last executing test programs: 15m38.008753907s ago: executing program 32 (id=1684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 14m34.973867435s ago: executing program 33 (id=1821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60441, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x8075, 0x8, 0x1, 0xff, 0xd, 0x6, 0x10001, 0xfffffffa}}}}]}, 0x58}}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 11m50.769037483s ago: executing program 34 (id=2048): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x4, 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2209148e, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@abort}, {@user_xattr}, {@barrier_val={'barrier', 0x3d, 0x1f4c}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x4000000000010046) 10m30.818176579s ago: executing program 35 (id=2143): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x20400, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x618, &(0x7f0000001600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) unshare(0x26020480) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./mnt/trace_pipe\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) 9m24.305162999s ago: executing program 36 (id=2204): socket$l2tp(0x2, 0x2, 0x73) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x48, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendfile(r0, r0, 0x0, 0x1000200201005) r1 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x2000000000000000) r2 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x32957, 0x0, 0x0, 0x68245b64, 0x8005, 0x0, 0x0, 0x14, 0x0, "ef359f413bb93852f7d6a4ae6dddfad1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9b4afaaf255a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0xfffffffffffffff5]}) creat(&(0x7f0000000180)='./bus\x00', 0xa2) 6m52.788980153s ago: executing program 37 (id=2343): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x4, 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2209148e, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@abort}, {@user_xattr}, {@barrier_val={'barrier', 0x3d, 0x1f4c}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x4000000000010046) 4m21.914420991s ago: executing program 38 (id=2549): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(0x0, 0x9, 0x20000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x90) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2m22.101308384s ago: executing program 39 (id=2793): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) 2m10.89592632s ago: executing program 40 (id=2830): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='4\n', 0x2) close(r2) 2m10.696470323s ago: executing program 41 (id=2834): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\x00', 0x9) 2m8.020595116s ago: executing program 42 (id=2842): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) 2m1.450475656s ago: executing program 2 (id=2897): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ebe2d000000000001090224000100000000090400000103010200092100000001222200090581030800000000"], 0x0) 1m59.992766335s ago: executing program 2 (id=2898): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0), 0x100) close(r0) 1m55.761045215s ago: executing program 43 (id=2870): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) read(r0, &(0x7f0000000400), 0xa) read(r0, &(0x7f0000000400), 0xa) read(r0, &(0x7f0000000400), 0xa) read(r0, &(0x7f0000000400), 0xa) 1m52.935830706s ago: executing program 44 (id=2882): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) 1m44.546372669s ago: executing program 45 (id=2898): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0), 0x100) close(r0) 1m41.693107505s ago: executing program 46 (id=2899): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='0\n', 0x2) 1m33.441416314s ago: executing program 47 (id=2920): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) close(r2) 1m22.227831246s ago: executing program 48 (id=2939): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) 1m14.67635539s ago: executing program 49 (id=2946): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/191, 0xbf}, 0x5}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 1m10.018704132s ago: executing program 9 (id=2984): ioctl$MEMERASE(0xffffffffffffffff, 0x40084d02, &(0x7f0000000900)={0x0, 0x400000}) 1m9.882405173s ago: executing program 9 (id=2985): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001040), &(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000001200)=[{0x0}], 0x1) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001300)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) r11 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r11}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r12 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64(r12, &(0x7f0000005000)=""/4096, 0x1000, 0x0) io_uring_enter(r7, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001400)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001500)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x0, 0x0, 0x1000, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) 1m9.060383745s ago: executing program 9 (id=2986): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) 1m6.388936311s ago: executing program 50 (id=2958): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) 1m6.218233836s ago: executing program 1 (id=2992): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) 1m5.600231373s ago: executing program 51 (id=2959): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) 1m5.225214057s ago: executing program 1 (id=2994): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect(0xffffffffffffffff, &(0x7f0000000100)=@in6={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xa007}, 0x80) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x8000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) clock_adjtime(0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r2, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a373050000000000000011c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126b38f54e663", 0xb9) syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x800440) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) 1m4.124145314s ago: executing program 1 (id=2996): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 1m3.756704058s ago: executing program 1 (id=2998): landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x0, 0x2, 0x9}, 0x30, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m2.834623695s ago: executing program 1 (id=2999): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/exports\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/max_block_size\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/filehandle\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/unlock_filesystem\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/unlock_ip\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/pool_threads\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/reply_cache_stats\x00', 0x0, 0x0) 1m2.695934659s ago: executing program 1 (id=3000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/1024, 0x400) 1m1.152483184s ago: executing program 2 (id=2975): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x0, 0x8e}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m0.294821912s ago: executing program 8 (id=3002): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x30002, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a40)='^,/\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000300)='(\xed\xef(.(\\-]\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) lseek(r1, 0x851, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m0.155001358s ago: executing program 2 (id=3003): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) 59.048583204s ago: executing program 8 (id=3004): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8774da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdf06375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d68f1c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361b851de34ccb3c8071b96f1128d7ee79b41246e5628e70272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0ff22321e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6beffffffff5e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf21dad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d1150129176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040fa0200000000000000002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x10000, {0x3, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x40004, {0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x7, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.917671518s ago: executing program 8 (id=3005): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect(0xffffffffffffffff, &(0x7f0000000100)=@in6={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xa007}, 0x80) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x8000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) clock_adjtime(0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r2, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a373050000000000000011c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126b38f54e663", 0xb9) syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x800440) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) 58.313050727s ago: executing program 2 (id=3006): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/exports\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/max_block_size\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/pool_stats\x00', 0x0, 0x0) 58.156273123s ago: executing program 2 (id=3007): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x3, 0x2, "2df3724a7b088cd6b1c2054f977ef70c078358", 0x6, 0x8}) 57.87864724s ago: executing program 8 (id=3008): landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x0, 0x2, 0x9}, 0x30, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 56.753874875s ago: executing program 8 (id=3009): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/exports\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/max_block_size\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/filehandle\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/unlock_filesystem\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/unlock_ip\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/reply_cache_stats\x00', 0x0, 0x0) 56.56177486s ago: executing program 8 (id=3010): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4a5041) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) r1 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 56.441059708s ago: executing program 0 (id=2993): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7a, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 56.260413665s ago: executing program 0 (id=3011): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000001440)=[{0x5, 0x2401, 0x0, 0x0}], 0x1}) 53.95627741s ago: executing program 52 (id=2986): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) 53.112002462s ago: executing program 0 (id=3017): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001040), &(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000001200)=[{0x0}], 0x1) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001300)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) r11 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r11}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r12 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64(r12, &(0x7f0000005000)=""/4096, 0x1000, 0x0) io_uring_enter(r7, 0x0, 0x1, 0x1, 0x0, 0x0) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001500)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x0, 0x0, 0x1000, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) 53.000391193s ago: executing program 0 (id=3018): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect(0xffffffffffffffff, &(0x7f0000000100)=@in6={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xa007}, 0x80) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x8000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) clock_adjtime(0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r2, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a373050000000000000011c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126b38f54e663", 0xb9) syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x800440) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) 52.021269806s ago: executing program 0 (id=3020): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/exports\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/max_block_size\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/filehandle\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/unlock_filesystem\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/reply_cache_stats\x00', 0x0, 0x0) 51.829544074s ago: executing program 0 (id=3021): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', &(0x7f0000000100)=""/256, 0x100) 47.434897601s ago: executing program 53 (id=3000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/1024, 0x400) 42.516134423s ago: executing program 54 (id=3007): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x3, 0x2, "2df3724a7b088cd6b1c2054f977ef70c078358", 0x6, 0x8}) 42.328648729s ago: executing program 4 (id=3036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000180)={r7}) 40.398969025s ago: executing program 55 (id=3010): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4a5041) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) r1 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 40.38473082s ago: executing program 4 (id=3039): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) 39.476797986s ago: executing program 4 (id=3041): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b010203010902120001"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000001440)=[{0x5, 0x2401, 0x0, 0x0}], 0x1}) 36.371590734s ago: executing program 56 (id=3021): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', &(0x7f0000000100)=""/256, 0x100) 35.952054206s ago: executing program 4 (id=3052): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 35.248308027s ago: executing program 4 (id=3056): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/exports\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/max_block_size\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/reply_cache_stats\x00', 0x0, 0x0) 34.822665598s ago: executing program 4 (id=3057): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = dup(r0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7a, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 27.37213055s ago: executing program 6 (id=3066): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 26.996582146s ago: executing program 6 (id=3067): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473d3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x39, 0x8}}, 0x20) 26.865374827s ago: executing program 6 (id=3068): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/i2c/drivers/maxtcpc\x00', 0x0, 0x0) 26.438370235s ago: executing program 6 (id=3070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 25.028997572s ago: executing program 6 (id=3071): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r2, &(0x7f0000000140)="dbd7dc5583c4056b4499677b5434639222c6c0b5331d100c2c809a3b875cfbd80567ceadc621a688b8dacb231c2dd47e0f650e09ef853acf7a67fe1e5602dea9e28aebfa04900d8240ac8d896f86792879cf5bb211c00a22eca25e655ddca3099f4b98ad0b828b1b806196527bfb2798d551d348dcbf113d376dccdf6e19223f9765bd2a933fd44753e5a59b5d6f013b122040d818906858b0e48c66eb0ab65cd752e55cecf6387210701303780fd80cc75d25bc21a8d6c1d49cf87ee325f229b81ebe91f456c5ea6bb75ebefb7d0f74e5b3ecc93336b958ab5507937aa3fe91bbcff7", 0xe3) r3 = dup(r2) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x3, 0x2, "2df3724a7b088cd6b1c2054f977ef70c078358", 0x6, 0x8}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) 22.953126641s ago: executing program 6 (id=3072): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) 19.285675907s ago: executing program 57 (id=3057): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = dup(r0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7a, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 16.828675987s ago: executing program 9 (id=3049): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/pcspkr\x00', 0x0, 0x0) 16.432962626s ago: executing program 9 (id=3082): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 15.300798294s ago: executing program 9 (id=3085): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-3 +4 -4.1 -4.2\n', 0x10) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) 13.835986331s ago: executing program 7 (id=3090): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='7\n', 0x2) 12.289957068s ago: executing program 7 (id=3093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 12.091939348s ago: executing program 3 (id=3094): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x200000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x3) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='127.0.0.1\n', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7777\n', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) close(r5) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='512\n', 0x4) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='1\n', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)='2\n', 0x2) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r9, &(0x7f0000000580)='3\n', 0x2) close(r9) mkdir(&(0x7f00000005c0)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dlmfs\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./dlmfs/domain0\x00', 0x1ff) nanosleep(&(0x7f0000000680)={0x1}, 0x0) 11.174518763s ago: executing program 7 (id=3096): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) epoll_create(0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="0a000300010000", 0x7) 10.972488985s ago: executing program 3 (id=3097): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000200)="0000000000000000000001000000000000000000703100"/164, 0x98) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) write(0xffffffffffffffff, &(0x7f0000000300)="000000000000000000000000000000000100"/160, 0x98) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x1}}) 9.962334611s ago: executing program 7 (id=3099): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000200)={0x3ff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 8.628726199s ago: executing program 5 (id=3100): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x30002, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000300)='(\xed\xef(.(\\-]\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) lseek(r1, 0x851, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.583238927s ago: executing program 7 (id=3101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r1, 0x2022ad) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7.067210164s ago: executing program 58 (id=3072): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) 6.758108354s ago: executing program 5 (id=3103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473d3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x39, 0x8}}, 0x20) 6.708417863s ago: executing program 7 (id=3104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='7\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='always\n', 0x7) mmap(&(0x7f0000800000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000800000/0x400000)=nil, 0x400000, 0xe) clock_gettime(0x0, &(0x7f0000800000)) clock_gettime(0x0, &(0x7f0000801000)) clock_gettime(0x0, &(0x7f0000a00000)) clock_gettime(0x0, &(0x7f0000a01000)) madvise(&(0x7f0000800000/0x400000)=nil, 0x400000, 0x19) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='+ 1 0 1 1 0\n', 0xc) write(r2, &(0x7f0000000280)='+ 1 0 2 1 0\n', 0xc) write(r2, &(0x7f00000002c0)='+ 1 0 3 1 0\n', 0xc) write(r2, &(0x7f0000000300)='+ 1 0 4 1 0\n', 0xc) write(r2, &(0x7f0000000340)='+ 1 0 5 1 0\n', 0xc) write(r2, &(0x7f0000000380)='+ 1 0 6 1 0\n', 0xc) write(r2, &(0x7f00000003c0)='+ 1 0 7 1 0\n', 0xc) write(r2, &(0x7f0000000400)='+ 1 0 8 1 0\n', 0xc) write(r2, &(0x7f0000000440)='+ 0 0 1 1 0\n', 0xc) write(r2, &(0x7f0000000480)='+ 0 0 2 1 0\n', 0xc) write(r2, &(0x7f00000004c0)='+ 0 0 3 1 0\n', 0xc) write(r2, &(0x7f0000000500)='+ 0 0 4 1 0\n', 0xc) write(r2, &(0x7f0000000540)='+ 0 0 5 1 0\n', 0xc) write(r2, &(0x7f0000000580)='+ 1 0 1 60 0\n', 0xd) write(r2, &(0x7f00000005c0)='+ 1 0 2 60 0\n', 0xd) write(r2, &(0x7f0000000600)='+ 1 0 3 60 0\n', 0xd) 6.286454616s ago: executing program 5 (id=3105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='7\n', 0x2) 5.884642897s ago: executing program 5 (id=3106): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001") 5.719814486s ago: executing program 3 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 3.849690157s ago: executing program 3 (id=3108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='none\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1:0\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram0/state\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/dev-ram0/errors\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram0/slot\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/offset\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-ram0/size\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/recovery_offset\x00', 0x0, 0x0) 3.54161684s ago: executing program 5 (id=3109): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r2, &(0x7f0000000140)="dbd7dc5583c4056b4499677b5434639222c6c0b5331d100c2c809a3b875cfbd80567ceadc621a688b8dacb231c2dd47e0f650e09ef853acf7a67fe1e5602dea9e28aebfa04900d8240ac8d896f86792879cf5bb211c00a22eca25e655ddca3099f4b98ad0b828b1b806196527bfb2798d551d348dcbf113d376dccdf6e19223f9765bd2a933fd44753e5a59b5d6f013b122040d818906858b0e48c66eb0ab65cd752e55cecf6387210701303780fd80cc75d25bc21a8d6c1d49cf87ee325f229b81ebe91f456c5ea6bb75ebefb7d0f74e5b3ecc93336b958ab5507937aa3fe91bbcff7", 0xe3) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x3, 0x2, "2df3724a7b088cd6b1c2054f977ef70c078358", 0x6, 0x8}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) 2.963061406s ago: executing program 3 (id=3110): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000004140)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) epoll_create(0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="0a000300010000", 0x7) 2.378558638s ago: executing program 5 (id=3111): landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x0, 0x2, 0x9}, 0x30, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 117.379005ms ago: executing program 3 (id=3112): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000200)={0x3ff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 59 (id=3085): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-3 +4 -4.1 -4.2\n', 0x10) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) kernel console output (not intermixed with test programs): er=0 [ 1103.165737][T13615] usb 10-1: USB disconnect, device number 4 [ 1103.355926][T15822] veth0_vlan: entered promiscuous mode [ 1103.414256][T15822] veth1_vlan: entered promiscuous mode [ 1103.424120][T16330] fido_id[16330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1103.533618][T15822] veth0_macvtap: entered promiscuous mode [ 1103.548084][T15822] veth1_macvtap: entered promiscuous mode [ 1103.571667][T15822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.586111][ T5747] arvo 0003:1E7D:30D4.0016: hidraw1: USB HID v1.10 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0 [ 1103.590125][T15822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.794188][ T157] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.794241][ T157] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.794281][ T157] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.862292][ T1166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.122696][T13099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.122722][T13099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.163321][T13553] usb 6-1: USB disconnect, device number 14 [ 1104.268014][T13615] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1104.399194][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.399219][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.440086][T13615] usb 10-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 1104.441150][T13615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.624005][T16359] input: syz0 as /devices/virtual/input/input26 [ 1104.702601][T16364] xt_hashlimit: size too large, truncated to 1048576 [ 1104.740617][ T5747] arvo 0003:1E7D:30D4.0016: couldn't init struct arvo_device [ 1104.740683][ T5747] arvo 0003:1E7D:30D4.0016: couldn't install keyboard [ 1104.763886][ T5747] arvo 0003:1E7D:30D4.0016: probe with driver arvo failed with error -71 [ 1104.796279][T16371] netlink: 'syz.7.2574': attribute type 2 has an invalid length. [ 1104.802979][ T5747] usb 7-1: USB disconnect, device number 7 [ 1105.703031][T13615] ax88179_178a 10-1:1.0: probe with driver ax88179_178a failed with error -71 [ 1105.743883][T13615] usb 10-1: USB disconnect, device number 5 [ 1105.907406][ T5734] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1106.059506][ T5734] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.00 [ 1106.079852][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.079882][ T5734] usb 3-1: Product: syz [ 1106.079899][ T5734] usb 3-1: Manufacturer: syz [ 1106.079916][ T5734] usb 3-1: SerialNumber: syz [ 1106.241665][ T5734] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 1106.268893][T13615] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1106.380808][T16413] input: syz0 as /devices/virtual/input/input27 [ 1106.419293][T13615] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1106.420706][T13615] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1106.420763][T13615] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1106.420785][T13615] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1106.420812][T13615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.426762][T13615] usb 6-1: config 0 descriptor?? [ 1106.427864][T16407] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1106.850117][T13615] apple 0003:05AC:027A.0017: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1106.854015][T13615] input: HID 05ac:027a as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:027A.0017/input/input28 [ 1106.931593][T13615] apple 0003:05AC:027A.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0 [ 1107.385975][T16415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1107.413586][T16425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.414100][T16425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.425097][T16425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.430706][T16425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.458702][T16425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.459187][T16425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.442765][T13615] usb 6-1: reset full-speed USB device number 15 using dummy_hcd [ 1109.660085][ T5734] usb 3-1: USB disconnect, device number 16 [ 1110.247359][ T5754] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1110.273092][T16058] usb 6-1: USB disconnect, device number 15 [ 1110.421180][ T5754] usb 3-1: Using ep0 maxpacket: 16 [ 1110.421951][ T5754] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1110.422986][ T5754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.423020][ T5754] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1110.423065][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.430166][ T5754] usb 3-1: config 0 descriptor?? [ 1110.454403][T16456] input: syz0 as /devices/virtual/input/input29 [ 1110.721526][T12858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1110.723075][T12858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1110.724439][T12858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1110.725828][T12858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1110.726538][T12858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1110.852770][ T5754] HID 045e:07da: Invalid code 65791 type 1 [ 1110.866256][ T5754] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0018/input/input30 [ 1110.906592][ T5754] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1111.446019][T16459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1113.607513][T12858] Bluetooth: hci0: command tx timeout [ 1113.721850][T16058] usb 3-1: USB disconnect, device number 17 [ 1113.878075][T16464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.878188][T16464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.878316][T16464] bridge_slave_0: entered allmulticast mode [ 1113.880229][T16464] bridge_slave_0: entered promiscuous mode [ 1113.883056][T16464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.883238][T16464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.883399][T16464] bridge_slave_1: entered allmulticast mode [ 1113.885424][T16464] bridge_slave_1: entered promiscuous mode [ 1113.923656][T16464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.928668][T16464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.937966][ T5754] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1113.976080][T16464] team0: Port device team_slave_0 added [ 1113.981378][T16464] team0: Port device team_slave_1 added [ 1114.006961][T16464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.006984][T16464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.007011][T16464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.010217][T16464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.010233][T16464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.010263][T16464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.097167][T16464] hsr_slave_0: entered promiscuous mode [ 1114.104544][ T5754] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 0.01 [ 1114.105655][ T5754] usb 10-1: config 1 interface 0 has no altsetting 2 [ 1114.105694][ T5754] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.106437][T16464] hsr_slave_1: entered promiscuous mode [ 1114.108338][T16464] debugfs: 'hsr0' already exists in 'hsr' [ 1114.108367][T16464] Cannot create hsr debugfs directory [ 1114.142992][ T5754] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1114.143046][ T5754] usb 10-1: setting power ON [ 1114.187650][T16058] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1114.339943][T16058] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1114.361303][T16058] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1114.361343][T16058] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1114.361374][T16058] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1114.361410][T16058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.368055][T16058] usb 3-1: config 0 descriptor?? [ 1114.379667][T16495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1114.847180][T16058] apple 0003:05AC:027A.0019: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1114.863124][T16058] input: HID 05ac:027a as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:027A.0019/input/input31 [ 1114.963904][T16058] apple 0003:05AC:027A.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 1115.222451][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.222529][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.305043][T16464] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1115.316237][T16464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1115.317169][T16464] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1115.335728][T16464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.336905][T16464] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1115.356216][T16464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.364480][T16464] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1115.374963][T16464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.402809][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.405406][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.413568][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.418338][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.422567][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.425061][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.592409][T16464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.617675][T12858] Bluetooth: hci0: command tx timeout [ 1115.624617][T16464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.646735][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.646840][ T6282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.663696][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.663815][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.180858][ T5754] dvb-usb: bulk message failed: -110 (2/0) [ 1116.227144][ T5754] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1116.236997][ T5754] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1116.237053][ T5754] usb 10-1: media controller created [ 1116.291257][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1116.391078][T16464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.392620][ T5754] usb 10-1: digital interface selection failed (-71) [ 1116.392642][ T5754] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1116.393985][ T5754] usb 10-1: setting power OFF [ 1116.394533][ T5754] dvb-usb: bulk message failed: -2 (2/0) [ 1116.394551][ T5754] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1116.394570][ T5754] usb 10-1: setting power ON [ 1116.394707][ T5754] dvb-usb: bulk message failed: -2 (2/0) [ 1116.400942][ T5754] usb 10-1: analog interface selection failed (-71) [ 1116.594201][ T5754] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1116.594240][ T5754] dvb_usb_cxusb 10-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 1116.640729][ T5754] usb 10-1: USB disconnect, device number 6 [ 1116.780009][T13615] usb 3-1: USB disconnect, device number 18 [ 1117.279515][T16464] veth0_vlan: entered promiscuous mode [ 1117.303513][T16464] veth1_vlan: entered promiscuous mode [ 1117.376110][T16464] veth0_macvtap: entered promiscuous mode [ 1117.403104][T16464] veth1_macvtap: entered promiscuous mode [ 1117.489874][T16464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.525105][T16464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.596685][T16579] input: syz0 as /devices/virtual/input/input32 [ 1117.698479][T12858] Bluetooth: hci0: command tx timeout [ 1117.743767][T15050] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.744249][T15050] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.744293][T15050] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.744334][T15050] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.971243][ T9812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.971269][ T9812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.142407][T16591] ubi0: attaching mtd1 [ 1118.193528][T15050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.193554][T15050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.227105][T16591] ubi0: scanning is finished [ 1118.227167][T16591] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1118.321605][T16593] UBIFS error (pid: 16593): cannot open "ubi0_0", error -19 [ 1118.583251][T16589] ftl_cs: FTL header not found. [ 1118.665624][T16591] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 1118.698578][T16589] block2mtd: mtd2: [/dev/ram0] erase_size = 64KiB [65536] [ 1119.190065][ T5620] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1119.369626][ T5620] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1119.404030][ T5620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.404082][ T5620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.404263][ T5620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.791214][T12858] Bluetooth: hci0: command tx timeout [ 1119.831843][ T5620] usb 9-1: config 0 descriptor?? [ 1121.944917][ T5620] usbhid 9-1:0.0: can't add hid device: -71 [ 1121.945033][ T5620] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1121.989771][ T5620] usb 9-1: USB disconnect, device number 2 [ 1121.996884][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1122.002301][ T5621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1122.003604][ T5621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1122.013127][ T5621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1122.015495][ T5621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1122.411133][ T5621] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1122.415476][ T5621] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1122.436775][ T5621] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1122.450083][ T5621] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1122.451398][ T5621] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1122.540824][T16628] can0: slcan on pts0. [ 1122.580553][T16638] input: syz0 as /devices/virtual/input/input33 [ 1122.910772][T16627] can0 (unregistered): slcan off pts0. [ 1124.045258][T16617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.045568][T16617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.046217][T16617] bridge_slave_0: entered allmulticast mode [ 1124.069242][T16617] bridge_slave_0: entered promiscuous mode [ 1124.097561][T12858] Bluetooth: hci7: command tx timeout [ 1124.102801][T16617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.102921][T16617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.103097][T16617] bridge_slave_1: entered allmulticast mode [ 1124.114375][T16617] bridge_slave_1: entered promiscuous mode [ 1124.336076][T16617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.453127][T16617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.577599][T12858] Bluetooth: hci8: command tx timeout [ 1124.681789][T16617] team0: Port device team_slave_0 added [ 1124.694208][T16617] team0: Port device team_slave_1 added [ 1124.724289][T16713] input: syz0 as /devices/virtual/input/input34 [ 1124.882846][T16633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.883032][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.883171][T16633] bridge_slave_0: entered allmulticast mode [ 1124.883500][ T5621] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1124.887169][T16633] bridge_slave_0: entered promiscuous mode [ 1124.896902][ T5621] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1124.936422][ T5621] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1124.942549][ T5621] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1124.943205][ T5621] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1124.965377][T16617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.965398][T16617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.965428][T16617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.033222][T16633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.033418][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.033607][T16633] bridge_slave_1: entered allmulticast mode [ 1125.036924][T16633] bridge_slave_1: entered promiscuous mode [ 1125.065609][T16617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.065630][T16617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.065662][T16617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.250908][T16633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.339626][T16633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.457161][T16617] hsr_slave_0: entered promiscuous mode [ 1125.466049][T16617] hsr_slave_1: entered promiscuous mode [ 1125.466849][T16617] debugfs: 'hsr0' already exists in 'hsr' [ 1125.466887][T16617] Cannot create hsr debugfs directory [ 1125.496190][T16633] team0: Port device team_slave_0 added [ 1125.511036][T16633] team0: Port device team_slave_1 added [ 1125.754017][T16633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.754040][T16633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.754074][T16633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.756524][T16633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.756542][T16633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.756574][T16633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.918081][T13099] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.074439][T16633] hsr_slave_0: entered promiscuous mode [ 1126.076098][T16633] hsr_slave_1: entered promiscuous mode [ 1126.077015][T16633] debugfs: 'hsr0' already exists in 'hsr' [ 1126.077037][T16633] Cannot create hsr debugfs directory [ 1126.177944][ T5621] Bluetooth: hci7: command tx timeout [ 1126.657745][ T5621] Bluetooth: hci8: command tx timeout [ 1126.728969][T16617] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.889882][T16617] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.995161][ T5621] Bluetooth: hci9: command tx timeout [ 1127.020141][T16617] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.722205][T16779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1128.307370][ T5621] Bluetooth: hci7: command tx timeout [ 1128.346199][T16617] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.721599][T16633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.737440][ T5621] Bluetooth: hci8: command tx timeout [ 1128.749200][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.749420][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.749593][T16714] bridge_slave_0: entered allmulticast mode [ 1128.751664][T16714] bridge_slave_0: entered promiscuous mode [ 1128.786566][T16714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.786749][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.786921][T16714] bridge_slave_1: entered allmulticast mode [ 1128.812400][T16714] bridge_slave_1: entered promiscuous mode [ 1128.902072][T16633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.935147][T16714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.950597][T16714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.040170][T16633] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.059865][ T5621] Bluetooth: hci9: command tx timeout [ 1129.071779][T16714] team0: Port device team_slave_0 added [ 1129.075102][T16714] team0: Port device team_slave_1 added [ 1129.168651][T16633] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.190960][T16714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.190982][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.191014][T16714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.193692][T16714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.193710][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.193745][T16714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.436716][T16714] hsr_slave_0: entered promiscuous mode [ 1129.470968][T16714] hsr_slave_1: entered promiscuous mode [ 1129.479838][T16714] debugfs: 'hsr0' already exists in 'hsr' [ 1129.479863][T16714] Cannot create hsr debugfs directory [ 1130.337455][ T5621] Bluetooth: hci7: command tx timeout [ 1130.820165][ T5621] Bluetooth: hci8: command tx timeout [ 1130.904235][T16826] sctp: [Deprecated]: syz.2.2895 (pid 16826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1130.904235][T16826] Use struct sctp_sack_info instead [ 1130.982722][T16633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1131.001857][T16633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.005862][T16633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1131.032314][T16633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.033624][T16633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1131.072378][T16633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.073275][T16633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1131.110595][T16633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1131.130524][T16831] input: syz0 as /devices/virtual/input/input35 [ 1131.138899][ T5621] Bluetooth: hci9: command tx timeout [ 1131.452537][T16617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1131.482138][T16617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.483508][T16617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1131.501782][T16617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.502872][T16617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1131.514681][ T5620] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1131.531808][T16617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.533105][T16617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1131.536761][T16617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1131.727402][ T5620] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1131.732622][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.732676][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.771542][ T5620] usb 3-1: config 0 descriptor?? [ 1131.944309][T16633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.987066][ T5620] usbhid 3-1:0.0: can't add hid device: -71 [ 1131.987201][ T5620] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1132.021192][ T5620] usb 3-1: USB disconnect, device number 19 [ 1132.166482][T16633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.287977][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.288125][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.296896][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.296979][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.593898][T16617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.805822][T16617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.914238][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.914349][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.931295][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.931408][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.177122][T16714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1133.206070][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1133.207031][T16714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1133.218441][ T5621] Bluetooth: hci9: command tx timeout [ 1133.225481][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1133.244967][T16714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1133.256735][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1133.272629][T16714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1133.286204][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1133.646463][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.732431][T16714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.750115][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.750229][T10193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.773340][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.773452][T10193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.062397][T16633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.260868][T16633] veth0_vlan: entered promiscuous mode [ 1134.303081][T16633] veth1_vlan: entered promiscuous mode [ 1134.454120][T16633] veth0_macvtap: entered promiscuous mode [ 1134.477128][T16633] veth1_macvtap: entered promiscuous mode [ 1134.507900][T16617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.556624][T16633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.574757][T16633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.634587][T15050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.636690][T13099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.850140][T15251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.887510][T15050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.976874][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.976901][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.151610][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.151639][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.288844][T16714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.495925][T16714] veth0_vlan: entered promiscuous mode [ 1135.530961][T16714] veth1_vlan: entered promiscuous mode [ 1135.705434][T16617] veth0_vlan: entered promiscuous mode [ 1135.715915][T16714] veth0_macvtap: entered promiscuous mode [ 1135.749100][T16714] veth1_macvtap: entered promiscuous mode [ 1135.815104][T16714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.829445][T16617] veth1_vlan: entered promiscuous mode [ 1135.850523][T16714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.918339][T10193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.941150][T15050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.942979][ T6282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.943135][ T6282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.092749][T16617] veth0_macvtap: entered promiscuous mode [ 1136.159844][T16617] veth1_macvtap: entered promiscuous mode [ 1136.276093][T13099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.276121][T13099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.355920][T16617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.423847][T16617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.442158][ T6282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.442185][ T6282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.480454][T13099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.480845][T13099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.619059][ T6345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.634051][ T6345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.912478][T15251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.912505][T15251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.023767][T10193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.023793][T10193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.717367][T16970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1138.358810][T12858] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1138.361315][T12858] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1138.362084][T12858] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1138.364636][T12858] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1138.365322][T12858] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1139.873058][T16993] sctp: [Deprecated]: syz.0.2905 (pid 16993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1139.873058][T16993] Use struct sctp_sack_info instead [ 1140.221860][T12858] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1140.230404][T12858] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1140.238027][T12858] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1140.243380][T12858] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1140.244096][T12858] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1140.497555][T12858] Bluetooth: hci10: command tx timeout [ 1142.268799][T12858] Bluetooth: hci11: command tx timeout [ 1142.648272][T12858] Bluetooth: hci10: command tx timeout [ 1142.722982][T17042] befs: (nbd4): unable to read superblock [ 1143.793752][T17068] sctp: [Deprecated]: syz.0.2917 (pid 17068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1143.793752][T17068] Use struct sctp_sack_info instead [ 1143.972089][T16975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.972281][T16975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.972431][T16975] bridge_slave_0: entered allmulticast mode [ 1143.976081][T16975] bridge_slave_0: entered promiscuous mode [ 1144.045750][T16975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.045868][T16975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.046026][T16975] bridge_slave_1: entered allmulticast mode [ 1144.078635][T16975] bridge_slave_1: entered promiscuous mode [ 1144.223736][T17084] ci_hdrc pcspkr: platform data missing [ 1144.293337][T16975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.309789][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.309907][T17004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.310091][T17004] bridge_slave_0: entered allmulticast mode [ 1144.312315][T17004] bridge_slave_0: entered promiscuous mode [ 1144.339746][T12858] Bluetooth: hci11: command tx timeout [ 1144.368609][T16975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.369007][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.369193][T17004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.369331][T17004] bridge_slave_1: entered allmulticast mode [ 1144.379166][T17004] bridge_slave_1: entered promiscuous mode [ 1146.153918][T12858] Bluetooth: hci10: command tx timeout [ 1146.333363][T17004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.360073][T17004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.417734][T12858] Bluetooth: hci11: command tx timeout [ 1146.548610][T16975] team0: Port device team_slave_0 added [ 1146.556622][T16975] team0: Port device team_slave_1 added [ 1146.626905][T17004] team0: Port device team_slave_0 added [ 1146.640810][T17004] team0: Port device team_slave_1 added [ 1146.728810][T16975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.728832][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.728864][T16975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.740277][T16975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.740298][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.740331][T16975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.814208][T17004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.814232][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.814263][T17004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.911265][T17004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.911287][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.911317][T17004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.983979][T16975] hsr_slave_0: entered promiscuous mode [ 1146.985170][T16975] hsr_slave_1: entered promiscuous mode [ 1146.985968][T16975] debugfs: 'hsr0' already exists in 'hsr' [ 1146.985992][T16975] Cannot create hsr debugfs directory [ 1147.121481][T17004] hsr_slave_0: entered promiscuous mode [ 1147.145314][T17004] hsr_slave_1: entered promiscuous mode [ 1147.145988][T17004] debugfs: 'hsr0' already exists in 'hsr' [ 1147.146011][T17004] Cannot create hsr debugfs directory [ 1148.179808][T12858] Bluetooth: hci10: command tx timeout [ 1148.186885][T16975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.392077][T16975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.506582][T12858] Bluetooth: hci11: command tx timeout [ 1148.540892][ T5621] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1148.559840][ T5621] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1148.576333][ T5621] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1148.601337][ T5621] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1148.604094][ T5621] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1148.740157][T16975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.916176][T16975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.261110][T17004] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.453057][T17004] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.681933][T17004] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.701567][T12858] Bluetooth: hci12: command tx timeout [ 1151.249428][T17004] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.657837][ T5621] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1151.665244][ T5621] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1151.666885][ T5621] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1151.682777][ T5621] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1151.699433][ T5621] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1152.009842][T17188] sctp: [Deprecated]: syz.4.2930 (pid 17188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1152.009842][T17188] Use struct sctp_sack_info instead [ 1152.458463][T16975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1152.477695][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1152.478696][T16975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1152.505916][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1152.569480][T16975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1152.577010][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1152.598956][T16975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1152.606108][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1152.722557][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.722678][T17129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.722826][T17129] bridge_slave_0: entered allmulticast mode [ 1152.725041][T17129] bridge_slave_0: entered promiscuous mode [ 1152.743386][ T5621] Bluetooth: hci12: command tx timeout [ 1152.825593][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.825830][T17129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.826017][T17129] bridge_slave_1: entered allmulticast mode [ 1152.849696][T17129] bridge_slave_1: entered promiscuous mode [ 1153.178960][T17224] ubi0: attaching mtd1 [ 1153.183251][T17224] ubi0: scanning is finished [ 1153.183311][T17224] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1153.199515][T17129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.208690][T17129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.241995][T17226] UBIFS error (pid: 17226): cannot open "ubi0_0", error -19 [ 1153.419963][T17129] team0: Port device team_slave_0 added [ 1153.426092][T17129] team0: Port device team_slave_1 added [ 1153.442516][T17224] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 1153.713879][T17004] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1153.720721][T17004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1153.723545][T17129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.723564][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.723595][T17129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.780909][ T5621] Bluetooth: hci13: command tx timeout [ 1153.804331][T17004] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1153.813903][T17004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1153.821110][T17129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.821129][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.821162][T17129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.843889][T17004] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1153.926094][T17004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1153.930487][T17004] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1153.948316][T17004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1154.230957][T17129] hsr_slave_0: entered promiscuous mode [ 1154.235419][T17129] hsr_slave_1: entered promiscuous mode [ 1154.240751][T17129] debugfs: 'hsr0' already exists in 'hsr' [ 1154.240776][T17129] Cannot create hsr debugfs directory [ 1154.817518][ T5621] Bluetooth: hci12: command tx timeout [ 1155.116999][T16975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.134731][T16975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.210888][T15050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.211002][T15050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.217105][T15050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.217286][T15050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.345710][T17129] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.383772][T17180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.383892][T17180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.384080][T17180] bridge_slave_0: entered allmulticast mode [ 1155.413484][T17180] bridge_slave_0: entered promiscuous mode [ 1155.436347][T17180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.436543][T17180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.436698][T17180] bridge_slave_1: entered allmulticast mode [ 1155.461369][T17180] bridge_slave_1: entered promiscuous mode [ 1155.530442][T17180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.533976][T17180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.601982][T17129] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.694390][T17180] team0: Port device team_slave_0 added [ 1155.704557][T17180] team0: Port device team_slave_1 added [ 1155.792987][T17129] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.859938][ T5621] Bluetooth: hci13: command tx timeout [ 1155.862759][T17180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.862777][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.862810][T17180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.865115][T17180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.865157][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.865188][T17180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.911576][T17004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.966129][T17004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.009563][T17129] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.156541][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.156677][ T9811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.167684][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.167796][ T9811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.228859][T17180] hsr_slave_0: entered promiscuous mode [ 1156.230167][T17180] hsr_slave_1: entered promiscuous mode [ 1156.232572][T17180] debugfs: 'hsr0' already exists in 'hsr' [ 1156.232596][T17180] Cannot create hsr debugfs directory [ 1156.876001][T17129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1156.895974][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1156.897802][ T5621] Bluetooth: hci12: command tx timeout [ 1156.933084][T17129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1156.970827][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1156.983765][T17129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1157.009945][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1157.025282][T17129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1157.040460][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.251175][T17180] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.543898][T17180] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.744205][T17180] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.850041][T16975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.939092][ T5621] Bluetooth: hci13: command tx timeout [ 1158.050363][T17180] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.089645][T17129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.224360][T17004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.244703][T17129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.303577][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.303665][ T9812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.309529][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.309670][ T9812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.460777][T16975] veth0_vlan: entered promiscuous mode [ 1158.557940][T16975] veth1_vlan: entered promiscuous mode [ 1158.630332][T17180] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1158.635003][T17180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1158.654900][T17129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.662248][T17180] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1158.681868][T17180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1158.684449][T17180] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1158.699789][T17180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1158.722509][T17180] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1158.734734][T17180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1158.805697][T16975] veth0_macvtap: entered promiscuous mode [ 1158.830608][T16975] veth1_macvtap: entered promiscuous mode [ 1158.919332][T16975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.951401][T16975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.122950][T15096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.158602][T17180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.200443][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.200502][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.200546][ T1146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.284803][T17004] veth0_vlan: entered promiscuous mode [ 1159.445760][T12858] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1159.456447][T12858] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1159.458385][T12858] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1159.459987][T12858] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1159.462667][T12858] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1159.474841][T17180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.481129][T17004] veth1_vlan: entered promiscuous mode [ 1159.542159][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.542188][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.612171][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.612268][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.702640][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.702741][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.714819][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.714845][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.845195][T17004] veth0_macvtap: entered promiscuous mode [ 1159.893214][T17004] veth1_macvtap: entered promiscuous mode [ 1160.018824][ T5621] Bluetooth: hci13: command tx timeout [ 1160.060753][T17004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.093149][T17004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.179936][ T157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.180523][T15096] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.180695][T15096] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.260468][T15050] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.320504][T17129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.589090][ T9812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.589113][ T9812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.710327][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.710354][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.541173][ T5621] Bluetooth: hci14: command tx timeout [ 1161.857047][T17409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1162.547152][T17180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.652202][T17129] veth0_vlan: entered promiscuous mode [ 1162.702511][T17129] veth1_vlan: entered promiscuous mode [ 1162.820954][T17129] veth0_macvtap: entered promiscuous mode [ 1162.883869][T17129] veth1_macvtap: entered promiscuous mode [ 1163.165831][T17129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.166011][T17363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.166110][T17363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.166234][T17363] bridge_slave_0: entered allmulticast mode [ 1163.168166][T17363] bridge_slave_0: entered promiscuous mode [ 1163.172939][T17363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.173052][T17363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.173187][T17363] bridge_slave_1: entered allmulticast mode [ 1163.175129][T17363] bridge_slave_1: entered promiscuous mode [ 1163.621928][ T5621] Bluetooth: hci14: command tx timeout [ 1164.053049][T17129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.066777][T17363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.094668][T17363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.166328][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2949'. [ 1164.166362][T17432] netlink: 'syz.1.2949': attribute type 11 has an invalid length. [ 1164.166376][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'. [ 1164.177987][T17363] team0: Port device team_slave_0 added [ 1164.205196][T17363] team0: Port device team_slave_1 added [ 1164.277555][ T6345] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.279807][T17363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.279825][T17363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.279857][T17363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.318099][T17363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.318121][T17363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.318153][T17363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.442439][ T3369] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.444355][ T3369] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.527342][ T3369] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.602913][T17363] hsr_slave_0: entered promiscuous mode [ 1164.605715][T17363] hsr_slave_1: entered promiscuous mode [ 1164.608789][T17363] debugfs: 'hsr0' already exists in 'hsr' [ 1164.608811][T17363] Cannot create hsr debugfs directory [ 1164.616747][T17180] veth0_vlan: entered promiscuous mode [ 1164.700232][T10192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.700257][T10192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.590972][T17180] veth1_vlan: entered promiscuous mode [ 1165.705289][ T5621] Bluetooth: hci14: command tx timeout [ 1165.949547][T10192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.949574][T10192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.997108][T17180] veth0_macvtap: entered promiscuous mode [ 1166.018088][T17439] syz.1.2951 (17439): drop_caches: 2 [ 1166.059435][T17180] veth1_macvtap: entered promiscuous mode [ 1166.153164][T17180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.905608][ T5621] Bluetooth: hci14: command tx timeout [ 1167.941086][T17180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.226843][T17363] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.269793][ T8026] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.269964][ T8026] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.329545][ T5940] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.329605][ T5940] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.346705][ T5754] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1168.506173][ T5754] usb 8-1: New USB device found, idVendor=09c0, idProduct=0202, bcdDevice= 0.01 [ 1168.508338][ T5754] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.568234][ T5754] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver' in warm state. [ 1168.663598][T17363] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.824833][T17363] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.878408][T10188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.878463][T10188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.121905][T17363] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.227614][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.227641][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.774920][ T5754] gp8psk: usb in 128 operation failed. [ 1169.777089][ T5754] gp8psk: usb in 137 operation failed. [ 1169.777107][ T5754] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1169.779625][ T5754] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver) [ 1169.779686][ T5754] usb 8-1: media controller created [ 1169.832368][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1169.866904][T17363] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1169.908956][T17363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1169.909785][T17363] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1169.945192][ T5754] gp8psk_fe: Frontend attached [ 1169.945246][ T5754] usb 8-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1169.945775][ T5754] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1169.953036][T17363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1169.990978][T17363] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1170.022352][T17363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1170.023483][T17363] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1170.051451][T17363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1170.207783][T17363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.235845][T17363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.255077][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.255160][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.321544][ T5754] gp8psk: usb in 138 operation failed. [ 1170.321566][ T5754] dvb-usb: Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver successfully initialized and connected. [ 1170.321583][ T5754] gp8psk: found Genpix USB device pID = 202 (hex) [ 1170.324946][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.325093][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.363493][ T5754] usb 8-1: USB disconnect, device number 2 [ 1170.943826][ T5754] dvb-usb: Genpix 8PSK-to-USB2 Rev.2 DVB-S receive successfully deinitialized and disconnected. [ 1171.208024][T12858] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1171.216445][T12858] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1171.317417][T12858] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1171.389293][T12858] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1171.409564][T12858] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1172.543647][T17363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.005508][T17512] synth uevent: /bus/sdio/drivers/btmrvl_sdio: unknown uevent action string [ 1173.325781][T17363] veth0_vlan: entered promiscuous mode [ 1173.406528][T17363] veth1_vlan: entered promiscuous mode [ 1173.711715][ T5621] Bluetooth: hci15: command tx timeout [ 1174.317357][T17363] veth0_macvtap: entered promiscuous mode [ 1174.343996][T17363] veth1_macvtap: entered promiscuous mode [ 1174.376846][T17363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.430324][T17363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.624134][T17476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.624320][T17476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.624480][T17476] bridge_slave_0: entered allmulticast mode [ 1174.653816][T17476] bridge_slave_0: entered promiscuous mode [ 1174.691882][T17476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.692015][T17476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.692175][T17476] bridge_slave_1: entered allmulticast mode [ 1174.695121][T17476] bridge_slave_1: entered promiscuous mode [ 1174.779185][T17476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.783042][T17476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.866613][T17476] team0: Port device team_slave_0 added [ 1174.889659][T13019] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.890353][T13019] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.890400][T13019] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.890438][T13019] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.939001][T17476] team0: Port device team_slave_1 added [ 1175.027765][T17476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.027788][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.027823][T17476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.030797][T17476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.030814][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.030842][T17476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.031711][T13019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.031731][T13019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.234279][T17476] hsr_slave_0: entered promiscuous mode [ 1175.235247][T17476] hsr_slave_1: entered promiscuous mode [ 1175.235880][T17476] debugfs: 'hsr0' already exists in 'hsr' [ 1175.235904][T17476] Cannot create hsr debugfs directory [ 1175.319765][T15050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.319792][T15050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.777417][ T5621] Bluetooth: hci15: command tx timeout [ 1176.733842][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.733956][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.982362][T17476] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.446326][T17476] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.622999][T17476] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.822362][T17476] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.857485][ T5621] Bluetooth: hci15: command tx timeout [ 1178.746023][ T5621] Bluetooth: hci6: command 0x0406 tx timeout [ 1179.319757][ T5621] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1179.325645][ T5621] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1179.335366][ T5621] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1179.432434][ T5621] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1179.449103][ T5621] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1179.946037][T12858] Bluetooth: hci15: command tx timeout [ 1180.552302][T17476] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1180.614732][T17476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1180.616621][T17476] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1180.646265][T17476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1180.668559][T17476] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1180.703587][T17476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1180.704575][T17476] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1180.724332][T17476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1180.743617][T17576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1180.976099][T17476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.003402][T17476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.040865][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.041111][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.063402][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.063559][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.699295][T12858] Bluetooth: hci16: command tx timeout [ 1182.898440][T17565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.898549][T17565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.898724][T17565] bridge_slave_0: entered allmulticast mode [ 1182.900781][T17565] bridge_slave_0: entered promiscuous mode [ 1182.995413][T17565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.995573][T17565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.995722][T17565] bridge_slave_1: entered allmulticast mode [ 1182.998929][T17565] bridge_slave_1: entered promiscuous mode [ 1183.525049][T17565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.557176][T17565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.764598][T17565] team0: Port device team_slave_0 added [ 1183.768139][T17565] team0: Port device team_slave_1 added [ 1183.778293][T12858] Bluetooth: hci16: command tx timeout [ 1183.874782][T17565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.874804][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.874833][T17565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.876837][T17565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.876853][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.876880][T17565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.033044][T17565] hsr_slave_0: entered promiscuous mode [ 1184.034508][T17565] hsr_slave_1: entered promiscuous mode [ 1184.035484][T17565] debugfs: 'hsr0' already exists in 'hsr' [ 1184.035506][T17565] Cannot create hsr debugfs directory [ 1184.393554][T17565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.441221][T17476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.556524][T17565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.664229][T17565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.889355][T17565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.009054][T17476] veth0_vlan: entered promiscuous mode [ 1185.033873][T17476] veth1_vlan: entered promiscuous mode [ 1185.079833][T17476] veth0_macvtap: entered promiscuous mode [ 1185.127530][T17476] veth1_macvtap: entered promiscuous mode [ 1185.155285][T17476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.173762][T17476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.176325][T17643] i2c i2c-0: new_device: Instantiated device max25442 at 0x22 [ 1185.371936][ T1266] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.372520][ T9810] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.372626][ T9810] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.858392][T12858] Bluetooth: hci16: command tx timeout [ 1186.371201][T17565] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1186.399277][T17565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1186.407095][T17565] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1186.436329][T17565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1186.475973][T17565] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1186.490865][T17565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1186.491871][T17565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1186.544459][T17565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1186.602886][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.602922][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.726062][ T5621] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1186.728380][ T5621] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1186.729682][T10187] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.736544][ T5621] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1186.759687][ T5621] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1186.775922][ T5621] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1186.795353][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.795378][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.990609][T17565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.057120][T17565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.124686][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.124828][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.192316][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.192435][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.246906][ T5621] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1187.274530][ T5621] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1187.288548][ T5621] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1187.292017][ T5621] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1187.292790][ T5621] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1187.938175][T12858] Bluetooth: hci16: command tx timeout [ 1188.821926][T12858] Bluetooth: hci17: command tx timeout [ 1189.060377][ T5754] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1189.217663][ T5754] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1189.217711][ T5754] usb 9-1: no configurations [ 1189.217727][ T5754] usb 9-1: can't read configurations, error -22 [ 1189.377934][ T5754] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1189.461974][ T5621] Bluetooth: hci18: command tx timeout [ 1189.538653][ T5754] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1189.538701][ T5754] usb 9-1: no configurations [ 1189.538717][ T5754] usb 9-1: can't read configurations, error -22 [ 1189.539557][ T5754] usb usb9-port1: attempt power cycle [ 1189.697051][T17565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.712673][T17658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.712860][T17658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.713274][T17658] bridge_slave_0: entered allmulticast mode [ 1189.717013][T17658] bridge_slave_0: entered promiscuous mode [ 1189.761762][T17658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.761882][T17658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.762790][T17658] bridge_slave_1: entered allmulticast mode [ 1189.765058][T17658] bridge_slave_1: entered promiscuous mode [ 1189.877984][ T5754] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1189.902232][ T5754] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1189.902291][ T5754] usb 9-1: no configurations [ 1189.902308][ T5754] usb 9-1: can't read configurations, error -22 [ 1189.988437][T17658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.991964][T17658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.027373][ T5754] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1190.055118][ T5754] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1190.055166][ T5754] usb 9-1: no configurations [ 1190.055182][ T5754] usb 9-1: can't read configurations, error -22 [ 1190.055467][ T5754] usb usb9-port1: unable to enumerate USB device [ 1190.124321][T17658] team0: Port device team_slave_0 added [ 1190.155685][T17658] team0: Port device team_slave_1 added [ 1190.217787][T17658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.217805][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.217829][T17658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.224221][T17667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.224363][T17667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.224491][T17667] bridge_slave_0: entered allmulticast mode [ 1190.226058][T17667] bridge_slave_0: entered promiscuous mode [ 1190.228953][T17658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.228970][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.229000][T17658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.230813][T17667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.230924][T17667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.231663][T17667] bridge_slave_1: entered allmulticast mode [ 1190.241705][T17667] bridge_slave_1: entered promiscuous mode [ 1190.266717][T17565] veth0_vlan: entered promiscuous mode [ 1190.279383][T17565] veth1_vlan: entered promiscuous mode [ 1190.453514][T17565] veth0_macvtap: entered promiscuous mode [ 1190.491160][T17667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.494646][T17667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.495814][T17565] veth1_macvtap: entered promiscuous mode [ 1190.522679][T17565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.529306][T17565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.601784][T17658] hsr_slave_0: entered promiscuous mode [ 1190.602731][T17658] hsr_slave_1: entered promiscuous mode [ 1190.603374][T17658] debugfs: 'hsr0' already exists in 'hsr' [ 1190.603391][T17658] Cannot create hsr debugfs directory [ 1190.666195][T17667] team0: Port device team_slave_0 added [ 1190.684796][T17667] team0: Port device team_slave_1 added [ 1190.717365][T10193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.758878][T17667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.758901][T17667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.758933][T17667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.761736][T17667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.761757][T17667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.761786][T17667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.899871][ T5621] Bluetooth: hci17: command tx timeout [ 1191.006657][T17667] hsr_slave_0: entered promiscuous mode [ 1191.008827][T17667] hsr_slave_1: entered promiscuous mode [ 1191.009668][T17667] debugfs: 'hsr0' already exists in 'hsr' [ 1191.009692][T17667] Cannot create hsr debugfs directory [ 1191.153689][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.153715][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.282591][T17658] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.421603][T10192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.421630][T10192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.538270][ T5621] Bluetooth: hci18: command tx timeout [ 1191.556768][T17658] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.656137][T17658] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.699524][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.707071][T15050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.707126][T15050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.762200][T17658] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.946433][T17667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.089378][T17667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.162832][T17667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.290659][T17667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.991751][ T5621] Bluetooth: hci17: command tx timeout [ 1193.490737][T17667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1193.517931][T17667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1193.518922][T17667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1193.533310][T17667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1193.535126][T17667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1193.575817][T17667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1193.619388][ T5621] Bluetooth: hci18: command tx timeout [ 1193.645664][T17667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1193.654609][T17667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1193.865125][T17658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1193.871771][T17658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1193.873943][T17658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1193.881830][T17658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1193.882800][T17658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1193.888237][T17658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1193.890997][T17658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1193.894899][T17658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1194.168204][T17667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.200816][T17667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.220727][T10192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.220810][T10192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.240087][T17658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.264536][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.264643][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.318189][T17658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.362096][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.362185][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.388736][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.388834][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.455730][T17667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1194.455761][T17667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.061333][ T5621] Bluetooth: hci17: command tx timeout [ 1195.398935][T17667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.494971][T17667] veth0_vlan: entered promiscuous mode [ 1195.506695][T17667] veth1_vlan: entered promiscuous mode [ 1195.553980][T17667] veth0_macvtap: entered promiscuous mode [ 1195.582548][T17658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.585526][T17667] veth1_macvtap: entered promiscuous mode [ 1195.634801][T17667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.651886][T17667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.703606][ T5621] Bluetooth: hci18: command tx timeout [ 1195.709480][ T9810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.790086][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.893832][T10193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.923327][T17658] veth0_vlan: entered promiscuous mode [ 1195.965216][T17658] veth1_vlan: entered promiscuous mode [ 1195.999060][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.033720][T10192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.033749][T10192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.134390][T15251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.134418][T15251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.187051][T17658] veth0_macvtap: entered promiscuous mode [ 1196.210668][T17658] veth1_macvtap: entered promiscuous mode [ 1196.251288][T17658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.273110][T17658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.358349][T15251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.358418][T15251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.358457][T15251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.358494][T15251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.519673][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.519700][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.580218][T15050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.580243][T15050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.757397][T15064] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1196.918763][T15064] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1196.918802][T15064] usb 1-1: no configurations [ 1196.918814][T15064] usb 1-1: can't read configurations, error -22 [ 1197.017875][T17787] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 1197.107882][T15064] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1197.743027][T15064] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1197.743077][T15064] usb 1-1: no configurations [ 1197.743093][T15064] usb 1-1: can't read configurations, error -22 [ 1197.746363][T15064] usb usb1-port1: attempt power cycle [ 1198.125327][T15064] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1198.148462][T15064] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1198.148500][T15064] usb 1-1: no configurations [ 1198.148512][T15064] usb 1-1: can't read configurations, error -22 [ 1198.278846][T15064] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1198.301079][T15064] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1198.301121][T15064] usb 1-1: no configurations [ 1198.301133][T15064] usb 1-1: can't read configurations, error -22 [ 1198.305237][T15064] usb usb1-port1: unable to enumerate USB device [ 1198.804108][T17793] pxa27x-udc pcspkr: error -EINVAL: invalid resource (null) [ 1198.804143][T17793] pxa27x-udc pcspkr: probe with driver pxa27x-udc failed with error -22 [ 1198.955079][T12858] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1198.966324][T12858] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1198.971500][T12858] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1198.983083][T12858] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1198.983732][T12858] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1200.008361][T17794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.008550][T17794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.008707][T17794] bridge_slave_0: entered allmulticast mode [ 1200.012617][T17794] bridge_slave_0: entered promiscuous mode [ 1200.017860][T17794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.018036][T17794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.018527][T17794] bridge_slave_1: entered allmulticast mode [ 1200.020735][T17794] bridge_slave_1: entered promiscuous mode [ 1200.135641][T17794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.149381][T17794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.217018][T17794] team0: Port device team_slave_0 added [ 1200.221129][T17794] team0: Port device team_slave_1 added [ 1200.265191][T17794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.265214][T17794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.265246][T17794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.275725][T17794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.275750][T17794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.275784][T17794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.702999][T17794] hsr_slave_0: entered promiscuous mode [ 1200.703975][T17794] hsr_slave_1: entered promiscuous mode [ 1200.707380][T17794] debugfs: 'hsr0' already exists in 'hsr' [ 1200.707402][T17794] Cannot create hsr debugfs directory [ 1201.063554][ T5621] Bluetooth: hci19: command tx timeout [ 1201.105931][T17794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.234441][T17794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.195799][T17834] syz.3.3023 (17834): drop_caches: 2 [ 1202.451983][T17794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.720839][T17794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.156803][ T5621] Bluetooth: hci19: command tx timeout [ 1203.725320][T17794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1203.736144][T17794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1203.744373][T17794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1203.776423][T17794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1203.778523][T17794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1203.797418][T17794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1203.799807][T17794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1203.803190][T17794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1203.912780][T17794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.929546][T17794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.935556][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.935655][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.980230][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.980357][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.532293][T17794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.943929][T17794] veth0_vlan: entered promiscuous mode [ 1204.956007][T17794] veth1_vlan: entered promiscuous mode [ 1204.967571][T13553] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1205.002188][T17794] veth0_macvtap: entered promiscuous mode [ 1205.015894][T17794] veth1_macvtap: entered promiscuous mode [ 1205.035246][T17794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1205.055831][T17794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.134713][T13553] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1205.134759][T13553] usb 4-1: no configurations [ 1205.134774][T13553] usb 4-1: can't read configurations, error -22 [ 1205.139583][ T1153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.147106][T15251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.160466][T15251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.180700][T15096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.218337][ T5621] Bluetooth: hci19: command tx timeout [ 1205.259390][T13553] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1205.279715][T15096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.279739][T15096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.352065][T15251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.352091][T15251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.411015][T13553] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1205.411063][T13553] usb 4-1: no configurations [ 1205.411079][T13553] usb 4-1: can't read configurations, error -22 [ 1205.411413][T13553] usb usb4-port1: attempt power cycle [ 1205.523923][T12858] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1205.535031][T12858] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1205.535834][T12858] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1205.536754][T12858] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1205.561830][T12858] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1205.748463][T13553] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1205.768211][T11480] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1205.774853][T13553] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1205.774903][T13553] usb 4-1: no configurations [ 1205.774919][T13553] usb 4-1: can't read configurations, error -22 [ 1205.898140][T13553] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1205.918222][T11480] usb 5-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 1205.920698][T13553] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1205.920767][T13553] usb 4-1: no configurations [ 1205.920783][T13553] usb 4-1: can't read configurations, error -22 [ 1205.921927][T13553] usb usb4-port1: unable to enumerate USB device [ 1205.923734][T11480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.923761][T11480] usb 5-1: Product: syz [ 1205.923779][T11480] usb 5-1: Manufacturer: syz [ 1205.923797][T11480] usb 5-1: SerialNumber: syz [ 1206.020507][T11480] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 1206.446250][T17871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.446430][T17871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.446570][T17871] bridge_slave_0: entered allmulticast mode [ 1206.450500][T17871] bridge_slave_0: entered promiscuous mode [ 1206.453652][T17871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.453834][T17871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.453990][T17871] bridge_slave_1: entered allmulticast mode [ 1206.456083][T17871] bridge_slave_1: entered promiscuous mode [ 1206.508931][T17871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.512602][T17871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.562101][T17871] team0: Port device team_slave_0 added [ 1206.565500][T17871] team0: Port device team_slave_1 added [ 1206.606379][T17871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.606397][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.606429][T17871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.637982][T17871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.638004][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.638035][T17871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.752936][T17871] hsr_slave_0: entered promiscuous mode [ 1206.754296][T17871] hsr_slave_1: entered promiscuous mode [ 1206.755028][T17871] debugfs: 'hsr0' already exists in 'hsr' [ 1206.755078][T17871] Cannot create hsr debugfs directory [ 1207.015201][T17871] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.123453][T17871] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.206429][T17871] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.307473][ T5621] Bluetooth: hci19: command tx timeout [ 1207.309368][T17871] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.550783][T17871] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1207.568041][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1207.569212][T17871] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1207.573004][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1207.574281][T17871] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1207.614815][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1207.615999][T17871] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1207.632680][ T5621] Bluetooth: hci20: command tx timeout [ 1207.654134][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1207.772725][T17871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.804804][T17871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.832901][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.832992][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.840853][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.840993][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.560541][T17871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.660313][ T2359] pvrusb2: Failed to submit write-control URB status=-2 [ 1208.695749][T11480] usb 5-1: USB disconnect, device number 3 [ 1208.730654][ T2359] usb 5-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 1208.730687][ T2359] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 1209.195103][T17919] binder: 17916:17919 ioctl c0306201 0 returned -14 [ 1209.730207][ T5621] Bluetooth: hci20: command tx timeout [ 1210.191914][T17871] veth0_vlan: entered promiscuous mode [ 1210.209480][T17871] veth1_vlan: entered promiscuous mode [ 1210.367322][T17871] veth0_macvtap: entered promiscuous mode [ 1210.385500][T17871] veth1_macvtap: entered promiscuous mode [ 1211.861563][ T5621] Bluetooth: hci20: command tx timeout [ 1211.933523][T17932] syz.3.3035 (17932): drop_caches: 2 [ 1212.113192][T17871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.304577][T17871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.438387][T15096] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.536827][ T5621] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1212.546562][ T5621] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1212.573979][ T5621] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1212.587462][ T5621] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1212.593900][ T5621] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1212.850757][ T9812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.851142][ T9812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.880565][T15251] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.196830][T10193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.196857][T10193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.331715][ T5621] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 1213.348902][ T5621] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 1213.351887][ T5621] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 1213.354207][ T5621] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 1213.354880][ T5621] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 1213.451969][T10193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.451996][T10193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.816175][T17963] oxu210hp-hcd serial8250: error -ENXIO: IRQ index 0 not found [ 1213.937606][ T5621] Bluetooth: hci20: command tx timeout [ 1214.742427][ T5621] Bluetooth: hci21: command tx timeout [ 1214.772835][T17985] bonding: bond0 is being created... [ 1214.792107][T17985] bonding: bond0 already exists [ 1214.839501][T17985] bond0: option mode: unable to set because the bond device has slaves [ 1214.866424][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1214.866450][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1214.888549][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1214.888579][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1214.908919][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1214.908946][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1214.960451][ T1166] bond0: (slave bond_slave_0): interface is now down [ 1214.960472][ T1166] bond0: (slave bond_slave_1): interface is now down [ 1214.977435][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1214.977463][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1214.999533][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1214.999558][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1215.023213][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1215.023239][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1215.040479][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1215.040506][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1215.066038][T15251] bond0: (slave bond_slave_0): interface is now down [ 1215.066067][T15251] bond0: (slave bond_slave_1): interface is now down [ 1215.077488][ T1266] bond0: (slave bond_slave_0): interface is now down [ 1215.077512][ T1266] bond0: (slave bond_slave_1): interface is now down [ 1215.101052][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1215.101082][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1215.125144][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1215.125171][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1215.139700][ T1266] bond0: (slave bond_slave_0): interface is now down [ 1215.139725][ T1266] bond0: (slave bond_slave_1): interface is now down [ 1215.159620][ T1166] bond0: (slave bond_slave_0): interface is now down [ 1215.159646][ T1166] bond0: (slave bond_slave_1): interface is now down [ 1215.286276][ T6681] bond0: (slave bond_slave_0): interface is now down [ 1215.286308][ T6681] bond0: (slave bond_slave_1): interface is now down [ 1215.312192][ T6681] bond0: now running without any active interface! [ 1215.378108][ T5621] Bluetooth: hci22: command tx timeout [ 1216.063914][T18001] syz.6.3048 (18001): drop_caches: 2 [ 1216.239609][T17941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.251543][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.251767][T17941] bridge_slave_0: entered allmulticast mode [ 1216.285326][T17941] bridge_slave_0: entered promiscuous mode [ 1216.324239][T17941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.324328][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.340530][T17941] bridge_slave_1: entered allmulticast mode [ 1216.343440][T17941] bridge_slave_1: entered promiscuous mode [ 1216.751534][T17941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.818393][ T5621] Bluetooth: hci21: command tx timeout [ 1216.846377][T17941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.037066][T12858] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 1217.054315][T12858] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 1217.056253][T12858] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 1217.088196][T12858] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 1217.105197][T12858] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 1217.349039][T17941] team0: Port device team_slave_0 added [ 1217.458293][ T5621] Bluetooth: hci22: command tx timeout [ 1217.494987][T17941] team0: Port device team_slave_1 added [ 1217.907639][T17941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.907661][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.907693][T17941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.911496][T17950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.914398][T17950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.914567][T17950] bridge_slave_0: entered allmulticast mode [ 1218.022321][T17950] bridge_slave_0: entered promiscuous mode [ 1218.034093][T17941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.034115][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.034148][T17941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.413378][T18033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.488950][T17950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.489165][T17950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.489373][T17950] bridge_slave_1: entered allmulticast mode [ 1218.527127][T17950] bridge_slave_1: entered promiscuous mode [ 1218.711642][T17950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.731294][T17950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.879146][T17941] hsr_slave_0: entered promiscuous mode [ 1218.880422][T17941] hsr_slave_1: entered promiscuous mode [ 1218.881287][T17941] debugfs: 'hsr0' already exists in 'hsr' [ 1218.881309][T17941] Cannot create hsr debugfs directory [ 1218.903419][ T5621] Bluetooth: hci21: command tx timeout [ 1218.979064][T17950] team0: Port device team_slave_0 added [ 1219.003163][T17950] team0: Port device team_slave_1 added [ 1219.068680][T18039] PM: suspend entry (deep) [ 1219.068702][T18039] PM: suspend exit [ 1219.159290][T17950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.159312][T17950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.159344][T17950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.206119][T17950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.206139][T17950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.206170][T17950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.219834][ T5621] Bluetooth: hci23: command tx timeout [ 1219.446946][T17950] hsr_slave_0: entered promiscuous mode [ 1219.448569][T17950] hsr_slave_1: entered promiscuous mode [ 1219.449378][T17950] debugfs: 'hsr0' already exists in 'hsr' [ 1219.449400][T17950] Cannot create hsr debugfs directory [ 1219.543151][ T5621] Bluetooth: hci22: command tx timeout [ 1219.552918][T16347] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1219.608600][T15064] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1219.681218][T17941] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.699428][T16347] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1219.703526][T16347] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.703551][T16347] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1219.712886][T16347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.712917][T16347] usb 7-1: Product: syz [ 1219.712941][T16347] usb 7-1: Manufacturer: syz [ 1219.712960][T16347] usb 7-1: SerialNumber: syz [ 1219.744581][T16347] usb 7-1: config 0 descriptor?? [ 1219.761053][T15064] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00 [ 1219.775628][T15064] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1219.775664][T15064] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1219.775708][T15064] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.793787][T18044] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1219.793942][T18044] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1219.954961][T17941] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.956588][ T5754] usb 7-1: USB disconnect, device number 8 [ 1219.958098][T15064] ushc 4-1:1.0: probe with driver ushc failed with error -110 [ 1220.129346][T17941] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.281108][T17941] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.579838][T18011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.579955][T18011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.580129][T18011] bridge_slave_0: entered allmulticast mode [ 1220.591371][T18011] bridge_slave_0: entered promiscuous mode [ 1220.611479][T18011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.611596][T18011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.611792][T18011] bridge_slave_1: entered allmulticast mode [ 1220.623832][T18011] bridge_slave_1: entered promiscuous mode [ 1220.727951][T18011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.745746][T18011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.807777][T18011] team0: Port device team_slave_0 added [ 1220.813742][T18011] team0: Port device team_slave_1 added [ 1220.884549][T17941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1220.896854][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1220.899329][T17941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1220.908714][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1220.909878][T17941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1220.916022][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1220.916931][T17941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1220.917389][T13615] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1220.923892][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1220.962015][T18011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.962036][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.962068][T18011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.964240][T18011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.964256][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.964287][T18011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.008966][T12858] Bluetooth: hci21: command tx timeout [ 1221.116190][T17950] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.202543][T18011] hsr_slave_0: entered promiscuous mode [ 1221.214731][T18011] hsr_slave_1: entered promiscuous mode [ 1221.215612][T18011] debugfs: 'hsr0' already exists in 'hsr' [ 1221.215634][T18011] Cannot create hsr debugfs directory [ 1221.299281][T12858] Bluetooth: hci23: command tx timeout [ 1221.346739][T17950] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.525194][T17950] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.632264][T12858] Bluetooth: hci22: command tx timeout [ 1221.642652][T17950] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.740452][T17941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.804289][T17941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.866195][T18011] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.904649][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.904734][ T6282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.923945][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.924054][ T9810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.016594][T18011] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.150223][T18011] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.240288][T18011] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.384889][T16347] usb 4-1: USB disconnect, device number 11 [ 1222.831871][T18011] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1222.850697][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.852369][T18011] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1222.876265][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1222.884958][T18011] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1222.893370][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1222.894905][T18011] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1222.955844][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1223.231414][T13615] usb 7-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice= 1.00 [ 1223.374647][T13615] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1223.374699][T13615] usb 7-1: can't read configurations, error -71 [ 1223.382055][T12858] Bluetooth: hci23: command tx timeout [ 1223.567153][T17950] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1223.645345][T17950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1223.646387][T17950] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1223.722372][T17950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.760681][T17950] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1223.790375][T17950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.791321][T17950] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1223.844615][T17950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1223.874472][T17941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.457968][ T5621] Bluetooth: hci23: command tx timeout [ 1225.744993][T18011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.915472][T18011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.941109][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.941220][ T9812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.984381][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.984496][ T9812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.143439][T17950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.254496][T17950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.332432][T10189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.332543][T10189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.554703][T10189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.554814][T10189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.797416][T17941] veth0_vlan: entered promiscuous mode [ 1228.868248][T17941] veth1_vlan: entered promiscuous mode [ 1229.100675][T17941] veth0_macvtap: entered promiscuous mode [ 1229.165233][T17941] veth1_macvtap: entered promiscuous mode [ 1229.281830][T17941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.337173][T17941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.370644][ T6681] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.371394][T10193] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.371587][T10193] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.371646][T10193] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.886323][ T9812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.886349][ T9812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.003868][T18011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.019230][T15096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.019258][T15096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.012459][T18149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.468841][T17950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.894371][T18011] veth0_vlan: entered promiscuous mode [ 1231.956249][T18011] veth1_vlan: entered promiscuous mode [ 1233.400052][T18011] veth0_macvtap: entered promiscuous mode [ 1233.422000][T18011] veth1_macvtap: entered promiscuous mode [ 1233.478286][T18011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.517038][T18011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.576962][ T9812] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.579166][ T6681] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.579238][ T6681] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.579298][ T6681] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.604181][T18174] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 1234.606371][T18174] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 1234.633058][T18174] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 1234.652675][T18174] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 1234.656010][T18174] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 1234.793469][T13019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.793497][T13019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.154404][T18174] Bluetooth: hci0: command 0x0406 tx timeout [ 1235.182574][T17950] veth0_vlan: entered promiscuous mode [ 1235.209778][ T9812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.209803][ T9812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.241059][T17950] veth1_vlan: entered promiscuous mode [ 1235.378314][T17950] veth0_macvtap: entered promiscuous mode [ 1235.411122][T17950] veth1_macvtap: entered promiscuous mode [ 1235.470774][T17950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.515890][T17950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.769695][ T9812] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.769750][ T9812] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.021317][ T6282] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.144737][ T6345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.144761][ T6345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.152853][ T6345] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.453430][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.453456][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.738264][ T5621] Bluetooth: hci24: command tx timeout [ 1238.336008][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.336077][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.818294][ T5621] Bluetooth: hci24: command tx timeout [ 1239.225552][T18172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.233221][T18172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.233395][T18172] bridge_slave_0: entered allmulticast mode [ 1239.241191][T18172] bridge_slave_0: entered promiscuous mode [ 1239.262800][T18172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.264601][T18172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.264781][T18172] bridge_slave_1: entered allmulticast mode [ 1239.274828][T18172] bridge_slave_1: entered promiscuous mode [ 1240.075461][T18172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.148859][T18172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.347894][T18233] bond0: (slave bond_slave_0): Releasing backup interface [ 1240.396302][T18172] team0: Port device team_slave_0 added [ 1240.434530][T18235] bond0: option mode: unable to set because the bond device has slaves [ 1240.436137][T18237] bond0: option mode: unable to set because the bond device has slaves [ 1240.452238][T18172] team0: Port device team_slave_1 added [ 1240.685756][T18172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.685776][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.685806][T18172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.740402][T18172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.740422][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.740515][T18172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.898046][ T5621] Bluetooth: hci24: command tx timeout [ 1240.971926][T18172] hsr_slave_0: entered promiscuous mode [ 1240.989022][T18172] hsr_slave_1: entered promiscuous mode [ 1240.992098][T18172] debugfs: 'hsr0' already exists in 'hsr' [ 1240.992122][T18172] Cannot create hsr debugfs directory [ 1242.904822][T18253] 0x000000000000-0x000000010000 : "" [ 1242.977377][ T5621] Bluetooth: hci24: command tx timeout [ 1243.421761][T18253] ftl_cs: FTL header not found. [ 1243.625314][T18172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.363525][T18172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.553816][T18269] binder: 18267:18269 ioctl c0306201 0 returned -14 [ 1245.341060][T18260] Bluetooth: hci7: command 0x0406 tx timeout [ 1245.341088][T12858] Bluetooth: hci8: command 0x0406 tx timeout [ 1246.016841][T18172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.522068][ T5621] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 1246.533218][ T5621] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 1246.549362][ T5621] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 1246.571118][ T5621] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 1246.574650][ T5621] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 1247.297115][T18172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.349732][T18288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1247.482949][T16347] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1247.643103][T16347] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1247.652753][T16347] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1247.652786][T16347] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1247.664109][T16347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.664140][T16347] usb 6-1: Product: syz [ 1247.664158][T16347] usb 6-1: Manufacturer: syz [ 1247.664176][T16347] usb 6-1: SerialNumber: syz [ 1248.243073][T16347] usb 6-1: Cannot retrieve CPort count: -110 [ 1248.243129][T16347] usb 6-1: Cannot retrieve CPort count: -110 [ 1248.243157][T16347] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1248.445197][ T5747] usb 6-1: USB disconnect, device number 16 [ 1248.595983][T18172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1248.638291][T18172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1248.644745][T18172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1248.657393][ T5621] Bluetooth: hci25: command tx timeout [ 1248.678442][T18172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1248.683632][T18172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1248.741616][T18172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.774257][T18172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1248.798264][T18172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1249.408955][T18307] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1250.121723][T18172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.333881][T18172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.383914][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.383999][ T9810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.421973][ T5621] Bluetooth: hci9: command 0x0406 tx timeout [ 1250.740477][ T5621] Bluetooth: hci25: command tx timeout [ 1251.836593][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.836725][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.822641][ T5621] Bluetooth: hci25: command tx timeout [ 1253.483804][ T32] INFO: task syz.6.2830:16396 blocked for more than 144 seconds. [ 1253.483840][ T32] Tainted: G L syzkaller #0 [ 1253.483855][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1253.483867][ T32] task:syz.6.2830 state:D stack:27432 pid:16396 tgid:16394 ppid:14481 task_flags:0x400140 flags:0x00080002 [ 1253.483944][ T32] Call Trace: [ 1253.483954][ T32] [ 1253.483971][ T32] __schedule+0x17db/0x58f0 [ 1253.484037][ T32] ? __pfx___schedule+0x10/0x10 [ 1253.484075][ T32] ? schedule+0x90/0x2b0 [ 1253.484138][ T32] schedule+0x164/0x2b0 [ 1253.484170][ T32] schedule_preempt_disabled+0x13/0x30 [ 1253.484197][ T32] __mutex_lock+0x7c1/0x1550 [ 1253.484234][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1253.484270][ T32] ? write_versions+0x95/0xe30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1253.484310][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1253.484358][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.484396][ ** replaying previous printk message ** [ 1253.484396][ T32] write_versions+0x95/0xe30 [ 1253.484447][ T32] ? __pfx_write_versions+0x10/0x10 [ 1253.484482][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.484524][ T32] ? _copy_from_user+0x94/0xb0 [ 1253.484599][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.484631][ T32] ? simple_transaction_get+0x12d/0x160 [ 1253.484674][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1253.484714][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1253.484751][ T32] vfs_write+0x296/0xba0 [ 1253.484802][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1253.484845][ T32] ? __fget_files+0x2a/0x420 [ 1253.484887][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.484918][ T32] ? __fget_files+0x3a2/0x420 [ 1253.484953][ T32] ? __fget_files+0x2a/0x420 [ 1253.484995][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.485031][ T32] ksys_write+0x150/0x270 [ 1253.485075][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1253.485159][ T32] do_syscall_64+0x166/0x520 [ 1253.485190][ T32] ? trace_irq_disable+0x3b/0x140 [ 1253.485217][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.485251][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.485279][ T32] RIP: 0033:0x7f147f19e159 [ 1253.485302][ T32] RSP: 002b:00007f14800cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1253.485329][ T32] RAX: ffffffffffffffda RBX: 00007f147f425fa0 RCX: 00007f147f19e159 [ 1253.485349][ T32] RDX: 0000000000000013 RSI: 0000200000000140 RDI: 0000000000000003 [ 1253.485367][ T32] RBP: 00007f147f23503b R08: 0000000000000000 R09: 0000000000000000 [ 1253.485385][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.485402][ T32] R13: 00007f147f426038 R14: 00007f147f425fa0 R15: 00007ffc104d49b8 [ 1253.485452][ T32] [ 1253.485464][ T32] INFO: task syz.6.2830:16399 blocked for more than 144 seconds. [ 1253.485486][ T32] Tainted: G L syzkaller #0 [ 1253.485501][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1253.485513][ T32] task:syz.6.2830 state:D stack:27432 pid:16399 tgid:16394 ppid:14481 task_flags:0x400040 flags:0x00080002 [ 1253.485588][ T32] Call Trace: [ 1253.485597][ T32] [ 1253.485613][ T32] __schedule+0x17db/0x58f0 [ 1253.485658][ T32] ? kernel_text_address+0xa5/0xe0 [ 1253.485688][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.485719][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.485749][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1253.485786][ T32] ? __pfx___schedule+0x10/0x10 [ 1253.485822][ T32] ? schedule+0x90/0x2b0 [ 1253.485852][ T32] schedule+0x164/0x2b0 [ 1253.485882][ T32] schedule_preempt_disabled+0x13/0x30 [ 1253.485907][ T32] __mutex_lock+0x7c1/0x1550 [ 1253.485936][ T32] ? kasan_save_track+0x3e/0x80 [ 1253.485969][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1253.486004][ T32] ? write_ports+0xb5/0xd10 [ 1253.486042][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1253.486148][ T32] write_ports+0xb5/0xd10 [ 1253.486190][ T32] ? __pfx_write_ports+0x10/0x10 [ 1253.486228][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.486271][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.486314][ T32] ? _copy_from_user+0x94/0xb0 [ 1253.486349][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.486379][ T32] ? simple_transaction_get+0x12d/0x160 [ 1253.486419][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1253.486467][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1253.486504][ T32] vfs_write+0x296/0xba0 [ 1253.486556][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1253.486598][ T32] ? __fget_files+0x2a/0x420 [ 1253.486640][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.486671][ T32] ? __fget_files+0x3a2/0x420 [ 1253.486707][ T32] ? __fget_files+0x2a/0x420 [ 1253.486748][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.486785][ T32] ksys_write+0x150/0x270 [ 1253.486829][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1253.486884][ T32] do_syscall_64+0x166/0x520 [ 1253.486913][ T32] ? trace_irq_disable+0x3b/0x140 [ 1253.486941][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.486975][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.487001][ T32] RIP: 0033:0x7f147f19e159 [ 1253.487023][ T32] RSP: 002b:00007f14800ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1253.487050][ T32] RAX: ffffffffffffffda RBX: 00007f147f426090 RCX: 00007f147f19e159 [ 1253.487069][ T32] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1253.487115][ T32] RBP: 00007f147f23503b R08: 0000000000000000 R09: 0000000000000000 [ 1253.487132][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.487148][ T32] R13: 00007f147f426128 R14: 00007f147f426090 R15: 00007ffc104d49b8 [ 1253.487250][ T32] [ 1253.487263][ T32] INFO: task syz.6.2830:16400 blocked for more than 144 seconds. [ 1253.487286][ T32] Tainted: G L syzkaller #0 [ 1253.487314][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1253.487330][ T32] task:syz.6.2830 state:D stack:27432 pid:16400 tgid:16394 ppid:14481 task_flags:0x400040 flags:0x00080002 [ 1253.487405][ T32] Call Trace: [ 1253.487415][ T32] [ 1253.487436][ T32] __schedule+0x17db/0x58f0 [ 1253.487483][ T32] ? __kernel_text_address+0xd/0x30 [ 1253.487516][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.487547][ T32] ? arch_stack_walk+0xfb/0x150 [ 1253.487585][ T32] ? __pfx___schedule+0x10/0x10 [ 1253.487622][ T32] ? schedule+0x90/0x2b0 [ 1253.487787][ T32] schedule+0x164/0x2b0 [ 1253.487820][ T32] schedule_preempt_disabled+0x13/0x30 [ 1253.487847][ T32] __mutex_lock+0x7c1/0x1550 [ 1253.487881][ T32] ? nfsctl_transaction_write+0xc7/0x160 [ 1253.487922][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1253.487957][ T32] ? write_threads+0x3b1/0x610 [ 1253.487995][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1253.488034][ T32] ? simple_strntoull+0x114/0x190 [ 1253.488116][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.488146][ T32] ? qword_get+0x5ad/0x650 [ 1253.488194][ T32] write_threads+0x3b1/0x610 [ 1253.488235][ T32] ? __pfx_write_threads+0x10/0x10 [ 1253.488281][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.488324][ T32] ? _copy_from_user+0x94/0xb0 [ 1253.488359][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.488389][ T32] ? simple_transaction_get+0x12d/0x160 [ 1253.488439][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1253.488477][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1253.488514][ T32] vfs_write+0x296/0xba0 [ 1253.488564][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1253.488606][ T32] ? __fget_files+0x2a/0x420 [ 1253.488647][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.488678][ T32] ? __fget_files+0x3a2/0x420 [ 1253.488715][ T32] ? __fget_files+0x2a/0x420 [ 1253.488755][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.488837][ T32] ksys_write+0x150/0x270 [ 1253.488881][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1253.488935][ T32] do_syscall_64+0x166/0x520 [ 1253.488965][ T32] ? trace_irq_disable+0x3b/0x140 [ 1253.488992][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.489026][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.489052][ T32] RIP: 0033:0x7f147f19e159 [ 1253.489075][ T32] RSP: 002b:00007f148008a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1253.489128][ T32] RAX: ffffffffffffffda RBX: 00007f147f426180 RCX: 00007f147f19e159 [ 1253.489148][ T32] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 1253.489166][ T32] RBP: 00007f147f23503b R08: 0000000000000000 R09: 0000000000000000 [ 1253.489184][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.489200][ T32] R13: 00007f147f426218 R14: 00007f147f426180 R15: 00007ffc104d49b8 [ 1253.489242][ T32] [ 1253.489255][ T32] INFO: task syz.7.2834:16408 blocked for more than 144 seconds. [ 1253.489278][ T32] Tainted: G L syzkaller #0 [ 1253.489292][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1253.489304][ T32] task:syz.7.2834 state:D stack:27432 pid:16408 tgid:16405 ppid:15822 task_flags:0x400140 flags:0x00080002 [ 1253.489378][ T32] Call Trace: [ 1253.489388][ T32] [ 1253.489403][ T32] __schedule+0x17db/0x58f0 [ 1253.489454][ T32] ? arch_stack_walk+0xfb/0x150 [ 1253.489500][ T32] ? __pfx___schedule+0x10/0x10 [ 1253.489538][ T32] ? schedule+0x90/0x2b0 [ 1253.489569][ T32] schedule+0x164/0x2b0 [ 1253.489598][ T32] schedule_preempt_disabled+0x13/0x30 [ 1253.489625][ T32] __mutex_lock+0x7c1/0x1550 [ 1253.489661][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1253.489696][ T32] ? write_versions+0x95/0xe30 [ 1253.489736][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1253.489784][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.489820][ T32] write_versions+0x95/0xe30 [ 1253.489864][ T32] ? __pfx_write_versions+0x10/0x10 [ 1253.489898][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.489940][ T32] ? _copy_from_user+0x94/0xb0 [ 1253.489975][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.490005][ T32] ? simple_transaction_get+0x12d/0x160 [ 1253.490048][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1253.490115][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1253.490153][ T32] vfs_write+0x296/0xba0 [ 1253.490205][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1253.490247][ T32] ? __fget_files+0x2a/0x420 [ 1253.490289][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.490320][ T32] ? __fget_files+0x3a2/0x420 [ 1253.490356][ T32] ? __fget_files+0x2a/0x420 [ 1253.537993][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.538042][ T32] ksys_write+0x150/0x270 [ 1253.538089][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1253.538144][ T32] do_syscall_64+0x166/0x520 [ 1253.538175][ T32] ? trace_irq_disable+0x3b/0x140 [ 1253.538203][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.538237][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.538264][ T32] RIP: 0033:0x7f66c8f9e159 [ 1253.538287][ T32] RSP: 002b:00007f66c9ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1253.538316][ T32] RAX: ffffffffffffffda RBX: 00007f66c9225fa0 RCX: 00007f66c8f9e159 [ 1253.538336][ T32] RDX: 0000000000000009 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1253.538354][ T32] RBP: 00007f66c903503b R08: 0000000000000000 R09: 0000000000000000 [ 1253.538372][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.538389][ T32] R13: 00007f66c9226038 R14: 00007f66c9225fa0 R15: 00007ffc1270d1e8 [ 1253.538430][ T32] [ 1253.538599][ T32] [ 1253.538599][ T32] Showing all locks held in the system: [ 1253.538614][ T32] locks held by pr/ttyS0/16: 3, last CPU#0: [ 1253.538634][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1253.538718][ T32] #1: ffffffff9ad3a098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1253.538802][ T32] #2: ffff8880b8628f58 (lock#7){..-.}-{3:3}, at: kcov_remote_stop+0x77/0x6d0 [ 1253.538873][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1253.538892][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1253.539002][ T32] locks held by kworker/u8:4/59: 3, on CPU#1: [ 1253.539021][ T32] #0: ffff88802ff58940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1253.539095][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1253.539166][ T32] #2: ffffffff902531c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1253.539239][ T32] locks held by pvrusb2-context/2359: 2, on CPU#0: [ 1253.539258][ T32] #0: ffff8880b05cc180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xe4/0x3c60 [ 1253.539332][ T32] #1: ffffffff8ebf7d48 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1253.539418][ T32] locks held by syslogd/4963: 1, last CPU#1: [ 1253.539436][ T32] #0: ffff88807fe34170 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 1253.539508][ T32] locks held by klogd/4970: 1, last CPU#1: [ 1253.539526][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 1253.539591][ T32] locks held by getty/5369: 2, on CPU#1: [ 1253.539608][ T32] #0: ffff88802c1750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1253.539686][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1253.539771][ T32] locks held by kworker/1:0/11480: 6, on CPU#1: [ 1253.539790][ T32] #0: ffff88801eac8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1253.539863][ T32] #1: ffffc90003767c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1253.539940][ T32] #2: ffff8880294d21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1253.540010][ T32] #3: ffff88804ecbc1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 1253.540162][ T32] #4: ffff8880769011a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1253.540235][ T32] #5: ffff8880b05cc180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x4f0 [ 1253.540313][ T32] locks held by kworker/1:1/13545: 3, on CPU#1: [ 1253.540332][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1253.540404][ T32] #1: ffffc900039c7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1253.540476][ T32] #2: ffffffff902531c0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 1253.540555][ T32] locks held by syz-executor/14594: 2, on CPU#0: [ 1253.540573][ T32] #0: ffff88807d89c0e8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1253.540654][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1253.540727][ T32] locks held by syz.1.2793/16210: 3, on CPU#1: [ 1253.540745][ T32] #0: ffff88807ee550b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.540820][ T32] #1: ffff88807272c460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.540901][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.540978][ T32] locks held by syz.6.2830/16396: 3, on CPU#0: [ 1253.540997][ T32] #0: ffff8880266ce7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.541071][ T32] #1: ffff88804cfae460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.541152][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1253.541865][ T32] locks held by syz.6.2830/16399: 3, on CPU#0: [ 1253.541884][ T32] #0: ffff88802904e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.541966][ T32] #1: ffff88804cfae460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.542045][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1253.542116][ T32] locks held by syz.6.2830/16400: 3, on CPU#1: [ 1253.542134][ T32] #0: ffff88807ee59430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.542207][ T32] #1: ffff88804cfae460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.542288][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.545091][ T32] locks held by syz.7.2834/16408: 3, on CPU#0: [ 1253.545110][ T32] #0: ffff8880795d1270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.545186][ T32] #1: ffff888051e38460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.545390][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1253.545464][ T32] locks held by syz.5.2842/16436: 3, on CPU#1: [ 1253.545483][ T32] #0: ffff88801f731cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.545557][ T32] #1: ffff88807e230460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.545636][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1253.545709][ T32] locks held by syz.5.2842/16439: 3, on CPU#1: [ 1253.545727][ T32] #0: ffff88807e76b7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.545801][ T32] #1: ffff88807e230460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.545882][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1253.545960][ T32] locks held by syz.5.2842/16442: 3, on CPU#1: [ 1253.545979][ T32] #0: ffff88801f718d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.547449][ T32] #1: ffff88807e230460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.547536][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.547612][ T32] locks held by syz-executor/16617: 2, on CPU#0: [ 1253.547631][ T32] #0: ffff88804e2a80e8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1253.547711][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1253.547780][ T32] locks held by syz.8.2882/16697: 3, on CPU#0: [ 1253.547798][ T32] #0: ffff88805533c7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.547872][ T32] #1: ffff888081d96460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.547960][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1253.549425][ T32] locks held by syz.8.2882/16700: 3, on CPU#0: [ 1253.549446][ T32] #0: ffff88807ee2ad30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.549640][ T32] #1: ffff888081d96460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.549724][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.549801][ T32] locks held by syz.2.2898/16868: 2, on CPU#0: [ 1253.549820][ T32] #0: ffff88807a219430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.549894][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1253.549974][ T32] locks held by syz.3.2899/16943: 3, on CPU#0: [ 1253.549993][ T32] #0: ffff888034202d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.550067][ T32] #1: ffff88803aa1a460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.550149][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1253.550221][ T32] locks held by syz.3.2899/16946: 3, on CPU#1: [ 1253.550239][ T32] #0: ffff88807e4da9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.550312][ T32] #1: ffff88803aa1a460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.550393][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.550466][ T32] locks held by syz-executor/16975: 2, on CPU#1: [ 1253.550484][ T32] #0: ffff88802a4800e8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1253.550564][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1253.550631][ T32] locks held by syz-executor/17004: 2, on CPU#0: [ 1253.552722][ T32] #0: ffff88807a6ba0e8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1253.560948][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1253.561026][ T32] locks held by syz.0.2920/17080: 3, on CPU#1: [ 1253.561046][ T32] #0: ffff888078b7e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.561121][ T32] #1: ffff8880505f8460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.561727][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1253.561807][ T32] locks held by syz.0.2920/17085: 3, on CPU#0: [ 1253.561826][ T32] #0: ffff8880790e7430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.561900][ T32] #1: ffff8880505f8460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.561999][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1253.562071][ T32] locks held by syz.0.2920/17087: 3, on CPU#1: [ 1253.562089][ T32] #0: ffff888030664470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.562159][ T32] #1: ffff8880505f8460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.562235][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.562310][ T32] locks held by udevd/17134: 4, on CPU#1: [ 1253.562328][ T32] #0: ffff88802968fe18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1253.563608][ T32] #1: ffff88808d403c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1253.563687][ T32] #2: ffff88807c9e3878 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1253.563766][ T32] #3: ffff88804ecbc1d8 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 1253.563844][ T32] locks held by syz-executor/17476: 2, on CPU#1: [ 1253.563863][ T32] #0: ffff88802bf4e0e8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1253.563943][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1253.564009][ T32] locks held by syz.7.2958/17485: 3, on CPU#0: [ 1253.565987][ T32] #0: ffff88807dd5cd30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.566066][ T32] #1: ffff88804e83e460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.566147][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1253.566220][ T32] locks held by syz.7.2958/17486: 3, on CPU#1: [ 1253.566238][ T32] #0: ffff88801eb70630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.566317][ T32] #1: ffff88804e83e460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.566398][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1253.566469][ T32] locks held by syz.7.2958/17490: 3, on CPU#0: [ 1253.566487][ T32] #0: ffff8880795e9430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.566560][ T32] #1: ffff88804e83e460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.566640][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.570509][ T32] locks held by syz.5.2959/17492: 3, on CPU#1: [ 1253.570529][ T32] #0: ffff888032f1ed30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.570603][ T32] #1: ffff888079560460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.570684][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1253.570756][ T32] locks held by syz.5.2959/17495: 3, on CPU#1: [ 1253.570774][ T32] #0: ffff888035335b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.570848][ T32] #1: ffff888079560460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.570929][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.571002][ T32] locks held by syz-executor/17565: 2, on CPU#0: [ 1253.571038][ T32] #0: ffff8880725520e8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1253.571118][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1253.571186][ T32] locks held by syz.9.2986/17622: 3, on CPU#1: [ 1253.571204][ T32] #0: ffff88807ee55430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.571285][ T32] #1: ffff88804e82a460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.574026][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1253.574099][ T32] locks held by syz.9.2986/17625: 3, on CPU#1: [ 1253.574117][ T32] #0: ffff88807583b0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.574190][ T32] #1: ffff88804e82a460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.574279][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.574352][ T32] locks held by syz-executor/17667: 2, on CPU#1: [ 1253.574371][ T32] #0: ffff88807b7060e8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1253.574450][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1253.574520][ T32] locks held by syz-executor/17794: 2, on CPU#0: [ 1253.574539][ T32] #0: ffff8880327f80e8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1253.574617][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1253.574693][ T32] locks held by syz.6.3072/18129: 3, on CPU#1: [ 1253.574711][ T32] #0: ffff888075c427f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.577919][ T32] #1: ffff8880329ce460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.578015][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.578091][ T32] locks held by syz-executor/18172: 1, on CPU#1: [ 1253.578111][ T32] #0: ffffffff902531c0 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 1253.578189][ T32] locks held by syz.9.3085/18209: 3, on CPU#0: [ 1253.578207][ T32] #0: ffff88802c21ab70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.578281][ T32] #1: ffff8880419d4460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.578362][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1253.580014][ T32] locks held by syz.9.3085/18211: 3, on CPU#0: [ 1253.580034][ T32] #0: ffff88802c21a9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.580108][ T32] #1: ffff8880419d4460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.580290][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1253.580368][ T32] locks held by syz.9.3085/18212: 3, on CPU#0: [ 1253.580388][ T32] #0: ffff88802c21b270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1253.580475][ T32] #1: ffff8880419d4460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1253.580557][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1253.580631][ T32] locks held by syz.5.3088/18230: 1, last CPU#0: [ 1253.580650][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1253.583197][ T32] locks held by syz.7.3104/18293: 2, last CPU#0: [ 1253.583213][ T32] #0: ffff88807c8483b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1253.583274][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1253.583331][ T32] locks held by syz-executor/18277: 2, last CPU#0: [ 1253.583346][ T32] #0: ffffffff907a7970 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1253.583411][ T32] #1: ffffffff902531c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1253.583475][ T32] locks held by syz-executor/18325: 4, last CPU#0: [ 1253.583490][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1253.583563][ T32] #1: ffff888073c75038 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1253.583624][ T32] #2: ffff888073c729f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1253.583691][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1253.583750][ T32] [ 1253.583756][ T32] ============================================= [ 1253.583756][ T32] [ 1253.583767][ T32] NMI backtrace for cpu 1 [ 1253.583783][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1253.583809][ T32] Tainted: [L]=SOFTLOCKUP [ 1253.583817][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1253.583830][ T32] Call Trace: [ 1253.583843][ T32] [ 1253.583852][ T32] dump_stack_lvl+0xe8/0x150 [ 1253.583886][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1253.583920][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1253.583959][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1253.583994][ T32] sys_info+0x135/0x170 [ 1253.584022][ T32] watchdog+0xfd7/0x1030 [ 1253.584052][ T32] ? watchdog+0x1c7/0x1030 [ 1253.584080][ T32] kthread+0x38b/0x480 [ 1253.584102][ T32] ? __pfx_watchdog+0x10/0x10 [ 1253.584122][ T32] ? __pfx_kthread+0x10/0x10 [ 1253.584146][ T32] ret_from_fork+0x514/0xb70 [ 1253.584171][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1253.584192][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.584217][ T32] ? __switch_to+0xc89/0x1420 [ 1253.584251][ T32] ? __pfx_kthread+0x10/0x10 [ 1253.584274][ T32] ret_from_fork_asm+0x1a/0x30 [ 1253.584325][ T32] [ 1253.584381][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1253.584410][ C0] NMI backtrace for cpu 0 [ 1253.584428][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1253.584459][ C0] Tainted: [L]=SOFTLOCKUP [ 1253.584467][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1253.584483][ C0] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 1253.584512][ C0] RIP: 0010:__lock_acquire+0x18de/0x2de0 [ 1253.584539][ C0] Code: 00 00 0f 83 7f 01 00 00 4e 8b 3c e5 a0 29 9b 96 ff c0 25 ff 0f 00 00 89 05 7f 5f f8 14 4d 85 ff 0f 84 9d 01 00 00 49 8b 47 10 <48> 85 c0 0f 84 fc 0c 00 00 8b 0d 6b 5f f8 14 39 48 5c 0f 84 6a ff [ 1253.584560][ C0] RSP: 0018:ffffc900000e6da8 EFLAGS: 00000086 [ 1253.584580][ C0] RAX: ffffffff9447da98 RBX: 00000000000003fd RCX: ffffffff974943e8 [ 1253.584598][ C0] RDX: 0000000000000000 RSI: ffff88801dedeb28 RDI: 00000000000003fd [ 1253.584614][ C0] RBP: ea18ed6218850c2b R08: ffffc900000e6d70 R09: 0000000000000020 [ 1253.584631][ C0] R10: dffffc0000000000 R11: ffffffff81a39f70 R12: 00000000000001fb [ 1253.584649][ C0] R13: ffffffff94417548 R14: ffff88801dedeb28 R15: ffffffff974943e8 [ 1253.584671][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 1253.584691][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1253.584707][ C0] CR2: 00007f9836013d58 CR3: 000000003971e000 CR4: 0000000000350ef0 [ 1253.584727][ C0] Call Trace: [ 1253.584735][ C0] [ 1253.584748][ C0] ? __lock_acquire+0x1511/0x2de0 [ 1253.584784][ C0] lock_acquire+0x115/0x350 [ 1253.584807][ C0] ? raw_spin_rq_lock_nested+0xb2/0x160 [ 1253.584853][ C0] _raw_spin_lock_nested+0x32/0x50 [ 1253.584879][ C0] ? raw_spin_rq_lock_nested+0xb2/0x160 [ 1253.584914][ C0] raw_spin_rq_lock_nested+0xb2/0x160 [ 1253.584957][ C0] try_to_wake_up+0x759/0x14d0 [ 1253.584992][ C0] pollwake+0x172/0x210 [ 1253.585023][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.585053][ C0] ? __pfx_pollwake+0x10/0x10 [ 1253.585083][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 1253.585118][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.585147][ C0] ? rcu_is_watching+0x16/0xb0 [ 1253.585176][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.585207][ C0] __wake_up_common_lock+0x13a/0x1f0 [ 1253.585245][ C0] sock_def_readable+0x1eb/0x550 [ 1253.585268][ C0] ? sock_def_readable+0xae/0x550 [ 1253.585293][ C0] packet_rcv+0x11a2/0x16f0 [ 1253.585321][ C0] ? __pfx_packet_rcv+0x10/0x10 [ 1253.585345][ C0] dev_queue_xmit_nit+0xa2c/0xac0 [ 1253.585376][ C0] ? dev_queue_xmit_nit+0x2d/0xac0 [ 1253.585410][ C0] dev_hard_start_xmit+0x1c1/0x830 [ 1253.585455][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1253.585499][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1253.585559][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.585587][ C0] ? __lock_acquire+0x747/0x2de0 [ 1253.585614][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1253.585652][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.585680][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 1253.585712][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.585742][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.585779][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.585815][ C0] ip_finish_output2+0xbda/0x10b0 [ 1253.585841][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 1253.585873][ C0] ip_output+0x29f/0x450 [ 1253.585910][ C0] ? ip_output+0x5a/0x450 [ 1253.585955][ C0] iptunnel_xmit+0x626/0xd10 [ 1253.585990][ C0] udp_tunnel_xmit_skb+0x29b/0x3e0 [ 1253.586022][ C0] send4+0xa47/0xec0 [ 1253.586058][ C0] ? send4+0x217/0xec0 [ 1253.586088][ C0] ? __pfx_send4+0x10/0x10 [ 1253.586125][ C0] wg_socket_send_skb_to_peer+0xd1/0x1d0 [ 1253.586158][ C0] wg_packet_tx_worker+0x1c8/0x7e0 [ 1253.586187][ C0] ? rcu_is_watching+0x16/0xb0 [ 1253.586218][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1253.586252][ C0] process_scheduled_works+0xc3d/0x1630 [ 1253.586284][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.586331][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1253.586367][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.586396][ C0] ? assign_work+0x3cf/0x5d0 [ 1253.586431][ C0] worker_thread+0xa47/0xfb0 [ 1253.586481][ C0] kthread+0x38b/0x480 [ 1253.586505][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1253.586538][ C0] ? __pfx_kthread+0x10/0x10 [ 1253.586562][ C0] ret_from_fork+0x514/0xb70 [ 1253.586587][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1253.586610][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.586638][ C0] ? __switch_to+0xc89/0x1420 [ 1253.586673][ C0] ? __pfx_kthread+0x10/0x10 [ 1253.586698][ C0] ret_from_fork_asm+0x1a/0x30 [ 1253.586746][ C0] [ 1253.602978][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1256.710757][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.721651][ T32] Tainted: [L]=SOFTLOCKUP [ 1256.725973][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1256.736021][ T32] Call Trace: [ 1256.739299][ T32] [ 1256.742224][ T32] vpanic+0x56d/0xa60 [ 1256.746220][ T32] ? __pfx___schedule+0x10/0x10 [ 1256.751098][ T32] ? __pfx_vpanic+0x10/0x10 [ 1256.755618][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.761277][ T32] panic+0xc5/0xd0 [ 1256.765017][ T32] ? __pfx_panic+0x10/0x10 [ 1256.769448][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1256.774914][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1256.780301][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1256.786820][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1256.793006][ T32] watchdog+0x1030/0x1030 [ 1256.797381][ T32] ? watchdog+0x1c7/0x1030 [ 1256.801822][ T32] kthread+0x38b/0x480 [ 1256.805920][ T32] ? __pfx_watchdog+0x10/0x10 [ 1256.810621][ T32] ? __pfx_kthread+0x10/0x10 [ 1256.815228][ T32] ret_from_fork+0x514/0xb70 [ 1256.819859][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1256.824978][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.830612][ T32] ? __switch_to+0xc89/0x1420 [ 1256.835310][ T32] ? __pfx_kthread+0x10/0x10 [ 1256.839925][ T32] ret_from_fork_asm+0x1a/0x30 [ 1256.844731][ T32] [ 1256.848076][ T32] Kernel Offset: disabled [ 1256.852406][ T32] Rebooting in 86400 seconds..