C1] NMI backtrace for cpu 1 [ 1772.655078][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1772.655102][ C1] Tainted: [L]=SOFTLOCKUP [ 1772.655109][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1772.655119][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1772.655194][ C1] Code: e8 6e fc 64 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f e7 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1772.655210][ C1] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 1772.655226][ C1] RAX: 1ffffffff33d4400 RBX: 00000000000003fd RCX: 0000000000000000 [ 1772.655239][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1772.655250][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1772.655262][ C1] R10: dffffc0000000000 R11: ffffffff85619c70 R12: dffffc0000000000 [ 1772.655274][ C1] R13: 0000000000000000 R14: ffffffff99ea2220 R15: 0000000000000000 [ 1772.655286][ C1] FS: 0000000000000000(0000) GS:ffff888125ccb000(0000) knlGS:0000000000000000 [ 1772.655300][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1772.655313][ C1] CR2: 00007f83f609b840 CR3: 000000003fd02000 CR4: 00000000003526f0 [ 1772.655330][ C1] Call Trace: [ 1772.655338][ C1] [ 1772.655346][ C1] wait_for_lsr+0x190/0x300 [ 1772.655369][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 1772.655410][ C1] serial8250_console_write+0xac5/0x1230 [ 1772.655434][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1772.655461][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1772.655491][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1772.655515][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1772.655546][ C1] nbcon_kthread_func+0x679/0x880 [ 1772.655570][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1772.655597][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1772.655620][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1772.655643][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1772.655667][ C1] kthread+0x38b/0x470 [ 1772.655683][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1772.655702][ C1] ? __pfx_kthread+0x10/0x10 [ 1772.655719][ C1] ret_from_fork+0x514/0xb70 [ 1772.655736][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1772.655752][ C1] ? __switch_to+0xc89/0x1420 [ 1772.655775][ C1] ? __pfx_kthread+0x10/0x10 [ 1772.655792][ C1] ret_from_fork_asm+0x1a/0x30 [ 1772.655815][ C1] [ 1772.663668][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1774.325946][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1774.337155][ T38] Tainted: [L]=SOFTLOCKUP [ 1774.341484][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1774.351541][ T38] Call Trace: [ 1774.354826][ T38] [ 1774.357763][ T38] vpanic+0x56d/0xa60 [ 1774.361756][ T38] ? __pfx___schedule+0x10/0x10 [ 1774.366619][ T38] ? __pfx_vpanic+0x10/0x10 [ 1774.371135][ T38] panic+0xc5/0xd0 [ 1774.374857][ T38] ? __pfx_panic+0x10/0x10 [ 1774.379283][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1774.384758][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1774.390138][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1774.396299][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1774.402473][ T38] watchdog+0x1030/0x1030 [ 1774.406833][ T38] ? watchdog+0x1c7/0x1030 [ 1774.411263][ T38] kthread+0x38b/0x470 [ 1774.415348][ T38] ? __pfx_watchdog+0x10/0x10 [ 1774.420048][ T38] ? __pfx_kthread+0x10/0x10 [ 1774.424649][ T38] ret_from_fork+0x514/0xb70 [ 1774.429249][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1774.434365][ T38] ? __switch_to+0xc89/0x1420 [ 1774.439055][ T38] ? __pfx_kthread+0x10/0x10 [ 1774.443655][ T38] ret_from_fork_asm+0x1a/0x30 [ 1774.448441][ T38] [ 1774.451605][ T38] Kernel Offset: disabled [ 1774.455925][ T38] Rebooting in 86400 seconds..