last executing test programs: 2m9.987607382s ago: executing program 32 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='1\n', 0x2) 2m5.617634687s ago: executing program 33 (id=1823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m59.90612166s ago: executing program 34 (id=1853): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="54000000270001000000000000000000060100002000018008000200746370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) 1m59.65540554s ago: executing program 35 (id=1856): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000200), 0x100) close(r1) 1m39.453037907s ago: executing program 36 (id=1916): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000060)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000070)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='2\n', 0x2) 1m37.051530549s ago: executing program 37 (id=1922): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n', 0x9) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) close(r2) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000340)="000000010000000000000002000186a3000000030000000700"/40, 0x28, 0x0, &(0x7f0000000380)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000340)="000000010000000000000002000186a3000000030000000700"/40, 0x28, 0x0, &(0x7f00000003c0)={0x2, 0x108, @loopback}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 1m33.938288191s ago: executing program 38 (id=1934): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 -4 +4.0\n', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1\n', 0x2) close(r2) 1m24.533479773s ago: executing program 1 (id=2029): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1m24.4563017s ago: executing program 1 (id=2030): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m24.335752179s ago: executing program 1 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb06"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r0, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000002c0)={0x4, 0x1, 0x6, 0x7, &(0x7f0000000540)=[{}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x600000000000000) 1m24.164432842s ago: executing program 1 (id=2032): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)="310000000700aaaaaaaaaa1000", 0xd) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0601051400c80000"], 0xa) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e06012d0c00c80000"], 0xa) 1m23.566149625s ago: executing program 1 (id=2034): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x22b8, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, 0x2c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000800)='hello\x00', 0x6, 0x0, &(0x7f0000000900)={0x2, 0x22b8, @loopback}, 0x10) 1m23.548599607s ago: executing program 1 (id=2035): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/1024, 0x400) close(r0) 1m22.926753052s ago: executing program 39 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) read(r2, &(0x7f0000000700), 0x10) close(r2) 1m17.917503407s ago: executing program 40 (id=2006): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='2\n\x00', 0x2) close(r1) 1m15.787798064s ago: executing program 41 (id=2009): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)=' -2\n\x00', 0x4) write(r0, &(0x7f0000000100)=' -3\n\x00', 0x4) close(r0) 1m8.704070329s ago: executing program 42 (id=2033): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) 1m8.329450997s ago: executing program 43 (id=2035): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/1024, 0x400) close(r0) 1m6.398700494s ago: executing program 3 (id=2064): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000"], 0x34}}, 0x0) 1m5.6988322s ago: executing program 3 (id=2066): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m5.405283734s ago: executing program 3 (id=2067): syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) epoll_create(0xd851) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1m5.042534317s ago: executing program 3 (id=2068): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r2, 0x0, r1}) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 54.065648517s ago: executing program 2 (id=2093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000160)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001a0)='1\n', 0x2) close(r1) 46.225474652s ago: executing program 44 (id=2074): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='-2 -3 -4 +4.1\n', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='udp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) close(r2) 42.38453897s ago: executing program 5 (id=2129): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x1234, @local}, 0x10) 42.3828037s ago: executing program 5 (id=2132): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001fcffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000fbffca17ee7cc8cd38aeb32a891b802680ffffffffffff00"/98], 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x2c000010) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 40.950232653s ago: executing program 5 (id=2136): socket$kcm(0x21, 0x2, 0xa) io_setup(0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, 0x0, 0x0, 0x80b2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 38.924202481s ago: executing program 45 (id=2093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000160)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001a0)='1\n', 0x2) close(r1) 38.912526499s ago: executing program 5 (id=2139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 38.22946897s ago: executing program 5 (id=2141): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0024000000000a01040000000000000000020000000900010073797a30000000004c000000030a01040000000000000000020000000900010073797a30000000000900030073797a31000000000a000700726f757465000014000400080001000000000308000200000000001400000011000100000000000000000000000a00"], 0x98}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)='\x00\x00', 0x4, 0x0, &(0x7f0000000300)={0x2, 0x3039, @loopback}, 0x10) 37.713965898s ago: executing program 5 (id=2144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) mkdir(&(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000340)="80000038000000010000000000000002000186a3000000030000000100000001000000180000000000000000000003e8000003e800"/64, 0x3c, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r0, &(0x7f0000000400), 0x100) read(r0, &(0x7f0000000400), 0x100) 36.599736717s ago: executing program 6 (id=2147): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600), 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0x10002}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 33.852362484s ago: executing program 6 (id=2151): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b2"], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x4, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$tun(0xffffffffffffffff, 0x0, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 32.048438413s ago: executing program 6 (id=2154): syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) epoll_create(0xd851) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 31.200364682s ago: executing program 6 (id=2156): prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x840) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001240)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500"], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000400)=0x8000, 0x4) ioctl$FIBMAP(r3, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x1, 0xb, 0x32a}}) socket(0x10, 0xa, 0x4) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000380)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x8000) socket$inet6(0xa, 0xa, 0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e", 0x19}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x2801, 0x0) syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x181001) 30.057234717s ago: executing program 6 (id=2159): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x8946, &(0x7f0000000040)='eth0\x00'/24) 29.379659912s ago: executing program 6 (id=2160): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='2049\n', 0x5) close(r0) 23.419830723s ago: executing program 7 (id=2182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'batadv0\x00', 0x1}) nanosleep(&(0x7f0000000300)={0x0, 0x2cb41780}, 0x0) 22.655753304s ago: executing program 46 (id=2144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) mkdir(&(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000340)="80000038000000010000000000000002000186a3000000030000000100000001000000180000000000000000000003e8000003e800"/64, 0x3c, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r0, &(0x7f0000000400), 0x100) read(r0, &(0x7f0000000400), 0x100) 22.240849771s ago: executing program 7 (id=2186): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r2], 0x28}}, 0x0) 21.158743419s ago: executing program 8 (id=2191): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) close(r0) 20.959874582s ago: executing program 8 (id=2192): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYBLOB="b23d"], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x4, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$tun(0xffffffffffffffff, 0x0, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 20.455368402s ago: executing program 7 (id=2193): prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x840) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001240)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=r2, @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000400)=0x8000, 0x4) ioctl$FIBMAP(r3, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x1, 0xb, 0x32a}}) socket(0x10, 0xa, 0x4) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000380)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x8000) socket$inet6(0xa, 0xa, 0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e", 0x19}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x2801, 0x0) syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x181001) 19.252840267s ago: executing program 7 (id=2194): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle, 0x540) 19.203036448s ago: executing program 8 (id=2195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}}}, 0x0) 19.025546672s ago: executing program 7 (id=2196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x150}}, 0x0) 19.023017012s ago: executing program 8 (id=2197): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) 18.819655851s ago: executing program 7 (id=2198): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) 18.659194535s ago: executing program 8 (id=2199): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0x3c, 0x2c, 0x609, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 18.552137204s ago: executing program 0 (id=2200): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x88a', 0x5) 18.47185415s ago: executing program 0 (id=2201): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) close(r0) 18.380746686s ago: executing program 8 (id=2202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='-3\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='2\n', 0x2) close(r1) 18.343277457s ago: executing program 0 (id=2203): prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x840) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001240)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000400)=0x8000, 0x4) ioctl$FIBMAP(r3, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x1, 0xb, 0x32a}}) socket(0x10, 0xa, 0x4) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000380)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x8000) socket$inet6(0xa, 0xa, 0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e", 0x19}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x2801, 0x0) syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x181001) 17.352958495s ago: executing program 0 (id=2204): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYBLOB="b23d"], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x4, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$tun(0xffffffffffffffff, 0x0, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 15.968911241s ago: executing program 9 (id=2185): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/1024, 0x400}], 0x1}, 0x0) write(0x1, &(0x7f0000000200), 0x400) 14.299365387s ago: executing program 47 (id=2160): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='2049\n', 0x5) close(r0) 14.130436655s ago: executing program 0 (id=2206): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='keyA keyB 2000000000 0 0 outhandle outtoken\n', 0x2e) write(r0, &(0x7f0000000180)='keyB keyA 2000000000 0 0 outhandle outtoken\n', 0x2e) 14.007198203s ago: executing program 0 (id=2207): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001a0)='./proc/1/root/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/rpcbind.sock\x00'}, 0x30) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './proc/1/root/run/rpcbind.sock\x00'}, 0x30) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000220)={0x2, 0x6f00, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000260)={0x2, 0x6f00, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='udp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1\n', 0x2) 7.545809825s ago: executing program 9 (id=2208): socket$kcm(0x21, 0x2, 0xa) io_setup(0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, 0x0, 0x0, 0x80b2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.790753316s ago: executing program 9 (id=2210): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@deltfilter={0x478, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @filter_kind_options=@f_matchall={{0xd}, {0x43c, 0x2, [@TCA_MATCHALL_ACT={0x438, 0x2, [@m_police={0x434, 0x7, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x218, 0x81, 0x0, 0x1, 0x6, 0x8, 0x1, 0x3, 0x1ff, 0xfffffffe, 0x0, 0x1, 0x8001, 0x6, 0x4, 0x9, 0x2, 0x3, 0x1, 0x144a, 0xfffffffe, 0x5, 0x7fffffff, 0xffff5540, 0x8, 0xffffffff, 0xffffffff, 0x5, 0xc, 0x6, 0x4, 0x2, 0x2, 0x7f, 0x1, 0x5, 0xe5f0, 0x60, 0x6, 0x4, 0x1, 0x80000000, 0x5, 0x3ee, 0x5, 0xdb, 0x401, 0x0, 0x8000, 0xfffffffa, 0x2, 0x3c1, 0x6, 0x6, 0x2, 0x8, 0x3752, 0x68a, 0x6, 0x55, 0x3, 0x8, 0x3, 0x6, 0xffffffc9, 0x400, 0x7, 0x73, 0x7, 0x0, 0x52a, 0x8, 0x5, 0x4, 0x9, 0x3, 0x2, 0x4e, 0x7, 0x5, 0x3, 0x9, 0xfffffbff, 0x100, 0x1, 0xffff, 0x7fffffff, 0x7, 0x1ff, 0x9, 0x3, 0x7, 0x10, 0x7, 0x2, 0x7fff, 0x8, 0x4, 0x101, 0x7fffffff, 0x1, 0x61a000, 0xa, 0x8a, 0x1, 0x400, 0x0, 0x2, 0x2, 0x7, 0xf8, 0xbb43, 0x2, 0x7, 0xfffffff8, 0x4, 0x7, 0x5, 0x3, 0x6, 0x40, 0x0, 0x800, 0x80000001, 0x8e8e, 0x3, 0x3, 0x44e, 0xffffff46, 0xfffffffa, 0x8, 0x1, 0xfffff2f3, 0x5, 0x8, 0x2, 0x6, 0xe, 0x7fffffff, 0x9, 0x80000000, 0x4, 0x10000, 0x7, 0x3, 0x5, 0x9, 0x3, 0x5, 0x9, 0x1ff, 0x0, 0x0, 0xfff, 0x8, 0x7ab2, 0x5, 0x8, 0x8, 0x0, 0x0, 0x8cf6, 0x7, 0xea9, 0x3ff, 0xfffff801, 0x4, 0x77b5, 0x80000000, 0x4d03, 0x8001, 0x4ad5, 0x0, 0x1, 0x5, 0x9, 0x9, 0x80, 0x6, 0x7fff, 0x72d0b0f2, 0x1, 0x810, 0x5, 0x0, 0x3, 0x2, 0x0, 0x3f6, 0xfffffff5, 0x6, 0x3, 0x3b7d, 0x3, 0x4, 0xc6, 0x1, 0x1, 0x10, 0x18, 0x8, 0x1, 0x1, 0xf6b3, 0x3, 0x3, 0x2, 0x9, 0x4, 0x1ff, 0x7, 0x9, 0x800, 0xc, 0x7, 0x5, 0xffff, 0x9, 0x1ff, 0x3, 0x40, 0x80000001, 0x9, 0x8, 0xffffff59, 0x101, 0xffff8000, 0x80, 0x1, 0x276, 0xa, 0x3, 0x800, 0x1000, 0xfffffffd, 0xfffffff8, 0x4, 0xff, 0xffffffa9, 0x5, 0x80000000, 0x82, 0x3, 0x4af6, 0x8000, 0x49ecd84c, 0x4, 0x8000, 0x3, 0x1, 0x5, 0x2, 0x7, 0x8]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x478}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r0, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) 5.319248634s ago: executing program 9 (id=2211): unshare(0x40000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) setsockopt(r0, 0x0, 0x40, &(0x7f0000000040), 0x290) sendto$inet(r0, &(0x7f0000000400)="01020304", 0x4, 0x0, &(0x7f0000000440)={0x2, 0x1234, @loopback}, 0x10) 4.431490861s ago: executing program 9 (id=2212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fcntl$setpipe(r2, 0x407, 0xffffffffffffffff) r3 = mq_open(&(0x7f00000004c0)='!\x04\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\a\x000c\x00\x00\x00\x00\x00\x00\x00\x00=\'\nw\xa9\xa5u0\x93\x83\xef\x8a\xfcv]\x94\x0fx\xa2\xb3G\xb1\x05\xfd\xe8\xd8\x00\xc6\xeb`9>8j\xe8\xeb\x0f\xfck', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r5, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRESHEX=r3], &(0x7f0000000080), 0x600) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x2052, r6, 0x0) r7 = syz_io_uring_setup(0x199b, &(0x7f0000000400)={0x0, 0x5961, 0x400, 0x2, 0x28a, 0x0, r2}, 0x0, &(0x7f00000000c0), 0x0) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b703000001000000850000004900000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) 3.364395706s ago: executing program 48 (id=2198): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) 3.354082739s ago: executing program 9 (id=2215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/100, 0x64) close(r0) 3.280199367s ago: executing program 49 (id=2202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='-3\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='2\n', 0x2) close(r1) 2.850450812s ago: executing program 4 (id=2217): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0x4004480d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x40, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c73, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x4, 0x8f, 0x7, 0x6, 0x4f, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff1, 0x129432e6, 0xcb, 0xf9, 0x10d, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x9, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x2, 0x4, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x6], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x2, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x7, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0x7, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14b, 0xe00, 0x6, 0x4, 0xfff, 0x80000000, 0x7, 0x8, 0xffffffff, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.511165791s ago: executing program 4 (id=2218): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x2faf0800}, 0x0) 1.488065034s ago: executing program 4 (id=2219): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="040000000000", 0x6) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0601230c00010203"], 0xa) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 631.668897ms ago: executing program 4 (id=2220): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) mount$nfs(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)) 446.465209ms ago: executing program 4 (id=2221): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@deltfilter={0x40, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x40}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r0, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) 0s ago: executing program 4 (id=2222): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): out [ 402.643775][T11551] syzkaller0: entered promiscuous mode [ 402.643798][T11551] syzkaller0: entered allmulticast mode [ 402.698059][T11363] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 402.711965][T11551] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 402.717961][T11363] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 402.735709][T11363] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 402.752516][T11363] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 402.764364][T11363] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 402.977586][ T5800] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 403.130985][ T5800] usb 1-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 403.175111][ T5800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.175155][ T5800] usb 1-1: config 0 has no interfaces? [ 403.175244][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.210702][ T5800] usb 1-1: config 0 descriptor?? [ 403.210706][T11442] veth0_vlan: entered promiscuous mode [ 403.340621][T11442] veth1_vlan: entered promiscuous mode [ 403.423264][T11442] veth0_macvtap: entered promiscuous mode [ 403.447895][ T32] usb 1-1: USB disconnect, device number 60 [ 403.483662][T11442] veth1_macvtap: entered promiscuous mode [ 403.560616][T11442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.640324][T11442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.785025][T11536] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.785240][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.785623][T11536] bridge_slave_0: entered allmulticast mode [ 403.788236][T11536] bridge_slave_0: entered promiscuous mode [ 403.853625][T11536] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.853830][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.853964][T11536] bridge_slave_1: entered allmulticast mode [ 403.855342][T11536] bridge_slave_1: entered promiscuous mode [ 403.857569][ T5618] Bluetooth: hci7: command tx timeout [ 403.918931][T10911] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.919662][T10911] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.919700][T10911] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.919727][T10911] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.004603][T11536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.034224][T11536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.084299][T10905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.084354][T10905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.087108][T11536] team0: Port device team_slave_0 added [ 404.142654][T11536] team0: Port device team_slave_1 added [ 404.220211][T11536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.220228][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.220252][T11536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.223132][T11536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.223146][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.223170][T11536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.227591][T10911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.227623][T10911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.408154][ T5618] Bluetooth: hci6: command tx timeout [ 404.563985][T11536] hsr_slave_0: entered promiscuous mode [ 404.565070][T11536] hsr_slave_1: entered promiscuous mode [ 404.565775][T11536] debugfs: 'hsr0' already exists in 'hsr' [ 404.565794][T11536] Cannot create hsr debugfs directory [ 404.775100][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.775207][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.775364][T11549] bridge_slave_0: entered allmulticast mode [ 404.777179][T11549] bridge_slave_0: entered promiscuous mode [ 404.777652][ T5703] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 404.820387][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.820505][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.820622][T11549] bridge_slave_1: entered allmulticast mode [ 404.822165][T11549] bridge_slave_1: entered promiscuous mode [ 404.887561][ T5618] Bluetooth: hci8: command tx timeout [ 404.915058][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.928877][ T5703] usb 6-1: New USB device found: idVendor=0853, idProduct=0146, bcdDevice=0.00 [ 404.930945][ T5703] usb 6-1: config 0 interface 0 has no altsetting 0 [ 404.931014][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.965422][ T5703] usb 6-1: config 0 descriptor?? [ 404.987319][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 404.990654][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.126819][T11549] team0: Port device team_slave_0 added [ 405.143019][T11549] team0: Port device team_slave_1 added [ 405.157928][T11593] Cannot find set identified by id 0 to match [ 405.324074][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.324092][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.324114][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.466239][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 405.466284][ T9] usb 7-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=0.40 [ 405.467127][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 405.467158][ T9] usb 7-1: can't read configurations, error -71 [ 405.588990][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.589006][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.589030][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.810433][T11549] hsr_slave_0: entered promiscuous mode [ 405.814763][T11549] hsr_slave_1: entered promiscuous mode [ 405.821048][T11549] debugfs: 'hsr0' already exists in 'hsr' [ 405.821084][T11549] Cannot create hsr debugfs directory [ 405.927510][ T5618] Bluetooth: hci7: command tx timeout [ 406.266634][T10956] IPVS: starting estimator thread 0... [ 406.335372][T11608] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 406.381000][T11607] IPVS: using max 32 ests per chain, 76800 per kthread [ 406.415539][T11536] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 406.443370][T11536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.494882][T11536] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 406.541237][T11536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.542080][T11536] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 406.572944][T11536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.603574][T11536] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 406.623389][T11536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.967807][ T5618] Bluetooth: hci8: command tx timeout [ 406.996755][ T5703] usbhid 6-1:0.0: can't add hid device: -71 [ 406.996839][ T5703] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 407.003126][ T5703] usb 6-1: USB disconnect, device number 3 [ 407.076065][T11549] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 407.130676][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.206876][T11549] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 407.243523][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.250991][T11549] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 407.285305][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.303493][T11549] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 407.319665][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.455040][T11536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.514314][T11536] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.539718][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.539810][T10922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.583762][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.583958][T10922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.610322][T11549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.654217][T11549] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.680337][T10944] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.680398][T10944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.712016][T10944] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.712100][T10944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.008526][ T5618] Bluetooth: hci7: command tx timeout [ 408.630383][T11645] fuse: Unknown parameter '0x0000000000000003' [ 408.845804][T11536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.048026][ T5618] Bluetooth: hci8: command tx timeout [ 409.061076][T11549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.280678][T11536] veth0_vlan: entered promiscuous mode [ 409.300478][T11536] veth1_vlan: entered promiscuous mode [ 409.373265][T11536] veth0_macvtap: entered promiscuous mode [ 409.416554][T11536] veth1_macvtap: entered promiscuous mode [ 409.545100][T11536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.572841][T11536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.608748][T10911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.608877][T10911] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.608944][T10911] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.609011][T10911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.676066][T11549] veth0_vlan: entered promiscuous mode [ 409.687996][T11676] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 409.691585][T10944] IPVS: starting estimator thread 0... [ 409.747156][T11549] veth1_vlan: entered promiscuous mode [ 409.789365][T11678] IPVS: using max 32 ests per chain, 76800 per kthread [ 409.876533][T11549] veth0_macvtap: entered promiscuous mode [ 409.889676][T11549] veth1_macvtap: entered promiscuous mode [ 409.952002][T11549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.967605][T10944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.967642][T10944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.005287][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.043078][T10905] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.089431][ T5618] Bluetooth: hci7: command tx timeout [ 410.115968][T10957] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.179434][T10936] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.179563][T10922] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.217598][ T989] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 410.225012][T10936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.225031][T10936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.260097][T10936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.260115][T10936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.344547][T10944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.344585][T10944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.379557][ T989] usb 1-1: New USB device found: idVendor=0853, idProduct=0146, bcdDevice=0.00 [ 410.380608][ T989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 410.380648][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.384525][ T989] usb 1-1: config 0 descriptor?? [ 410.936054][T11697] fuse: Unknown parameter '0x0000000000000003' [ 411.068604][ T5770] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 411.127630][ T5618] Bluetooth: hci8: command tx timeout [ 411.218247][ T5770] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 411.219763][ T5770] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.219788][ T5770] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.219851][ T5770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.225680][ T5770] usb 9-1: config 0 descriptor?? [ 411.284968][ T5770] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 411.728598][ T989] usbhid 1-1:0.0: can't add hid device: -71 [ 411.728702][ T989] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 411.734034][ T989] usb 1-1: USB disconnect, device number 61 [ 413.822597][ T1872] usb 9-1: USB disconnect, device number 2 [ 414.727101][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.727126][T11764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.746552][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.746574][T11764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.587624][ T5770] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 415.738603][ T5770] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 415.739598][ T5770] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.739624][ T5770] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.739662][ T5770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.742707][ T5770] usb 9-1: config 0 descriptor?? [ 415.746502][ T5770] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 417.746038][T11812] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 417.746072][T11812] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 417.768131][T11812] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 417.768168][T11812] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 417.779297][T11812] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 417.779334][T11812] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 417.816306][T11812] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 417.816364][T11812] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 418.297332][ T989] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 418.358940][ T5770] usb 9-1: USB disconnect, device number 3 [ 418.458155][ T989] usb 1-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 418.459166][ T989] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.459213][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.500448][ T989] as10x_usb: device has been detected [ 418.501248][ T989] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 418.521351][ T989] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 418.548144][ T989] as10x_usb: error during firmware upload part1 [ 418.548772][ T989] Registered device Abilis Systems DVB-Titan [ 418.723443][ T5703] usb 1-1: USB disconnect, device number 62 [ 418.764662][ T5703] Unregistered device Abilis Systems DVB-Titan [ 418.766611][ T5703] as10x_usb: device has been disconnected [ 419.646994][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'. [ 419.647498][ T5703] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 419.817475][ T5703] usb 9-1: Using ep0 maxpacket: 16 [ 419.820887][ T5703] usb 9-1: New USB device found: idVendor=041e, idProduct=3020, bcdDevice=0.40 [ 419.821830][ T5703] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 419.821864][ T5703] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 419.823922][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.823948][ T5703] usb 9-1: Product: syz [ 419.823957][ T5703] usb 9-1: Manufacturer: syz [ 419.823964][ T5703] usb 9-1: SerialNumber: syz [ 420.501617][ T5703] usb 9-1: USB disconnect, device number 4 [ 421.148331][ T1872] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 421.298298][ T1872] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 421.300326][ T1872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.300355][ T1872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.300376][ T1872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.300426][ T1872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.303128][ T1872] usb 1-1: config 0 descriptor?? [ 421.717578][ T1872] usbhid 1-1:0.0: can't add hid device: -71 [ 421.717676][ T1872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 421.720226][ T1872] usb 1-1: USB disconnect, device number 63 [ 421.967411][T11363] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 421.969144][T11363] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 421.974665][T11363] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 421.975498][T11363] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 421.976727][T11363] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 422.029174][ T5618] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 422.031619][ T5618] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 422.032077][ T5618] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 422.032968][ T5618] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 422.062670][ T5618] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 422.442913][ T5800] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 422.588191][ T5800] usb 9-1: Using ep0 maxpacket: 16 [ 422.588961][ T5800] usb 9-1: New USB device found: idVendor=fc08, idProduct=0101, bcdDevice=0.40 [ 422.595030][ T5800] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.595056][ T5800] usb 9-1: Product: syz [ 422.595065][ T5800] usb 9-1: Manufacturer: syz [ 422.595073][ T5800] usb 9-1: SerialNumber: syz [ 422.887590][ T5800] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.887691][ T5800] usb 9-1: MIDIStreaming interface descriptor not found [ 422.903252][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.903986][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.904114][T11854] bridge_slave_0: entered allmulticast mode [ 422.906710][T11854] bridge_slave_0: entered promiscuous mode [ 422.913587][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.913744][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.913869][T11854] bridge_slave_1: entered allmulticast mode [ 422.915787][T11854] bridge_slave_1: entered promiscuous mode [ 422.959744][T11854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.963106][T11854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.000629][T11854] team0: Port device team_slave_0 added [ 423.009338][T11854] team0: Port device team_slave_1 added [ 423.077153][ T5800] usb 9-1: USB disconnect, device number 5 [ 423.079202][T11854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.079212][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.079227][T11854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.143671][T11854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.143687][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.143710][T11854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.300717][ T7039] udevd[7039]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.354300][T11854] hsr_slave_0: entered promiscuous mode [ 423.357498][T11854] hsr_slave_1: entered promiscuous mode [ 423.359928][T11854] debugfs: 'hsr0' already exists in 'hsr' [ 423.359949][T11854] Cannot create hsr debugfs directory [ 423.736647][T11854] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 423.756344][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.759224][T11854] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 423.783570][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.784779][T11854] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 423.799424][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.806081][T11854] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 423.820627][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.945080][T11854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.970098][T11854] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.991701][T10905] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.991784][T10905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.014428][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.014558][T10956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.091452][T11854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.167941][ T5618] Bluetooth: hci9: command tx timeout [ 424.532842][T11363] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 424.553739][T11363] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 424.555747][T11363] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 424.572365][T11363] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 424.576822][T11363] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 425.020403][T11854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.760355][T11854] veth0_vlan: entered promiscuous mode [ 425.842929][T11854] veth1_vlan: entered promiscuous mode [ 426.001330][T11911] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.001498][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.001928][T11911] bridge_slave_0: entered allmulticast mode [ 426.003401][T11911] bridge_slave_0: entered promiscuous mode [ 426.038770][T11911] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.038878][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.038987][T11911] bridge_slave_1: entered allmulticast mode [ 426.040694][T11911] bridge_slave_1: entered promiscuous mode [ 426.101702][T11911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.106253][T11911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.106685][T11854] veth0_macvtap: entered promiscuous mode [ 426.162649][T11911] team0: Port device team_slave_0 added [ 426.165169][T11911] team0: Port device team_slave_1 added [ 426.165470][T11854] veth1_macvtap: entered promiscuous mode [ 426.168297][ T5703] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 426.218592][T11911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.218608][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.218632][T11911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.221819][T11911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.221833][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.221856][T11911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.247596][ T5618] Bluetooth: hci9: command tx timeout [ 426.324937][ T5703] usb 9-1: New USB device found: idVendor=07c0, idProduct=1125, bcdDevice=0.00 [ 426.327920][ T5703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 426.327978][ T5703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.328038][ T5703] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.328110][ T5703] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.351074][ T5703] usb 9-1: config 0 descriptor?? [ 426.420383][T11911] hsr_slave_0: entered promiscuous mode [ 426.421029][T11911] hsr_slave_1: entered promiscuous mode [ 426.421444][T11911] debugfs: 'hsr0' already exists in 'hsr' [ 426.421463][T11911] Cannot create hsr debugfs directory [ 426.423929][T11854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.509757][T11854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.650005][ T5618] Bluetooth: hci10: command tx timeout [ 426.858931][T10944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.859002][T10944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.883562][T10956] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.883606][T10956] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.883638][T10956] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.883668][T10956] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.009293][T11911] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.053445][T10944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.053458][T10944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.109615][T11911] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.254787][T11911] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.355218][ T5703] usbhid 9-1:0.0: can't add hid device: -71 [ 427.355477][ T5703] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 427.401189][ T5703] usb 9-1: USB disconnect, device number 6 [ 427.505849][T11363] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 427.523862][T11363] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 427.534950][T11363] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 427.549979][T11363] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 427.552822][T11363] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 427.618989][T11911] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.646827][T11958] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 427.658625][T10911] IPVS: starting estimator thread 0... [ 427.747472][T11959] IPVS: using max 34 ests per chain, 81600 per kthread [ 428.192500][T11911] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.203801][T11911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.205505][T11911] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.235131][T11911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.245023][T11911] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.266461][T11911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.279902][T11911] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.300411][T11911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.327676][ T5618] Bluetooth: hci9: command tx timeout [ 428.728042][ T5618] Bluetooth: hci10: command tx timeout [ 428.875542][T11911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.933011][T11911] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.956524][T10944] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.956720][T10944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.989795][T10905] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.989898][T10905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.557068][T11953] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.567808][T11953] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.568209][T11953] bridge_slave_0: entered allmulticast mode [ 429.570270][T11953] bridge_slave_0: entered promiscuous mode [ 429.592989][T11953] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.593145][T11953] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.593308][T11953] bridge_slave_1: entered allmulticast mode [ 429.597075][T11953] bridge_slave_1: entered promiscuous mode [ 429.608572][ T5618] Bluetooth: hci11: command tx timeout [ 429.739491][T11953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.764493][T11953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.856911][T11953] team0: Port device team_slave_0 added [ 429.874722][T11953] team0: Port device team_slave_1 added [ 430.037698][T11953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.037717][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.037740][T11953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.038531][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2008'. [ 430.041089][T11953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.041102][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.041127][T11953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.188818][T11953] hsr_slave_0: entered promiscuous mode [ 430.189789][T11953] hsr_slave_1: entered promiscuous mode [ 430.190456][T11953] debugfs: 'hsr0' already exists in 'hsr' [ 430.190474][T11953] Cannot create hsr debugfs directory [ 430.412731][ T5618] Bluetooth: hci9: command tx timeout [ 430.460425][T11953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.581302][T11953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.653832][T11911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.694931][T11953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.758805][T11911] veth0_vlan: entered promiscuous mode [ 430.788765][T11953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.808160][ T5618] Bluetooth: hci10: command tx timeout [ 430.809675][T11911] veth1_vlan: entered promiscuous mode [ 430.852086][T11911] veth0_macvtap: entered promiscuous mode [ 430.865820][T11911] veth1_macvtap: entered promiscuous mode [ 430.888776][T11911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.908590][T11911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.947947][T10911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.963646][T10905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.031382][T10922] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.032285][T10922] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.128902][T10956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.128955][T10956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.228390][T10911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.228443][T10911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.328652][T11953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.339535][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.342128][T11953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.373058][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.374723][T11953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.383476][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.386654][T11953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.414681][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.670630][T11953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.690887][ T5618] Bluetooth: hci11: command tx timeout [ 431.704998][T11953] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.717884][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.717983][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.727059][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.727381][T10956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.883118][T12033] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 431.885140][T10911] IPVS: starting estimator thread 0... [ 431.980223][T12034] IPVS: using max 53 ests per chain, 127200 per kthread [ 432.297322][ T989] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 432.357359][T11953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.467673][ T989] usb 2-1: Invalid ep0 maxpacket: 64 [ 432.598238][ T989] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 432.690055][T11953] veth0_vlan: entered promiscuous mode [ 432.703312][T11953] veth1_vlan: entered promiscuous mode [ 432.741564][T11953] veth0_macvtap: entered promiscuous mode [ 432.746984][T11953] veth1_macvtap: entered promiscuous mode [ 432.747338][ T989] usb 2-1: Invalid ep0 maxpacket: 64 [ 432.753474][ T989] usb usb2-port1: attempt power cycle [ 432.784524][T11953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.803325][T11953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.815941][T10909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.847394][T10957] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.847437][T10957] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.847633][T10957] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.889635][ T5618] Bluetooth: hci10: command tx timeout [ 433.021857][T10957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.021878][T10957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.081127][T10957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.081148][T10957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.108009][ T989] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 433.130463][ T989] usb 2-1: Invalid ep0 maxpacket: 64 [ 433.257334][ T989] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 433.278598][ T989] usb 2-1: Invalid ep0 maxpacket: 64 [ 433.279234][ T989] usb usb2-port1: unable to enumerate USB device [ 433.447568][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 433.597252][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 433.598110][ T10] usb 5-1: New USB device found: idVendor=fc08, idProduct=0101, bcdDevice=0.40 [ 433.604630][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.604665][ T10] usb 5-1: Product: syz [ 433.604679][ T10] usb 5-1: Manufacturer: syz [ 433.604693][ T10] usb 5-1: SerialNumber: syz [ 433.767821][ T5618] Bluetooth: hci11: command tx timeout [ 433.878605][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.878637][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 433.968477][ T10] usb 5-1: USB disconnect, device number 62 [ 434.014591][ T7039] udevd[7039]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.170689][T12064] ip_tables: iptables: counters copy to user failed while replacing table [ 435.190227][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2017'. [ 435.302555][T12067] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 435.302847][T12067] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 435.833084][T12081] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 435.836395][T10957] IPVS: starting estimator thread 0... [ 435.848777][ T5618] Bluetooth: hci11: command tx timeout [ 435.917329][T12082] IPVS: using max 28 ests per chain, 67200 per kthread [ 436.378281][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 436.547441][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 436.550538][ T9] usb 5-1: New USB device found: idVendor=fc08, idProduct=0101, bcdDevice=0.40 [ 436.554346][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.554369][ T9] usb 5-1: Product: syz [ 436.554382][ T9] usb 5-1: Manufacturer: syz [ 436.554396][ T9] usb 5-1: SerialNumber: syz [ 436.699688][T12092] ip_tables: iptables: counters copy to user failed while replacing table [ 436.853815][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.853868][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 436.961372][ T9] usb 5-1: USB disconnect, device number 63 [ 437.038529][ T7039] udevd[7039]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.511041][T11363] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 438.526669][T11363] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 438.534861][T11363] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 438.536429][T11363] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 438.544634][T11363] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 439.215268][T12113] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.215440][T12113] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.215573][T12113] bridge_slave_0: entered allmulticast mode [ 439.217143][T12113] bridge_slave_0: entered promiscuous mode [ 439.242302][T12113] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.242555][T12113] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.242788][T12113] bridge_slave_1: entered allmulticast mode [ 439.246068][T12113] bridge_slave_1: entered promiscuous mode [ 439.293444][T12113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.297738][T12113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.339763][T12113] team0: Port device team_slave_0 added [ 439.342341][T12113] team0: Port device team_slave_1 added [ 439.373907][T12113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.373930][T12113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.373955][T12113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.375724][T12113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.375733][T12113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.375757][T12113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.491894][T12113] hsr_slave_0: entered promiscuous mode [ 439.492946][T12113] hsr_slave_1: entered promiscuous mode [ 439.493695][T12113] debugfs: 'hsr0' already exists in 'hsr' [ 439.493732][T12113] Cannot create hsr debugfs directory [ 439.694861][T12113] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.778171][T12113] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.857488][T12113] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.931455][T12113] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.072465][T12113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.084429][T12113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.086924][T12113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.108424][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.109734][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.127165][T12113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.139832][T12113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.143047][T12113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.143873][T12113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 440.150661][T12113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.257996][T12113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.286201][T12113] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.305781][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.305904][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.310697][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.310856][T10956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.569573][ T5618] Bluetooth: hci12: command tx timeout [ 440.805406][T12113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.867144][T12113] veth0_vlan: entered promiscuous mode [ 440.882539][T12113] veth1_vlan: entered promiscuous mode [ 440.916007][T12113] veth0_macvtap: entered promiscuous mode [ 440.926601][T12113] veth1_macvtap: entered promiscuous mode [ 440.948398][T12113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.966085][T12113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.081961][T10911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.082568][T10944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.082635][T10944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.082667][T10944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.163055][T10956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.163076][T10956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.228859][T10944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.228913][T10944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.383153][T12156] ip_tables: iptables: counters copy to user failed while replacing table [ 442.653094][ T5618] Bluetooth: hci12: command tx timeout [ 443.502810][T11363] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 443.520742][T11363] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 443.526240][T11363] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 443.547515][T11363] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 443.555765][T11363] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 444.303060][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.303174][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.303308][T12165] bridge_slave_0: entered allmulticast mode [ 444.305080][T12165] bridge_slave_0: entered promiscuous mode [ 444.338381][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.338555][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.338694][T12165] bridge_slave_1: entered allmulticast mode [ 444.340455][T12165] bridge_slave_1: entered promiscuous mode [ 444.411488][T12165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.430641][T12165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.473497][T12165] team0: Port device team_slave_0 added [ 444.476494][T12165] team0: Port device team_slave_1 added [ 444.515141][T12165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.515157][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.515181][T12165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.516988][T12165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.517001][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.517025][T12165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.670389][T12188] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 444.720168][T12165] hsr_slave_0: entered promiscuous mode [ 444.722428][T12165] hsr_slave_1: entered promiscuous mode [ 444.724429][T12165] debugfs: 'hsr0' already exists in 'hsr' [ 444.724486][T12165] Cannot create hsr debugfs directory [ 444.733195][ T5618] Bluetooth: hci12: command tx timeout [ 445.151974][T12165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.334483][T12165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.523430][T12165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.607444][ T5618] Bluetooth: hci13: command tx timeout [ 445.671918][T11363] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 445.679865][T12165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.705159][T11363] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 445.714817][T11363] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 445.727792][T11363] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 445.732015][T11363] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 446.047889][T12165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 446.056813][T12165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.059948][T12165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 446.072857][T12165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.074533][T12165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 446.100649][T12165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.102483][T12165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 446.118250][T12165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.306339][T12165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.346574][T12165] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.371384][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.371618][T10911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.414081][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.414220][T10957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.812360][ T5618] Bluetooth: hci12: command tx timeout [ 447.096093][T12200] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.096864][T12200] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.097020][T12200] bridge_slave_0: entered allmulticast mode [ 447.132195][T12200] bridge_slave_0: entered promiscuous mode [ 447.153569][T12200] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.155469][T12200] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.155607][T12200] bridge_slave_1: entered allmulticast mode [ 447.181682][T12200] bridge_slave_1: entered promiscuous mode [ 447.270276][T12200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.275571][T12200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.392270][T12200] team0: Port device team_slave_0 added [ 447.405242][T12200] team0: Port device team_slave_1 added [ 447.549145][T12200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.549181][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.549232][T12200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.626316][T12200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.633560][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.633608][T12200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.691123][ T5618] Bluetooth: hci13: command tx timeout [ 447.848088][ T5618] Bluetooth: hci14: command tx timeout [ 447.883804][T12200] hsr_slave_0: entered promiscuous mode [ 447.885519][T12200] hsr_slave_1: entered promiscuous mode [ 447.899081][T12200] debugfs: 'hsr0' already exists in 'hsr' [ 447.899118][T12200] Cannot create hsr debugfs directory [ 448.044019][T12165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.427870][T12246] tipc: Enabling of bearer rejected, failed to enable media [ 448.432735][T12246] syzkaller0: entered promiscuous mode [ 448.432756][T12246] syzkaller0: entered allmulticast mode [ 448.620216][T12200] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.672751][T12165] veth0_vlan: entered promiscuous mode [ 448.722424][T12247] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 448.819720][T12200] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.838301][ T1872] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 448.867666][T12165] veth1_vlan: entered promiscuous mode [ 448.966432][T12200] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.998041][ T1872] usb 4-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 448.999003][ T1872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.999026][ T1872] usb 4-1: config 0 has no interfaces? [ 448.999054][ T1872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.002922][ T1872] usb 4-1: config 0 descriptor?? [ 449.081589][T12165] veth0_macvtap: entered promiscuous mode [ 449.146595][T12200] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.203411][T12165] veth1_macvtap: entered promiscuous mode [ 449.248739][ T5703] usb 4-1: USB disconnect, device number 59 [ 449.261457][T12165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.428025][T12165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.553264][T10905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.553332][T10905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.553394][T10905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.553449][T10905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.719159][T10936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.719189][T10936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.769235][ T5618] Bluetooth: hci13: command tx timeout [ 449.857738][T12200] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.866527][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.886932][T12200] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 449.893764][T10957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.893798][T10957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.929650][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.930567][T12200] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 449.930889][ T5618] Bluetooth: hci14: command tx timeout [ 449.934604][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.935615][T12200] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 449.980512][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.324766][T12200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.379184][T12200] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.411711][T12259] fuse: Unknown parameter 'fd0x0000000000000003' [ 450.454497][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.454673][T10911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.566310][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.566534][T10922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.188766][ T5785] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 451.338058][ T5785] usb 4-1: New USB device found: idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 451.339384][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.345033][ T5785] usb 4-1: config 0 descriptor?? [ 451.376315][ T5785] pwc: Samsung MPC-C10 USB webcam detected. [ 451.576408][ T5785] pwc: send_video_command error -71 [ 451.576427][ T5785] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 451.576523][ T5785] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 451.607055][ T5785] usb 4-1: USB disconnect, device number 60 [ 451.849476][ T5618] Bluetooth: hci13: command tx timeout [ 452.007624][ T5618] Bluetooth: hci14: command tx timeout [ 452.087869][ T5785] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 452.182800][T12200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.252841][ T5785] usb 4-1: New USB device found: idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 452.253849][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.276305][ T5785] usb 4-1: config 0 descriptor?? [ 452.293363][ T5785] pwc: Samsung MPC-C10 USB webcam detected. [ 452.844613][ T5785] pwc: send_video_command error -71 [ 452.844632][ T5785] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 452.844725][ T5785] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 452.892989][ T5785] usb 4-1: USB disconnect, device number 61 [ 453.067568][T12200] veth0_vlan: entered promiscuous mode [ 453.102416][T12200] veth1_vlan: entered promiscuous mode [ 453.320596][T12200] veth0_macvtap: entered promiscuous mode [ 453.372413][T11363] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 453.388727][T11363] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 453.390874][T11363] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 453.392836][T11363] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 453.395212][T11363] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 453.488148][T12200] veth1_macvtap: entered promiscuous mode [ 453.633746][T12200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.653474][T11363] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 453.658678][T11363] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 453.680811][T11363] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 453.687154][T11363] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 453.692761][T12200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.712719][T11363] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 453.778159][T10905] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.781612][T10944] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.781775][T10944] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.781807][T10944] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.091424][ T5618] Bluetooth: hci14: command tx timeout [ 454.366295][T10911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.366317][T10911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.552440][T10936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.552462][T10936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.121793][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.121821][T12320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.126424][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.126445][T12320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.465137][ T5618] Bluetooth: hci15: command tx timeout [ 455.768126][ T5618] Bluetooth: hci16: command tx timeout [ 456.722130][ T5703] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 456.880755][ T5703] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 456.894170][ T5703] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 456.894226][ T5703] usb 4-1: config 1 has no interface number 0 [ 456.935623][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.935654][ T5703] usb 4-1: Product: syz [ 456.935674][ T5703] usb 4-1: Manufacturer: syz [ 456.935682][ T5703] usb 4-1: SerialNumber: syz [ 457.053715][ T5703] usb 4-1: 3:0 : does not exist [ 457.053742][ T5703] usb 4-1: 3:0 : does not exist [ 457.317023][ T5703] usb 4-1: USB disconnect, device number 62 [ 457.527822][ T5618] Bluetooth: hci15: command tx timeout [ 457.533535][T10553] udevd[10553]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.754272][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.754377][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.754517][T12297] bridge_slave_0: entered allmulticast mode [ 457.771669][T12297] bridge_slave_0: entered promiscuous mode [ 457.828330][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.828432][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.828583][T12297] bridge_slave_1: entered allmulticast mode [ 457.835850][T12297] bridge_slave_1: entered promiscuous mode [ 457.847982][ T5618] Bluetooth: hci16: command tx timeout [ 458.072316][T12297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.086608][T12297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.139237][ T989] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 458.162186][T12301] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.162330][T12301] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.162796][T12301] bridge_slave_0: entered allmulticast mode [ 458.165974][T12301] bridge_slave_0: entered promiscuous mode [ 458.195815][T12301] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.195910][T12301] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.199946][T12301] bridge_slave_1: entered allmulticast mode [ 458.210580][T12301] bridge_slave_1: entered promiscuous mode [ 458.312763][T12297] team0: Port device team_slave_0 added [ 458.321571][ T989] usb 4-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 458.323957][ T989] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.324002][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.411040][T12301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.416447][ T989] as10x_usb: device has been detected [ 458.422365][T12297] team0: Port device team_slave_1 added [ 458.424430][ T989] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 458.475807][ T989] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 458.534602][ T989] as10x_usb: error during firmware upload part1 [ 458.549093][ T989] Registered device Abilis Systems DVB-Titan [ 458.558347][T12301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.669513][T12297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.669531][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.669555][T12297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.759634][T12297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.759663][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.759699][T12297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.763859][T12301] team0: Port device team_slave_0 added [ 458.770905][T12301] team0: Port device team_slave_1 added [ 458.890881][T12301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.890899][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.890923][T12301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.957729][T12301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.957746][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.957765][T12301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.025358][ T32] usb 4-1: USB disconnect, device number 63 [ 459.135691][T12297] hsr_slave_0: entered promiscuous mode [ 459.136974][T12297] hsr_slave_1: entered promiscuous mode [ 459.139379][T12297] debugfs: 'hsr0' already exists in 'hsr' [ 459.139399][T12297] Cannot create hsr debugfs directory [ 459.163774][ T32] Unregistered device Abilis Systems DVB-Titan [ 459.168818][ T32] as10x_usb: device has been disconnected [ 459.236730][T12301] hsr_slave_0: entered promiscuous mode [ 459.246591][T12301] hsr_slave_1: entered promiscuous mode [ 459.252884][T12301] debugfs: 'hsr0' already exists in 'hsr' [ 459.252899][T12301] Cannot create hsr debugfs directory [ 459.601307][T12297] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.607631][ T5618] Bluetooth: hci15: command tx timeout [ 459.785785][T12297] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.891200][T12297] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.933682][ T5618] Bluetooth: hci16: command tx timeout [ 459.986836][T12297] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.180840][T12301] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.220771][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2075'. [ 460.269331][T12301] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.388425][T12301] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.529528][T12301] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.086179][T10957] IPVS: starting estimator thread 0... [ 461.095387][T12380] IPVS: rr: UDP 127.0.0.1:8888 - no destination available [ 461.172033][T12381] IPVS: using max 53 ests per chain, 127200 per kthread [ 461.205513][T12301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 461.272915][T12301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.273605][T12301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 461.317641][T12301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.318455][T12301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 461.370942][T12301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.372439][T12301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 461.396840][T12301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.560117][ T32] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 461.624304][T12297] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 461.632384][T12297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.633190][T12297] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 461.641473][T12297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.650531][T12297] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 461.656370][T12297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.665392][T12297] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 461.673329][T12297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.687906][ T5618] Bluetooth: hci15: command tx timeout [ 461.769697][ T32] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 461.773007][ T32] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 461.773101][ T32] usb 7-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.773144][ T32] usb 7-1: config 0 interface 0 has no altsetting 0 [ 461.800004][ T32] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 461.800047][ T32] usb 7-1: Product: syz [ 461.800078][ T32] usb 7-1: Manufacturer: syz [ 461.800110][ T32] usb 7-1: SerialNumber: syz [ 461.805181][T12301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.863269][ T32] usb 7-1: config 0 descriptor?? [ 461.880881][T12301] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.918634][T10909] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.918753][T10909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.951478][T10936] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.951607][T10936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.003114][T12297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.014093][ T5618] Bluetooth: hci16: command tx timeout [ 462.113406][ T32] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 462.124954][ T32] usb 7-1: USB disconnect, device number 4 [ 462.186944][T10553] udevd[10553]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.234169][T12297] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.282266][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.282343][T10911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.341103][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.342769][T10911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.118498][ T5785] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 463.270664][ T5785] usb 7-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 463.272804][ T5785] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.272851][ T5785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.340893][ T5785] as10x_usb: device has been detected [ 463.341692][ T5785] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 463.381513][ T5785] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 463.402544][ T5785] as10x_usb: error during firmware upload part1 [ 463.403142][ T5785] Registered device Abilis Systems DVB-Titan [ 463.825251][T12301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.963896][ T5785] usb 7-1: USB disconnect, device number 5 [ 464.065876][ T5785] Unregistered device Abilis Systems DVB-Titan [ 464.073357][ T5785] as10x_usb: device has been disconnected [ 464.473988][T12297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.925561][T12447] IPVS: rr: UDP 127.0.0.1:8888 - no destination available [ 465.041840][T12301] veth0_vlan: entered promiscuous mode [ 465.087130][T12301] veth1_vlan: entered promiscuous mode [ 465.135584][T12301] veth0_macvtap: entered promiscuous mode [ 465.158625][T12301] veth1_macvtap: entered promiscuous mode [ 465.261306][T12301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.355030][T12301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.552892][T10922] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.612690][T10911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.612776][T10911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.612839][T10911] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.689784][T12297] veth0_vlan: entered promiscuous mode [ 465.839467][T12456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.878722][T12456] pimreg: entered allmulticast mode [ 465.881520][T10957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.881539][T10957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.882148][T12297] veth1_vlan: entered promiscuous mode [ 465.966956][T10944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.967008][T10944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.112580][T12297] veth0_macvtap: entered promiscuous mode [ 466.142356][T12297] veth1_macvtap: entered promiscuous mode [ 466.214380][T12297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.282060][T12297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.300509][T10957] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.473010][T10932] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.492340][T10936] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.500755][T10956] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.692721][T10922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.692776][T10922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.846822][T10934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.846859][T10934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.887871][ T1872] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 467.065221][ T1872] usb 6-1: New USB device found: idVendor=0853, idProduct=0146, bcdDevice=0.00 [ 467.066546][ T1872] usb 6-1: config 0 interface 0 has no altsetting 0 [ 467.066582][ T1872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.101368][ T1872] usb 6-1: config 0 descriptor?? [ 467.561194][T12470] tipc: Enabling of bearer rejected, failed to enable media [ 467.564338][T12470] syzkaller0: entered promiscuous mode [ 467.564377][T12470] syzkaller0: entered allmulticast mode [ 467.610546][T12470] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 467.707382][ T5785] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 467.852315][ T5711] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 467.866398][ T5785] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 467.879570][ T5785] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.879600][ T5785] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.879620][ T5785] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.879660][ T5785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.884874][ T5785] usb 7-1: config 0 descriptor?? [ 468.018718][ T5711] usb 8-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 468.020117][ T5711] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.020157][ T5711] usb 8-1: config 0 has no interfaces? [ 468.020213][ T5711] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.028945][ T5711] usb 8-1: config 0 descriptor?? [ 468.289727][ T9] usb 8-1: USB disconnect, device number 2 [ 468.358556][ T5785] usbhid 7-1:0.0: can't add hid device: -71 [ 468.358680][ T5785] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 468.365267][ T5785] usb 7-1: USB disconnect, device number 6 [ 469.565634][ T1872] usbhid 6-1:0.0: can't add hid device: -71 [ 469.565746][ T1872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 469.593574][ T1872] usb 6-1: USB disconnect, device number 4 [ 469.709008][T12484] nfs: Unknown parameter ' [ 469.709008][T12484] ' [ 470.951434][T12500] tipc: Enabling of bearer rejected, failed to enable media [ 470.953872][T12500] syzkaller0: entered promiscuous mode [ 470.953892][T12500] syzkaller0: entered allmulticast mode [ 471.027497][ T1872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 471.032613][T12500] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 471.157620][ T1872] usb 6-1: device descriptor read/64, error -71 [ 471.297462][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 471.397718][ T1872] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 471.457049][ T9] usb 7-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 471.469663][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.469688][ T9] usb 7-1: config 0 has no interfaces? [ 471.469719][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.502257][ T9] usb 7-1: config 0 descriptor?? [ 471.527665][ T1872] usb 6-1: device descriptor read/64, error -71 [ 471.637579][ T1872] usb usb6-port1: attempt power cycle [ 471.743786][ T5785] usb 7-1: USB disconnect, device number 7 [ 471.987387][ T1872] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 472.019935][ T1872] usb 6-1: device descriptor read/8, error -71 [ 472.227346][ T5785] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 472.257323][ T1872] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 472.277911][ T1872] usb 6-1: device descriptor read/8, error -71 [ 472.378002][ T5785] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 472.378999][ T5785] usb 8-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.379030][ T5785] usb 8-1: config 0 interface 0 has no altsetting 0 [ 472.381051][ T5785] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 472.381075][ T5785] usb 8-1: Product: syz [ 472.381089][ T5785] usb 8-1: Manufacturer: syz [ 472.381103][ T5785] usb 8-1: SerialNumber: syz [ 472.383990][ T5785] usb 8-1: config 0 descriptor?? [ 472.387985][ T1872] usb usb6-port1: unable to enumerate USB device [ 472.515707][ T5785] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 472.561446][T10553] udevd[10553]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.603699][ T5785] usb 8-1: USB disconnect, device number 3 [ 473.407500][ T5813] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 473.558482][ T5813] usb 8-1: New USB device found: idVendor=0853, idProduct=0146, bcdDevice=0.00 [ 473.559467][ T5813] usb 8-1: config 0 interface 0 has no altsetting 0 [ 473.559502][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.562192][ T5813] usb 8-1: config 0 descriptor?? [ 473.863778][T12521] ip_tables: iptables: counters copy to user failed while replacing table [ 474.528402][ T33] audit: type=1326 audit(1790796723.933:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 474.528456][ T33] audit: type=1326 audit(1790796723.933:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 474.533509][ T33] audit: type=1326 audit(1790796723.943:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 474.534524][ T33] audit: type=1326 audit(1790796723.943:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 474.534772][ T33] audit: type=1326 audit(1790796723.943:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 474.536206][ T33] audit: type=1326 audit(1790796723.943:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 474.540373][ T33] audit: type=1326 audit(1790796723.943:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 474.541034][ T33] audit: type=1326 audit(1790796723.953:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 474.622505][ T33] audit: type=1326 audit(1790796724.023:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 474.627928][ T33] audit: type=1326 audit(1790796724.033:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd08b59e159 code=0x7ffc0000 [ 475.111623][ T1872] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 475.261460][ T1872] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 475.262828][ T1872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.262857][ T1872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.262902][ T1872] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 475.262943][ T1872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.325160][ T1872] usb 6-1: config 0 descriptor?? [ 475.850558][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 475.850619][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 475.850646][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x4 [ 475.852187][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 475.852220][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 475.852246][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 475.852272][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x2 [ 475.852769][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 475.853436][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 475.853466][ T1872] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 475.980699][T11363] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 476.012892][ T1872] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 476.013297][T11363] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 476.015335][T11363] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 476.017729][T11363] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 476.021251][T11363] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 476.436960][ T5813] usbhid 8-1:0.0: can't add hid device: -71 [ 476.437066][ T5813] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 476.465543][ T5813] usb 8-1: USB disconnect, device number 4 [ 477.575911][T12538] usb 6-1: string descriptor 0 read error: -71 [ 478.087516][ T5618] Bluetooth: hci17: command tx timeout [ 478.374775][ T5813] usb 6-1: USB disconnect, device number 9 [ 478.472440][T12573] ip_tables: iptables: counters copy to user failed while replacing table [ 478.702557][T12544] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.702876][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.703164][T12544] bridge_slave_0: entered allmulticast mode [ 478.705987][T12544] bridge_slave_0: entered promiscuous mode [ 478.743279][T12544] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.743741][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.744038][T12544] bridge_slave_1: entered allmulticast mode [ 478.772772][T12544] bridge_slave_1: entered promiscuous mode [ 478.845577][T12544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.877019][T12544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.959326][T12544] team0: Port device team_slave_0 added [ 478.981180][T12544] team0: Port device team_slave_1 added [ 479.104125][T12544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.104163][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.104205][T12544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.158799][T12544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.158822][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.158848][T12544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.439161][T12544] hsr_slave_0: entered promiscuous mode [ 479.444856][T12544] hsr_slave_1: entered promiscuous mode [ 479.465655][T12544] debugfs: 'hsr0' already exists in 'hsr' [ 479.465680][T12544] Cannot create hsr debugfs directory [ 479.777473][ T5813] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 479.910849][ T5813] usb 8-1: device descriptor read/64, error -71 [ 480.151741][ T5813] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 480.168268][ T5618] Bluetooth: hci17: command tx timeout [ 480.277478][ T5813] usb 8-1: device descriptor read/64, error -71 [ 480.317423][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 480.388226][ T5813] usb usb8-port1: attempt power cycle [ 480.420201][T12544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 480.443041][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.445330][T12544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 480.453465][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.455230][T12544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 480.469972][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.471621][T12544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.481746][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.517666][ T9] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 480.523839][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.523868][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.523888][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 480.523927][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.583742][ T9] usb 7-1: config 0 descriptor?? [ 480.767405][ T5813] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 480.795955][ T5813] usb 8-1: device descriptor read/8, error -71 [ 480.875537][T12544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.958072][T12544] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.997717][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.997882][T10932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.027991][ T5813] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 481.033031][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.033183][T10957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.067116][ T5813] usb 8-1: device descriptor read/8, error -71 [ 481.106876][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 481.117431][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 481.123571][ T9] usb 7-1: USB disconnect, device number 8 [ 481.167878][ T5813] usb usb8-port1: unable to enumerate USB device [ 482.249433][ T5618] Bluetooth: hci17: command tx timeout [ 482.413734][T12607] batman_adv: batadv0: Adding interface: veth0 [ 482.413753][T12607] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.413782][T12607] batman_adv: batadv0: Interface activated: veth0 [ 482.532658][T12607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.532725][T12607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.570241][T12607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.570267][T12607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.621974][T12607] batman_adv: batadv0: Interface deactivated: veth0 [ 482.622016][T12607] batman_adv: batadv0: Removing interface: veth0 [ 482.672443][T11363] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 482.674108][T11363] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 482.675009][T11363] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 482.676873][T11363] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 482.718885][T11363] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 483.246691][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 483.932993][T12544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.323254][T12642] program syz.7.2145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.328696][T11363] Bluetooth: hci17: command tx timeout [ 484.366106][T12642] x_tables: duplicate underflow at hook 3 [ 484.378836][T12645] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 484.434200][T12641] IPVS: rr: UDP 127.0.0.1:8888 - no destination available [ 484.541344][T12544] veth0_vlan: entered promiscuous mode [ 484.562123][T12544] veth1_vlan: entered promiscuous mode [ 484.817759][T11363] Bluetooth: hci18: command tx timeout [ 484.946185][T12544] veth0_macvtap: entered promiscuous mode [ 485.059788][T12544] veth1_macvtap: entered promiscuous mode [ 485.248899][T12544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.254298][T12544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.508062][T10956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.510932][T10922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.511292][T10922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.558157][T10907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.687875][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 485.851206][ T10] usb 8-1: device descriptor read/64, error -71 [ 486.087943][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 486.144553][T10934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.144580][T10934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.217283][ T10] usb 8-1: device descriptor read/64, error -71 [ 486.327961][ T10] usb usb8-port1: attempt power cycle [ 486.356137][T12611] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.356302][T12611] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.356678][T12611] bridge_slave_0: entered allmulticast mode [ 486.379271][T12611] bridge_slave_0: entered promiscuous mode [ 486.388995][T12611] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.389212][T12611] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.389342][T12611] bridge_slave_1: entered allmulticast mode [ 486.391448][T12611] bridge_slave_1: entered promiscuous mode [ 486.461621][T10911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.461657][T10911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.463965][T12611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.493563][T12611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.575662][T12611] team0: Port device team_slave_0 added [ 486.589279][T12611] team0: Port device team_slave_1 added [ 486.673783][T12611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.673801][T12611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.673825][T12611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.726952][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 486.737768][T12611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.737800][T12611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.737856][T12611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.792389][ T10] usb 8-1: device descriptor read/8, error -71 [ 486.889481][T11363] Bluetooth: hci18: command tx timeout [ 487.027343][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 487.080795][ T10] usb 8-1: device descriptor read/8, error -71 [ 487.187546][ T10] usb usb8-port1: unable to enumerate USB device [ 487.542994][T12611] hsr_slave_0: entered promiscuous mode [ 487.559290][T12611] hsr_slave_1: entered promiscuous mode [ 487.572789][T12611] debugfs: 'hsr0' already exists in 'hsr' [ 487.572845][T12611] Cannot create hsr debugfs directory [ 487.706650][T12670] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 487.827452][ T1872] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 487.978989][ T1872] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 487.997753][ T1872] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.997784][ T1872] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 487.997807][ T1872] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 0 [ 487.997831][ T1872] usb 7-1: config 0 interface 0 has no altsetting 0 [ 488.056891][ T1872] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 488.056921][ T1872] usb 7-1: Product: syz [ 488.056935][ T1872] usb 7-1: Manufacturer: syz [ 488.056950][ T1872] usb 7-1: SerialNumber: syz [ 488.101415][ T1872] usb 7-1: config 0 descriptor?? [ 488.127960][ T1872] usb 7-1: selecting invalid altsetting 0 [ 488.525124][ T5711] usb 7-1: USB disconnect, device number 9 [ 488.967828][T11363] Bluetooth: hci18: command tx timeout [ 489.317088][ T5785] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 489.482471][T12611] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.500059][ T5785] usb 8-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 489.501559][ T5785] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.544564][ T5785] usb 8-1: config 0 descriptor?? [ 489.787503][ T5711] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 489.811164][ T5785] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 489.811805][ T5785] [drm:udl_init] *ERROR* Selecting channel failed [ 489.859430][ T5785] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 489.859454][ T5785] [drm] Initialized udl on minor 1 [ 489.882921][ T5785] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.896804][ T5785] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 489.929278][ T5785] usb 8-1: USB disconnect, device number 13 [ 489.968790][ T5711] usb 1-1: New USB device found: idVendor=0853, idProduct=0146, bcdDevice=0.00 [ 489.988183][ T5711] usb 1-1: config 0 interface 0 has no altsetting 0 [ 489.988281][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.043340][ T5711] usb 1-1: config 0 descriptor?? [ 490.130211][T12611] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.271547][T12611] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.424756][T12690] program syz.6.2156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.455783][T12690] x_tables: duplicate underflow at hook 3 [ 490.568193][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2157'. [ 490.718394][T12611] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.054551][T11363] Bluetooth: hci18: command tx timeout [ 491.814921][T12611] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 491.912979][T12611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.918638][T12611] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 492.030117][T12611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.036675][T12611] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 492.066829][T12611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 492.083376][T12611] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 492.204983][T12712] netlink: 'syz.7.2162': attribute type 1 has an invalid length. [ 492.205008][T12712] netlink: 'syz.7.2162': attribute type 2 has an invalid length. [ 492.205856][T12712] netlink: 'syz.7.2162': attribute type 1 has an invalid length. [ 492.234503][T12611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.273190][ T5711] usbhid 1-1:0.0: can't add hid device: -71 [ 492.273319][ T5711] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 492.312360][ T5711] usb 1-1: USB disconnect, device number 64 [ 492.637012][T12611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.657601][ T5785] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 492.705844][T12611] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.757069][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.757297][T10911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.795062][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.795164][T10932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.816575][ T5785] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 492.841245][ T5785] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 492.841277][ T5785] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.841301][ T5785] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 492.841323][ T5785] usb 8-1: config 0 interface 0 has no altsetting 0 [ 492.846468][ T5785] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 492.846497][ T5785] usb 8-1: Product: syz [ 492.846511][ T5785] usb 8-1: Manufacturer: syz [ 492.846525][ T5785] usb 8-1: SerialNumber: syz [ 492.914987][ T5785] usb 8-1: config 0 descriptor?? [ 492.928914][ T5785] usb 8-1: selecting invalid altsetting 0 [ 493.179840][ T1872] usb 8-1: USB disconnect, device number 14 [ 494.004876][T12611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.178331][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 494.329575][ T10] usb 8-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 494.349138][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.351701][ T10] usb 8-1: config 0 descriptor?? [ 494.377103][T12611] veth0_vlan: entered promiscuous mode [ 494.394209][T12611] veth1_vlan: entered promiscuous mode [ 494.467457][T12611] veth0_macvtap: entered promiscuous mode [ 494.472857][T12611] veth1_macvtap: entered promiscuous mode [ 494.518271][T12611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.542457][T12611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.599340][T10905] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.600001][T10905] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.680254][T10936] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.688899][T10907] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.711733][ T10] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 494.716034][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 494.762040][ T10] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 494.762066][ T10] [drm] Initialized udl on minor 1 [ 494.780796][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 494.781229][ T10] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 494.804182][ T10] usb 8-1: USB disconnect, device number 15 [ 494.821606][ T5785] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 494.904325][T10936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.904379][T10936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.961732][T10936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.961769][T10936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.172855][T12755] syzkaller0: entered promiscuous mode [ 495.172879][T12755] syzkaller0: entered allmulticast mode [ 495.188761][T12755] tipc: Started in network mode [ 495.188790][T12755] tipc: Node identity bec739a92ca9, cluster identity 4711 [ 495.189209][T12755] tipc: Enabled bearer , priority 0 [ 495.193976][T12755] tipc: Resetting bearer [ 495.196059][T12754] tipc: Resetting bearer [ 495.255990][T12754] tipc: Disabling bearer [ 495.383175][T12758] program syz.7.2168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.384082][T12758] x_tables: duplicate underflow at hook 3 [ 496.589387][T12728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.759704][ T1872] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 496.918190][ T1872] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 496.919956][ T1872] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 496.919987][ T1872] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.920013][ T1872] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.920036][ T1872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 496.983342][ T1872] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 496.983369][ T1872] usb 8-1: Product: syz [ 496.983384][ T1872] usb 8-1: Manufacturer: syz [ 496.983398][ T1872] usb 8-1: SerialNumber: syz [ 497.017126][ T1872] usb 8-1: config 0 descriptor?? [ 497.031658][ T1872] usb 8-1: selecting invalid altsetting 0 [ 497.270152][ T1872] usb 8-1: USB disconnect, device number 16 [ 497.668815][T12805] program syz.8.2181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.694821][T12805] x_tables: duplicate underflow at hook 3 [ 497.788393][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 497.938012][ T10] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 497.939149][ T10] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.939179][ T10] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 497.939203][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 497.942051][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 497.942076][ T10] usb 1-1: Product: syz [ 497.942091][ T10] usb 1-1: Manufacturer: syz [ 497.942106][ T10] usb 1-1: SerialNumber: syz [ 497.957338][ T10] usb 1-1: config 0 descriptor?? [ 497.987551][T12813] bridge0: port 3(batadv0) entered blocking state [ 497.987844][T12813] bridge0: port 3(batadv0) entered disabled state [ 497.988313][T12813] batadv0: entered allmulticast mode [ 497.991755][T12813] batadv0: entered promiscuous mode [ 498.006848][T12813] bridge0: port 3(batadv0) entered blocking state [ 498.007024][T12813] bridge0: port 3(batadv0) entered forwarding state [ 498.064289][T12804] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.077109][ T10] usb 1-1: selecting invalid altsetting 0 [ 498.210873][T10944] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 498.210897][T10944] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 498.315326][ T5710] usb 1-1: USB disconnect, device number 65 [ 498.692544][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2184'. [ 498.825340][T12823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 498.910092][ T5618] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 498.925315][ T5618] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 498.938337][ T5618] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 498.939981][ T5618] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 498.941390][ T5618] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 499.650104][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 499.802883][ T9] usb 8-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 499.806567][ T9] usb 8-1: config 0 has no interfaces? [ 499.826517][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.826545][ T9] usb 8-1: Product: syz [ 499.826560][ T9] usb 8-1: Manufacturer: syz [ 499.826575][ T9] usb 8-1: SerialNumber: syz [ 499.866484][ T9] usb 8-1: config 0 descriptor?? [ 500.139347][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2186'. [ 500.178883][ T9] usb 8-1: USB disconnect, device number 17 [ 500.747684][ T5710] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 500.900655][ T5710] usb 9-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 500.917922][ T5710] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 500.917953][ T5710] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.917979][ T5710] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 500.917992][ T5710] usb 9-1: config 0 interface 0 has no altsetting 0 [ 500.969538][T11363] Bluetooth: hci19: command tx timeout [ 500.970446][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 500.970472][ T5710] usb 9-1: Product: syz [ 500.970481][ T5710] usb 9-1: Manufacturer: syz [ 500.970489][ T5710] usb 9-1: SerialNumber: syz [ 501.004921][ T5710] usb 9-1: config 0 descriptor?? [ 501.058999][ T5710] usb 9-1: selecting invalid altsetting 0 [ 501.215549][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.215629][T12829] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.215784][T12829] bridge_slave_0: entered allmulticast mode [ 501.231527][T12829] bridge_slave_0: entered promiscuous mode [ 501.251317][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.260196][T12829] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.263397][T12872] program syz.7.2193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.264614][T12829] bridge_slave_1: entered allmulticast mode [ 501.266284][T12829] bridge_slave_1: entered promiscuous mode [ 501.323995][T12872] x_tables: duplicate underflow at hook 3 [ 501.436727][T12865] snd-usb-audio 9-1:0.0: Runtime PM usage count underflow! [ 501.477052][ T5711] usb 9-1: USB disconnect, device number 7 [ 501.541455][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.541520][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.645839][T12829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.666911][T12829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.710086][T10552] udevd[10552]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.834640][T12829] team0: Port device team_slave_0 added [ 501.849867][T12829] team0: Port device team_slave_1 added [ 501.936060][T12829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.936084][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.936109][T12829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.960307][T12829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.960341][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.960395][T12829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.305386][T12829] hsr_slave_0: entered promiscuous mode [ 502.318041][T12829] hsr_slave_1: entered promiscuous mode [ 502.321836][T12829] debugfs: 'hsr0' already exists in 'hsr' [ 502.321876][T12829] Cannot create hsr debugfs directory [ 502.477108][T12883] bridge0: port 3(syz_tun) entered blocking state [ 502.477590][T12883] bridge0: port 3(syz_tun) entered disabled state [ 502.477889][T12883] syz_tun: entered allmulticast mode [ 502.499548][T12883] syz_tun: entered promiscuous mode [ 502.525326][T12883] bridge0: port 3(syz_tun) entered blocking state [ 502.525427][T12883] bridge0: port 3(syz_tun) entered listening state [ 503.046720][T12829] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.058288][T11363] Bluetooth: hci19: command tx timeout [ 503.101518][T12900] program syz.0.2203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.103259][T12900] x_tables: duplicate underflow at hook 3 [ 503.201406][T12829] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.305623][T12829] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.377604][T12829] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.588046][T12829] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 503.590615][T12829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.591336][T12829] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 503.594734][T12829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.596026][T12829] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 503.649563][T12829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.650558][T12829] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 503.654804][T12829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.774552][T12829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.799191][T12829] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.812605][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.812792][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.842820][T10936] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.842938][T10936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.347695][ T5711] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 504.424040][T12829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.477493][ T5711] usb 1-1: device descriptor read/64, error -71 [ 504.719409][ T5711] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 504.762044][T12829] veth0_vlan: entered promiscuous mode [ 504.779111][T12829] veth1_vlan: entered promiscuous mode [ 504.823990][T12829] veth0_macvtap: entered promiscuous mode [ 504.829388][T12829] veth1_macvtap: entered promiscuous mode [ 504.844553][T12829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.855966][ T5711] usb 1-1: device descriptor read/64, error -71 [ 504.873270][T12829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.960756][ T5711] usb usb1-port1: attempt power cycle [ 504.967112][T10936] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.984458][T10911] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.999967][T10956] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.030315][T10936] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.123894][T10956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.123945][T10956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.128992][T11363] Bluetooth: hci19: command tx timeout [ 505.192702][T10957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.192758][T10957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.297593][ T5711] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 505.328067][ T5711] usb 1-1: device descriptor read/8, error -71 [ 505.335105][T12932] lo speed is unknown, defaulting to 1000 [ 505.356147][T12932] lo speed is unknown, defaulting to 1000 [ 505.366280][T12932] lo speed is unknown, defaulting to 1000 [ 505.567946][ T5711] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 505.596814][ T5711] usb 1-1: device descriptor read/8, error -71 [ 505.615037][ T9] lo speed is unknown, defaulting to 1000 [ 505.628442][T12932] infiniband syz0: set active [ 505.628463][T12932] infiniband syz0: added lo [ 505.661075][T12932] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 505.661116][T12932] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 505.661156][T12932] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 505.720932][ T5711] usb usb1-port1: unable to enumerate USB device [ 505.750872][T12932] RDS/IB: syz0: added [ 505.751534][T12932] smc: adding ib device syz0 with port count 1 [ 505.751700][T12932] smc: ib device syz0 port 1 has no pnetid [ 505.754602][ T9] lo speed is unknown, defaulting to 1000 [ 505.763466][T12932] lo speed is unknown, defaulting to 1000 [ 506.033327][T12932] lo speed is unknown, defaulting to 1000 [ 506.315530][T12932] lo speed is unknown, defaulting to 1000 [ 506.560732][T12932] lo speed is unknown, defaulting to 1000 [ 506.796525][T12932] lo speed is unknown, defaulting to 1000 [ 507.099196][T12932] lo speed is unknown, defaulting to 1000 [ 507.207453][T11363] Bluetooth: hci19: command tx timeout [ 507.369229][ T5618] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 507.376529][ T5618] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 507.394247][ T5618] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 507.412805][ T5618] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 507.415297][ T5618] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 507.622778][T12932] lo speed is unknown, defaulting to 1000 [ 507.884065][T12932] lo speed is unknown, defaulting to 1000 [ 508.156847][T12932] lo speed is unknown, defaulting to 1000 [ 508.433727][T12932] lo speed is unknown, defaulting to 1000 [ 508.675721][T12932] lo speed is unknown, defaulting to 1000 [ 508.901819][T12941] lo speed is unknown, defaulting to 1000 [ 509.121245][T12932] lo speed is unknown, defaulting to 1000 [ 509.519418][T12941] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.519592][T12941] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.519757][T12941] bridge_slave_0: entered allmulticast mode [ 509.522488][T12941] bridge_slave_0: entered promiscuous mode [ 509.531252][T11363] Bluetooth: hci20: command tx timeout [ 509.572741][T12941] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.572965][T12941] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.573163][T12941] bridge_slave_1: entered allmulticast mode [ 509.575315][T12941] bridge_slave_1: entered promiscuous mode [ 509.606251][T12932] lo speed is unknown, defaulting to 1000 [ 509.654746][T12941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.671409][T12941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.721528][T12941] team0: Port device team_slave_0 added [ 509.724525][T12941] team0: Port device team_slave_1 added [ 509.771311][T12941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.771330][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.771355][T12941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.773521][T12941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.773535][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.773560][T12941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.930121][T12941] hsr_slave_0: entered promiscuous mode [ 509.931172][T12941] hsr_slave_1: entered promiscuous mode [ 509.931924][T12941] debugfs: 'hsr0' already exists in 'hsr' [ 509.931944][T12941] Cannot create hsr debugfs directory [ 510.186847][T12941] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.246232][T12932] lo speed is unknown, defaulting to 1000 [ 510.459511][T12941] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.704649][T12941] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.829300][T12932] lo speed is unknown, defaulting to 1000 [ 511.059923][T12941] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.292033][T12932] lo speed is unknown, defaulting to 1000 [ 511.371846][T12941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 511.385703][T12941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.386622][T12941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 511.404464][T12941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.405418][T12941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 511.429354][T12941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.430306][T12941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 511.460246][T12941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 511.573364][T12941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.607988][T11363] Bluetooth: hci20: command tx timeout [ 511.612440][T12941] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.645068][T10944] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.645147][T10944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.683480][T10907] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.683655][T10907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.115785][T12932] lo speed is unknown, defaulting to 1000 [ 512.714934][T12932] lo speed is unknown, defaulting to 1000 [ 513.079015][T12932] lo speed is unknown, defaulting to 1000 [ 513.364734][T12941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.454756][T12932] lo speed is unknown, defaulting to 1000 [ 513.689677][T11363] Bluetooth: hci20: command tx timeout [ 513.969955][T12941] veth0_vlan: entered promiscuous mode [ 513.992438][T12941] veth1_vlan: entered promiscuous mode [ 514.035374][T12941] veth0_macvtap: entered promiscuous mode [ 514.046781][T12941] veth1_macvtap: entered promiscuous mode [ 514.068701][T12941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.105848][T12941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.148633][T10907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.175346][T10911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.176792][T10936] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.203609][T10932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.426914][T10922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.426935][T10922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.583414][T10907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.583438][T10907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.767848][T11363] Bluetooth: hci20: command tx timeout [ 516.101382][T13026] lo speed is unknown, defaulting to 1000 [ 517.532100][ C1] bridge0: port 3(syz_tun) entered learning state [ 517.596638][T13035] program syz.4.2213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.631205][T13035] x_tables: duplicate underflow at hook 3 [ 518.302811][ T5618] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 518.310678][ T5618] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 518.322382][ T5618] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 518.333334][ T5618] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 518.335104][ T5618] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 518.465421][ T5618] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 518.474139][ T5618] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 518.482255][ T5618] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 518.483601][ T5618] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 518.484517][ T5618] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 519.256403][T13044] lo speed is unknown, defaulting to 1000 [ 519.506609][T13047] lo speed is unknown, defaulting to 1000 [ 520.082588][T13044] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.082706][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.082859][T13044] bridge_slave_0: entered allmulticast mode [ 520.084205][T13044] bridge_slave_0: entered promiscuous mode [ 520.089653][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.089939][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.090201][T13044] bridge_slave_1: entered allmulticast mode [ 520.093411][T13044] bridge_slave_1: entered promiscuous mode [ 520.213928][T13044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.238716][T13044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.297341][T13044] team0: Port device team_slave_0 added [ 520.315300][T13044] team0: Port device team_slave_1 added [ 520.385571][T13044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.385585][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.385611][T13044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.422910][ T5618] Bluetooth: hci21: command tx timeout [ 520.450148][T13044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.450169][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.450195][T13044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.564998][T13044] hsr_slave_0: entered promiscuous mode [ 520.566037][T13044] hsr_slave_1: entered promiscuous mode [ 520.566690][T13044] debugfs: 'hsr0' already exists in 'hsr' [ 520.566719][T13044] Cannot create hsr debugfs directory [ 520.568098][ T5618] Bluetooth: hci22: command tx timeout [ 521.019615][T13047] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.020439][T13047] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.020618][T13047] bridge_slave_0: entered allmulticast mode [ 521.022435][T13047] bridge_slave_0: entered promiscuous mode [ 521.095294][T13047] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.095430][T13047] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.095568][T13047] bridge_slave_1: entered allmulticast mode [ 521.121262][T13047] bridge_slave_1: entered promiscuous mode [ 521.228413][T13047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.236811][T13047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.376999][ T34] INFO: task syz.1.1813:11238 blocked for more than 143 seconds. [ 521.377026][ T34] Not tainted syzkaller #0 [ 521.377037][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.377046][ T34] task:syz.1.1813 state:D stack:27432 pid:11238 tgid:11236 ppid:5603 task_flags:0x400040 flags:0x00080002 [ 521.377120][ T34] Call Trace: [ 521.377128][ T34] [ 521.377254][ T34] __schedule+0x1b47/0x5b40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 521.377307][ T34] ? __pfx___schedule+0x10/0x10 [ 521.377337][ T34] ? schedule+0x90/0x2b0 [ 521.377359][ T34] schedule+0x164/0x2b0 [ 521.377381][ T34] schedule_preempt_disabled+0x13/0x30 [ 521.377399][ T34] __mutex_lock+0x7c4/0x15a0 [ 521.377423][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 521.377446][ T34] ? write_versions+0x95/0xe30 [ 521.377468][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 521.377503][ T34] write_versions+0x95/0xe30 [ 521.377528][ T34] ? __pfx_write_versions+0x10/0x10 [ 521.377548][ T34] ? __might_fault+0xaf/0x130 [ 521.377572][ T34] ? _copy_from_user+0x94/0xb0 [ 521.377593][ T34] ? simple_transaction_get+0x12d/0x160 [ 521.377617][ T34] nfsctl_transaction_write+0x10f/0x160 [ 521.377639][ T34] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 521.377659][ T34] vfs_write+0x296/0xba0 [ 521.377695][ T34] ? __pfx_vfs_write+0x10/0x10 [ 521.377716][ ** replaying previous printk message ** [ 521.377716][ T34] ? __fget_files+0x2a/0x420 [ 521.377735][ T34] ? __fget_files+0x3a2/0x420 [ 521.377751][ T34] ? __fget_files+0x2a/0x420 [ 521.377773][ T34] ? fdget+0x1ac/0x250 [ 521.377799][ T34] ksys_write+0x150/0x270 [ 521.377820][ T34] ? __pfx_ksys_write+0x10/0x10 [ 521.377850][ T34] do_syscall_64+0x166/0x520 [ 521.377900][ T34] ? trace_irq_disable+0x3b/0x140 [ 521.377919][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.377939][ T34] ? clear_bhb_loop+0x70/0xc0 [ 521.377959][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.377979][ T34] RIP: 0033:0x7f3b9559e159 [ 521.377997][ T34] RSP: 002b:00007f3b9644e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.378019][ T34] RAX: ffffffffffffffda RBX: 00007f3b95826090 RCX: 00007f3b9559e159 [ 521.378034][ T34] RDX: 0000000000000009 RSI: 0000200000000680 RDI: 0000000000000004 [ 521.378047][ T34] RBP: 00007f3b9563506b R08: 0000000000000000 R09: 0000000000000000 [ 521.378060][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.378073][ T34] R13: 00007f3b95826128 R14: 00007f3b95826090 R15: 00007fff41c53cf8 [ 521.378105][ T34] [ 521.378114][ T34] INFO: task syz.1.1813:11239 blocked for more than 143 seconds. [ 521.378130][ T34] Not tainted syzkaller #0 [ 521.378140][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.378150][ T34] task:syz.1.1813 state:D stack:26496 pid:11239 tgid:11236 ppid:5603 task_flags:0x400040 flags:0x00080002 [ 521.378204][ T34] Call Trace: [ 521.378211][ T34] [ 521.378223][ T34] __schedule+0x1b47/0x5b40 [ 521.378270][ T34] ? __pfx___schedule+0x10/0x10 [ 521.378298][ T34] ? schedule+0x90/0x2b0 [ 521.378318][ T34] schedule+0x164/0x2b0 [ 521.378337][ T34] schedule_preempt_disabled+0x13/0x30 [ 521.378354][ T34] __mutex_lock+0x7c4/0x15a0 [ 521.378375][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 521.378423][ T34] ? write_threads+0x3b1/0x610 [ 521.378445][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 521.378460][ T34] ? simple_strntoull+0x114/0x190 [ 521.378487][ T34] ? qword_get+0x5ad/0x650 [ 521.380725][ T34] write_threads+0x3b1/0x610 [ 521.380758][ T34] ? __pfx_write_threads+0x10/0x10 [ 521.380795][ T34] ? _copy_from_user+0x94/0xb0 [ 521.380817][ T34] ? simple_transaction_get+0x12d/0x160 [ 521.380841][ T34] nfsctl_transaction_write+0x10f/0x160 [ 521.380862][ T34] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 521.380883][ T34] vfs_write+0x296/0xba0 [ 521.380912][ T34] ? __pfx_vfs_write+0x10/0x10 [ 521.380933][ T34] ? __fget_files+0x2a/0x420 [ 521.380951][ T34] ? __fget_files+0x3a2/0x420 [ 521.380968][ T34] ? __fget_files+0x2a/0x420 [ 521.380990][ T34] ? fdget+0x1ac/0x250 [ 521.381015][ T34] ksys_write+0x150/0x270 [ 521.381037][ T34] ? __pfx_ksys_write+0x10/0x10 [ 521.381067][ T34] do_syscall_64+0x166/0x520 [ 521.381092][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.381114][ T34] ? clear_bhb_loop+0x70/0xc0 [ 521.381135][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.381155][ T34] RIP: 0033:0x7f3b9559e159 [ 521.381173][ T34] RSP: 002b:00007f3b9642d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.381194][ T34] RAX: ffffffffffffffda RBX: 00007f3b95826180 RCX: 00007f3b9559e159 [ 521.381210][ T34] RDX: 0000000000000002 RSI: 0000200000000800 RDI: 0000000000000005 [ 521.381222][ T34] RBP: 00007f3b9563506b R08: 0000000000000000 R09: 0000000000000000 [ 521.381235][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.381247][ T34] R13: 00007f3b95826218 R14: 00007f3b95826180 R15: 00007fff41c53cf8 [ 521.381279][ T34] [ 521.381430][ T34] [ 521.381430][ T34] Showing all locks held in the system: [ 521.381444][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 521.381460][ T34] #0: ffffffff8ed5c620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 521.381535][ T34] locks held by getty/5363: 2, on CPU#0: [ 521.381549][ T34] #0: ffff888032da60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 521.381595][ T34] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 521.381642][ T34] locks held by syz-executor/5605: 2, on CPU#1: [ 521.381657][ T34] #0: ffff8880750b20e8 (&type->s_umount_key#63){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 521.381713][ T34] #1: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 521.381770][ T34] locks held by kworker/u8:16/10909: 2, last CPU#1: [ 521.381785][ T34] #0: ffff888032e1c948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 521.381832][ T34] #1: ffffc90002f67c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 521.381886][ T34] locks held by kworker/u8:64/10957: 3, last CPU#1: [ 521.381900][ T34] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 521.381946][ T34] #1: ffffc90004957c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 521.381992][ T34] #2: ffff88808c460800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 521.382038][ T34] locks held by syz.1.1813/11237: 3, on CPU#1: [ 521.382052][ T34] #0: ffff88802ad1eef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.382096][ T34] #1: ffff88802b9c2460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.382148][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.382192][ T34] locks held by syz.1.1813/11238: 3, on CPU#0: [ 521.382207][ T34] #0: ffff88807f6187f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.382250][ T34] #1: ffff88802b9c2460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.382298][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 521.382342][ T34] locks held by syz.1.1813/11239: 3, on CPU#0: [ 521.382356][ T34] #0: ffff88807e8b1270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.411310][ T34] #1: ffff88802b9c2460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.411413][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.411508][ T34] locks held by syz.3.1853/11342: 2, on CPU#0: [ 521.411538][ T34] #0: ffffffff902c4d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 521.411614][ T34] #1: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 521.411707][ T34] locks held by syz.2.1856/11348: 3, on CPU#0: [ 521.411736][ T34] #0: ffff888074bf90b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.411811][ T34] #1: ffff88802ae66460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.411905][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.411979][ T34] locks held by syz.2.1856/11349: 2, on CPU#1: [ 521.412008][ T34] #0: ffff888065cbbb30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.412098][ T34] #1: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.412197][ T34] locks held by syz.6.1916/11618: 3, on CPU#0: [ 521.412234][ T34] #0: ffff8880567a90b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.412308][ T34] #1: ffff888032752460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.412402][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 521.412492][ T34] locks held by syz.6.1916/11619: 3, on CPU#0: [ 521.412521][ T34] #0: ffff8880567a9eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.412595][ T34] #1: ffff888032752460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.412689][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.412764][ T34] locks held by syz.6.1916/11620: 3, on CPU#1: [ 521.412793][ T34] #0: ffff88807d7f47f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.412884][ T34] #1: ffff888032752460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.412962][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.413054][ T34] locks held by syz.5.1922/11665: 3, on CPU#0: [ 521.413083][ T34] #0: ffff88805cabc9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.413158][ T34] #1: ffff88807f528460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.413257][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.413347][ T34] locks held by syz.5.1922/11667: 3, on CPU#0: [ 521.413377][ T34] #0: ffff888079ffa630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.424783][ T34] #1: ffff88807f528460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.424890][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.424987][ T34] locks held by syz.7.1934/11712: 3, on CPU#1: [ 521.425016][ T34] #0: ffff88807f62d970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.425107][ T34] #1: ffff888021f68460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.425185][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 521.425313][ T34] locks held by syz.7.1934/11713: 3, on CPU#1: [ 521.425343][ T34] #0: ffff88807f62c630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.425433][ T34] #1: ffff888021f68460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.425511][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.425601][ T34] locks held by syz.7.1934/11714: 3, on CPU#0: [ 521.425630][ T34] #0: ffff88807a0222b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.425703][ T34] #1: ffff888021f68460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.425798][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.425891][ T34] locks held by syz.0.1994/11882: 3, on CPU#0: [ 521.425905][ T34] #0: ffff888024f41270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.425995][ T34] #1: ffff888067e7e460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.426088][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 521.426163][ T34] locks held by syz.0.1994/11883: 3, on CPU#0: [ 521.426192][ T34] #0: ffff88807972b0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.426288][ T34] #1: ffff888067e7e460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.426365][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.426455][ T34] locks held by syz.0.1994/11884: 2, on CPU#0: [ 521.426485][ T34] #0: ffff88807972a9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.426558][ T34] #1: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x4c/0xd0 [ 521.426655][ T34] locks held by syz.8.2006/11969: 3, on CPU#1: [ 521.426684][ T34] #0: ffff888079189cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.426758][ T34] #1: ffff8880278d2460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.426852][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.445069][ T34] locks held by syz.8.2006/11973: 3, on CPU#1: [ 521.445102][ T34] #0: ffff888054d9e630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.445194][ T34] #1: ffff8880278d2460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.445297][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.445389][ T34] locks held by syz.9.2009/12009: 3, on CPU#0: [ 521.445404][ T34] #0: ffff888078074b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.445493][ T34] #1: ffff8880533a4460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.445586][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 521.445661][ T34] locks held by syz.9.2009/12011: 1, on CPU#0: [ 521.445691][ T34] #0: ffff888078074b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.445784][ T34] locks held by syz.4.2033/12104: 3, on CPU#1: [ 521.445798][ T34] #0: ffff8880791a8ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.445887][ T34] #1: ffff888024e2e460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.445980][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.446054][ T34] locks held by syz.4.2033/12105: 3, on CPU#0: [ 521.446084][ T34] #0: ffff8880791a7430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.446158][ T34] #1: ffff888024e2e460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.446274][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.446349][ T34] locks held by syz.1.2035/12110: 2, on CPU#0: [ 521.446378][ T34] #0: ffff88807e46c9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.446452][ T34] #1: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.446551][ T34] locks held by syz.3.2074/12369: 3, on CPU#0: [ 521.446580][ T34] #0: ffff8880356e10b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.446668][ T34] #1: ffff88802c69a460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.446747][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 521.446838][ T34] locks held by syz.3.2074/12370: 3, on CPU#0: [ 521.446866][ T34] #0: ffff8880356e1eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.446941][ T34] #1: ffff88802c69a460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.447035][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.468400][ T34] locks held by syz.3.2074/12371: 3, on CPU#0: [ 521.468458][ T34] #0: ffff8880356e1970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.468562][ T34] #1: ffff88802c69a460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.468660][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.468755][ T34] locks held by syz.2.2093/12468: 3, on CPU#1: [ 521.468785][ T34] #0: ffff888024f51970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.468861][ T34] #1: ffff888029e5c460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.468955][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.469030][ T34] locks held by syz.2.2093/12471: 3, on CPU#1: [ 521.469060][ T34] #0: ffff888024f50470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.469149][ T34] #1: ffff888029e5c460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.469250][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.469344][ T34] locks held by syz.5.2144/12634: 3, on CPU#1: [ 521.469359][ T34] #0: ffff888024f41430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.469448][ T34] #1: ffff8880549e4460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.469542][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.469618][ T34] locks held by syz.5.2144/12636: 3, on CPU#1: [ 521.469648][ T34] #0: ffff88807f3890b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.469877][ T34] #1: ffff8880549e4460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.470008][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.470236][ T34] locks held by syz.6.2160/12707: 3, on CPU#1: [ 521.470298][ T34] #0: ffff88807f3889b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.470403][ T34] #1: ffff88807888e460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.470561][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.470662][ T34] locks held by syz.7.2198/12886: 3, on CPU#1: [ 521.487798][ T34] #0: ffff8880334377b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.487906][ T34] #1: ffff8880a87ea460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.488002][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 521.488094][ T34] locks held by syz.7.2198/12887: 3, on CPU#0: [ 521.488123][ T34] #0: ffff8880257362b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.488198][ T34] #1: ffff8880a87ea460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.488292][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.488382][ T34] locks held by syz.7.2198/12892: 3, on CPU#0: [ 521.488396][ T34] #0: ffff88807e46cef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.488486][ T34] #1: ffff8880a87ea460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.488580][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.488656][ T34] locks held by syz.8.2202/12896: 3, on CPU#0: [ 521.488685][ T34] #0: ffff88807e8cf970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.488783][ T34] #1: ffff88801df78460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.488881][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 521.488955][ T34] locks held by syz.8.2202/12899: 3, on CPU#1: [ 521.488984][ T34] #0: ffff8880791a57b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.489075][ T34] #1: ffff88801df78460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.489167][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.489247][ T34] locks held by syz.0.2207/12944: 3, on CPU#1: [ 521.489276][ T34] #0: ffff88807a0077b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.489366][ T34] #1: ffff8880acc30460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.489444][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.489532][ T34] locks held by syz.0.2207/12947: 3, on CPU#0: [ 521.489562][ T34] #0: ffff8880567a9cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.489635][ T34] #1: ffff8880acc30460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.489735][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 521.489827][ T34] locks held by syz.9.2215/13042: 2, on CPU#1: [ 521.489858][ T34] #0: ffff88807e44d970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 521.489931][ T34] #1: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 521.490021][ T34] locks held by syz-executor/13044: 8, last CPU#1: [ 521.490035][ T34] #0: ffff888035752460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 521.504808][ T34] #1: ffff8880667cd080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 521.504904][ T34] #2: ffff8880295941e8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 521.505002][ T34] #3: ffffffff8fad36a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 521.505094][ T34] #4: ffff88802b67f128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 521.505172][ T34] #5: ffff88802bd27258 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 521.505273][ T34] #6: ffffffff902539e0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 521.505364][ T34] #7: ffff888079cfce70 (&dev->lock){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x11cf/0x2140 [ 521.505490][ T34] locks held by syz-executor/13047: 1, on CPU#0: [ 521.505520][ T34] #0: ffffffff902539e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 521.505601][ T34] locks held by syz.4.2222/13091: 3, last CPU#1: [ 521.505631][ T34] #0: ffffffff8ebe80b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_slow_inc+0x12/0x30 [ 521.505724][ T34] #1: ffffffff8ee3a7e0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_slow_inc_cpuslocked+0x39/0xf0 [ 521.505816][ T34] #2: ffffffff8ebff160 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 521.506049][ T34] [ 521.506055][ T34] ============================================= [ 521.506055][ T34] [ 521.506081][ T34] NMI backtrace for cpu 1 [ 521.506113][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 521.506134][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.506145][ T34] Call Trace: [ 521.506154][ T34] [ 521.506162][ T34] dump_stack_lvl+0xe8/0x150 [ 521.506183][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 521.506204][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 521.506226][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 521.506255][ T34] sys_info+0x135/0x170 [ 521.506272][ T34] watchdog+0x1058/0x10d0 [ 521.506297][ T34] ? watchdog+0x209/0x10d0 [ 521.506320][ T34] kthread+0x38b/0x480 [ 521.506338][ T34] ? __pfx_watchdog+0x10/0x10 [ 521.506354][ T34] ? __pfx_kthread+0x10/0x10 [ 521.506373][ T34] ret_from_fork+0x514/0xb70 [ 521.506394][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 521.506412][ T34] ? __switch_to+0xc78/0x1410 [ 521.506431][ T34] ? __pfx_kthread+0x10/0x10 [ 521.506450][ T34] ret_from_fork_asm+0x1a/0x30 [ 521.506482][ T34] [ 521.506545][ T34] Sending NMI from CPU 1 to CPUs 0: [ 521.506595][ C0] NMI backtrace for cpu 0 [ 521.506610][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 521.506632][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.506644][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 521.506667][ C0] Code: e8 7e 4e 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 1c c2 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a f0 76 06 cc 44 89 f9 80 e1 07 [ 521.506684][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 521.506702][ C0] RAX: 1ffffffff35ac300 RBX: 00000000000003fd RCX: 0000000000000000 [ 521.506716][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 521.506736][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 521.506749][ C0] R10: dffffc0000000000 R11: ffffffff8578b9d0 R12: dffffc0000000000 [ 521.506765][ C0] R13: 0000000000000000 R14: ffffffff9ad61f80 R15: 0000000000000000 [ 521.506779][ C0] FS: 0000000000000000(0000) GS:ffff888124cac000(0000) knlGS:0000000000000000 [ 521.506796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.506810][ C0] CR2: 000000110c478215 CR3: 00000000977ae000 CR4: 00000000003526f0 [ 521.506829][ C0] Call Trace: [ 521.506837][ C0] [ 521.506846][ C0] wait_for_lsr+0x184/0x2f0 [ 521.506868][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 521.506892][ C0] serial8250_console_write+0xaa1/0x1200 [ 521.506917][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 521.506935][ C0] ? __schedule+0x1b5d/0x5b40 [ 521.506962][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 521.506988][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 521.507010][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 521.507038][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 521.507059][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 521.507081][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 521.507099][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 521.507122][ C0] ? __kthread_parkme+0x71/0x1f0 [ 521.507140][ C0] ? __kthread_parkme+0x199/0x1f0 [ 521.507161][ C0] kthread+0x38b/0x480 [ 521.507178][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 521.507195][ C0] ? __pfx_kthread+0x10/0x10 [ 521.507211][ C0] ret_from_fork+0x514/0xb70 [ 521.507230][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 521.507247][ C0] ? __switch_to+0xc78/0x1410 [ 521.507265][ C0] ? __pfx_kthread+0x10/0x10 [ 521.507281][ C0] ret_from_fork_asm+0x1a/0x30 [ 521.507305][ C0] [ 521.520048][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 523.790040][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 523.799188][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.809275][ T34] Call Trace: [ 523.812593][ T34] [ 523.815809][ T34] vpanic+0x26f/0x710 [ 523.819818][ T34] panic+0xc5/0xd0 [ 523.823553][ T34] ? __pfx_panic+0x10/0x10 [ 523.827995][ T34] watchdog+0x10cc/0x10d0 [ 523.832337][ T34] ? watchdog+0x209/0x10d0 [ 523.836852][ T34] kthread+0x38b/0x480 [ 523.840924][ T34] ? __pfx_watchdog+0x10/0x10 [ 523.845610][ T34] ? __pfx_kthread+0x10/0x10 [ 523.850207][ T34] ret_from_fork+0x514/0xb70 [ 523.854807][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 523.859933][ T34] ? __switch_to+0xc78/0x1410 [ 523.864610][ T34] ? __pfx_kthread+0x10/0x10 [ 523.869212][ T34] ret_from_fork_asm+0x1a/0x30 [ 523.874092][ T34] [ 523.877382][ T34] Kernel Offset: disabled [ 523.881726][ T34] Rebooting in 86400 seconds..