last executing test programs: 15m57.741187481s ago: executing program 32 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xaed8e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_pwait(r4, 0x0, 0x0, 0xfffffffb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) close_range(r2, 0xffffffffffffffff, 0x0) 13m16.492706493s ago: executing program 33 (id=563): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000001}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 10m41.207090199s ago: executing program 34 (id=858): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_emit_ethernet(0x334, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 9m43.433133379s ago: executing program 35 (id=955): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m32.487965902s ago: executing program 36 (id=970): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r5 = syz_io_uring_setup(0x47ec, &(0x7f0000000400)={0x0, 0x9ac7, 0x800, 0x0, 0x366}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x6000, @fd_index=0x3, 0x1, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x1, 0xfffffffd, 0x6f, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000688600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000721f00008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_control_io(r0, 0x0, 0x0) 9m13.661649035s ago: executing program 37 (id=994): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) socket$packet(0x11, 0x3, 0x300) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) close(r0) 9m7.219698995s ago: executing program 38 (id=1001): recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b", 0x53}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m25.228557027s ago: executing program 39 (id=1886): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000540)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f0000000580)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) 2m24.461504763s ago: executing program 4 (id=2035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ef0000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m23.660685019s ago: executing program 4 (id=2037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 2m23.335666996s ago: executing program 4 (id=2039): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x115c, @loopback}, 0x10) write(r2, &(0x7f0000000300)="80000024000000010000000000000002000186a300000003000000000000000700"/44, 0x28) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000540), 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}, [@generic="0800010000000000"]}, 0x1c}}, 0x0) write(r2, &(0x7f0000000600)="15030300020100", 0x7) 2m21.276961994s ago: executing program 40 (id=1941): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r1, &(0x7f0000000470)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10\n', 0x8c) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r5, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000004000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) 2m13.896590964s ago: executing program 7 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(r0) 2m13.161755784s ago: executing program 7 (id=2063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000100005060000000000000000000000000000000000000000000000000c0003006970697030000000140012000900010069706970000000000600020000000000"], 0x40}}, 0x0) 2m12.331839481s ago: executing program 7 (id=2066): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4050}, 0x20000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000004800e1ff030000000000000002ff9d2f05d5c7df43b6e8a049812b9ebd0548ca3fc1b3f21f913dad9742be58a8fb2519af7d76a585d2529acc5d6d821dbb88b011ada712c84c29b492c73abf7fef07537da2c8e3"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc0d0) 2m12.094056395s ago: executing program 7 (id=2067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x1000, 0x4) r1 = dup(r0) close(r0) write(r1, &(0x7f0000001000)='\x00'/100000, 0x186a0) (async) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) close(r1) 2m11.612306464s ago: executing program 7 (id=2071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x5, 0x1, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2m10.889537694s ago: executing program 7 (id=2074): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r2, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) 2m8.007226077s ago: executing program 41 (id=2039): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x115c, @loopback}, 0x10) write(r2, &(0x7f0000000300)="80000024000000010000000000000002000186a300000003000000000000000700"/44, 0x28) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000540), 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}, [@generic="0800010000000000"]}, 0x1c}}, 0x0) write(r2, &(0x7f0000000600)="15030300020100", 0x7) 1m55.656510186s ago: executing program 42 (id=2074): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r2, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) 1m46.299868854s ago: executing program 2 (id=2148): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='lo\x00', 0x3) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) sendto$llc(r0, &(0x7f0000000300)="12345678", 0x8, 0x0, 0x0, 0x0) 1m45.88679405s ago: executing program 2 (id=2150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/syz_tun/route_localnet\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/conf/syz_tun/accept_local\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\n', 0x2) close(r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setstatus(r5, 0x4, 0x800) bind(r5, &(0x7f0000000380)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r5, 0x5) bind(0xffffffffffffffff, &(0x7f00000003c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) (async) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "1122334400000000000000000a00004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100001400"/76}}}}, 0x0) 1m45.494708334s ago: executing program 2 (id=2153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3e8}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_CARRIER={0x5}]}, 0x3c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000400)={0x11, 0x3, 0x2}, 0x14) sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000440)={0x11, 0x0, 0x2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 1m44.609096111s ago: executing program 2 (id=2157): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000) 1m44.143972835s ago: executing program 2 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x601, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x11) sendto(r2, &(0x7f0000000300)="0123456789", 0xa, 0x0, &(0x7f0000000400)=@in={0x2, 0x1234, @loopback}, 0x10) 1m43.598424051s ago: executing program 2 (id=2164): unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4001, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 1m39.124371856s ago: executing program 5 (id=2180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="00112233", 0x4, 0x4000, 0x0, 0x0) 1m38.6566456s ago: executing program 5 (id=2183): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c) syz_emit_ethernet(0x60, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x40, @remote, @local, {[], {0x1234, 0x4e20, 0x10, 0x0, @opaque="0000000011223344"}}}}}}, 0x0) 1m38.108388029s ago: executing program 5 (id=2186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10 1\n\x00', 0x5) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) 1m37.520384158s ago: executing program 5 (id=2188): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) 1m35.953907123s ago: executing program 5 (id=2193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160aef070000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000001800048014000180090001006d6173710000000004000280140000001100010000000000000000000000000a"], 0x68}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x115c, @loopback}, 0x10) connect(r1, &(0x7f00000000c0)=@in={0x2, 0x115c, @loopback}, 0x10) sendto(r1, &(0x7f0000000100)='hello', 0x5, 0x0, 0x0, 0x0) 1m35.398984804s ago: executing program 5 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var/lib\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/lib/nfs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/1/root/var/lib/nfs/v4recovery\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n\x00', 0x2) 1m30.046612843s ago: executing program 3 (id=2212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r1, 0x5) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) accept$phonet_pipe(r1, 0x0, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0xc0) 1m29.296811171s ago: executing program 3 (id=2214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x13, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xd}}], {0x14}}, 0x3c}}, 0x0) 1m28.81362774s ago: executing program 3 (id=2215): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c000380680000800800034000000002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 1m27.926979555s ago: executing program 43 (id=2164): unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4001, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 1m27.771134029s ago: executing program 3 (id=2217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'connbytes\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x16, 0x3, "0000000000000000e8030000000000000000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="1234", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) 1m27.223104581s ago: executing program 3 (id=2219): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10 1\n\x00', 0x5) nanosleep(&(0x7f0000000140)={0x0, 0x5f5e100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1m23.237098683s ago: executing program 3 (id=2222): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 +4\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/1/root/var/run\x00', 0x1ff) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1\x00', 0x1) r3 = socket$inet(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10) listen(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='6\n\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1\n\x00', 0x2) 1m19.789481542s ago: executing program 44 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var/lib\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/lib/nfs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/1/root/var/lib/nfs/v4recovery\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n\x00', 0x2) 1m11.131008333s ago: executing program 8 (id=2235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000106000000000000000023000000020000000500020004000000"], 0x20}}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000300), 0x10) (async) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000f5040000000700004101000000"], 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) sendto$phonet(r3, &(0x7f0000000600)='1234', 0x4, 0x80, &(0x7f0000000700), 0x10) 1m9.919198596s ago: executing program 8 (id=2239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x13, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xd}}], {0x14}}, 0x3c}}, 0x0) 1m9.645606233s ago: executing program 8 (id=2240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 1m8.941554271s ago: executing program 8 (id=2243): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) 1m8.702789254s ago: executing program 8 (id=2244): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x58}, 0x40000100) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 1m7.952803284s ago: executing program 45 (id=2222): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 +4\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/1/root/var/run\x00', 0x1ff) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1\x00', 0x1) r3 = socket$inet(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10) listen(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='6\n\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1\n\x00', 0x2) 1m7.44828777s ago: executing program 8 (id=2246): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/lib\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/1/root/var/lib/nfs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/1/root/var/lib/nfs/rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc/1/root/var/lib/nfs/rpc_pipefs\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./nfsd\x00', &(0x7f0000000480)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n\x00', 0x2) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000640)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000680)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f00000006c0)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) 52.577761291s ago: executing program 1 (id=2260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) sendto$inet(r1, &(0x7f0000000200)="0008000000000102", 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) recvfrom$inet(r2, &(0x7f0000000300), 0x2, 0x0, 0x0, 0x0) 51.696114608s ago: executing program 46 (id=2246): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/lib\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/1/root/var/lib/nfs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/1/root/var/lib/nfs/rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc/1/root/var/lib/nfs/rpc_pipefs\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./nfsd\x00', &(0x7f0000000480)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n\x00', 0x2) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000640)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000680)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f00000006c0)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) 51.681588712s ago: executing program 1 (id=2263): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp\n\x00', 0x4) write(0xffffffffffffffff, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) 50.984582327s ago: executing program 1 (id=2265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'bridge0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @bridge={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1002}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x0, 0x0, r1}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000100), 0xc, &(0x7f0000000840)={&(0x7f0000000880)=@bridge_setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_PHYS_PORT_ID={0x0, 0x800c, "050008000100000005002700010000000500280001000000"}]}, 0x3c}}, 0x0) write$tun(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="00112233445500aabbccddee08004500002800010000401174c0010101010101010212345678001400006162636465666768"], 0x32) 49.428550171s ago: executing program 1 (id=2267): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4050}, 0x20000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) sendmsg$nl_generic(r0, 0x0, 0xc0d0) 49.000991085s ago: executing program 1 (id=2269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x13, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xd}}], {0x14}}, 0x3c}}, 0x0) 48.614635196s ago: executing program 1 (id=2270): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000204), 0x4) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)=""/1, 0x1}], 0x1, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x20}, {&(0x7f0000000400)=""/1, 0x1}, &(0x7f0000000500)=[{&(0x7f0000000600)=""/1, 0x1}], 0x1}}], 0x48}, 0x0) 39.704647146s ago: executing program 0 (id=2285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x1, 0x1000001}}}, 0x18}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e00000000000000"], 0x38}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000400)={0x1}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b5000280000000000000000010000010000126700000000000000000000000011223344112233445566000000000000"}}}, 0x0) 38.524149606s ago: executing program 0 (id=2287): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x0, 0x278, 0x278, 0x278, 0x278, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x40}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='syz_tun\x00'}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000280)={'syz_tun\x00', @ifru_mtu=0x1f4}) syz_emit_ethernet(0x3de, &(0x7f0000000400)=ANY=[@ANYBLOB="00112233445566778899aabb0800450003d4123460004001000001020304080808080800000011220001"], 0x0) syz_emit_ethernet(0x42e, &(0x7f0000000800)=ANY=[@ANYBLOB="00112233445566778899aabb08004500042412344078400100000102030408080808"], 0x0) 37.839619846s ago: executing program 0 (id=2291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0\x00', 0x1}, 0x14) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@remote, 0x5000, 0x0, 0x1}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x1, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x3c}}, 0x0) 36.555634802s ago: executing program 0 (id=2297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x0, 0x600, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'bridge0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x1, @bridge={{0x0, 0x0}, {0x0, 0x0}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000280), 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x0, 0x0, 0x600, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'veth0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x1, @veth={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x1, @val=@VETH_INFO_PEER={0x0, 0x0}}}}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000003c0), 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x0, 0x0, r2}]}, 0x28}}, 0x0) 36.171980622s ago: executing program 0 (id=2298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30110000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a30000000000900010073797a30"]}}, 0x0) 35.821028939s ago: executing program 0 (id=2300): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) nanosleep(&(0x7f0000000400)={0x0, 0xbebc200}, 0x0) r2 = socket(0x15, 0x5, 0x0) bind(r2, &(0x7f0000000100)=@in={0x2, 0x48d2, @loopback}, 0x10) connect(r2, &(0x7f0000000200)=@in={0x2, 0x48d2, @loopback}, 0x10) sendto(r2, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000200)=@in={0x2, 0x48d2, @loopback}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 33.430157104s ago: executing program 47 (id=2270): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000204), 0x4) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)=""/1, 0x1}], 0x1, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x20}, {&(0x7f0000000400)=""/1, 0x1}, &(0x7f0000000500)=[{&(0x7f0000000600)=""/1, 0x1}], 0x1}}], 0x48}, 0x0) 30.623249509s ago: executing program 4 (id=2245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x400, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x400, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000400)=0x1000, 0x4) sendto$inet6(r1, &(0x7f0000001000)='\x00'/1000000, 0xf4240, 0x40, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) shutdown(r1, 0x2) close(r1) 29.791999121s ago: executing program 4 (id=2318): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) 29.284453627s ago: executing program 4 (id=2321): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1 2\n', 0x4) (async) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0x605, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x605, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delqdisc={0x24, 0x25, 0x5, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 26.931607565s ago: executing program 6 (id=2331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) 26.581229745s ago: executing program 6 (id=2333): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendto$rxrpc(r1, &(0x7f0000000200)="12345678", 0x8, 0x0, 0x0, 0x0) 26.313626784s ago: executing program 6 (id=2335): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12}, 0x10) listen(r0, 0xa) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x1) accept4$llc(r0, 0x0, 0x0, 0x800) 25.204445828s ago: executing program 6 (id=2336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ef0000008500000086000000bf91000000000000b7020000020000008500000084000000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 24.878818374s ago: executing program 6 (id=2338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x13, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xd}}], {0x14}}, 0x3c}}, 0x0) 24.51992323s ago: executing program 6 (id=2340): unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4001, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 20.365593903s ago: executing program 48 (id=2300): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) nanosleep(&(0x7f0000000400)={0x0, 0xbebc200}, 0x0) r2 = socket(0x15, 0x5, 0x0) bind(r2, &(0x7f0000000100)=@in={0x2, 0x48d2, @loopback}, 0x10) connect(r2, &(0x7f0000000200)=@in={0x2, 0x48d2, @loopback}, 0x10) sendto(r2, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000200)=@in={0x2, 0x48d2, @loopback}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 13.896501049s ago: executing program 49 (id=2321): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1 2\n', 0x4) (async) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0x605, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x605, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delqdisc={0x24, 0x25, 0x5, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 8.74352984s ago: executing program 9 (id=2354): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) 8.708506694s ago: executing program 50 (id=2340): unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4001, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 8.391095402s ago: executing program 9 (id=2356): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000d0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000110)='10 1\n', 0x5) close(r1) 3.321999644s ago: executing program 9 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000010), 0xc, &(0x7f0000000210)={&(0x7f0000000220)=@newqdisc={0x30, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000010), 0xc, &(0x7f0000000310)={&(0x7f0000000320)=@newtfilter={0x90, 0x44, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}, {0x1, 0x300}}, [@filter_kind_options=@f_matchall={{0x0, 0x0}, {0x0, 0x0, [@TCA_MATCHALL_ACT={0x0, 0x0, [@m_mpls={0x0, 0x0, 0x0, 0x0, {{0x0, 0x0}, {0x0, 0x0, 0x0, 0x1, [@TCA_MPLS_PARMS={0x0, 0x0, {{}, 0x3}}, @TCA_MPLS_LABEL={0x0, 0x0, 0x64}]}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}}}]}]}}]}, 0x100}}, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0011223344558847000641404500001400000000400100000a0000010a000002"], 0x26) 1.913395603s ago: executing program 9 (id=2358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 1.412473911s ago: executing program 9 (id=2359): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='proto\x00', &(0x7f0000000700)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='port\x00', &(0x7f0000000b00)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001000)='mountport\x00', &(0x7f0000001100)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001200)='mountproto\x00', &(0x7f0000001300)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) read(r2, &(0x7f0000002000), 0x80) write(r2, &(0x7f0000002008)="0000000100"/20, 0x14) write(r2, &(0x7f0000002000)="80000018", 0x4) write(r2, &(0x7f0000002000), 0x1c) shutdown(r2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) r3 = fsmount(r1, 0x0, 0x0) move_mount(r3, &(0x7f0000000100)='\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 0s ago: executing program 9 (id=2360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f0000000700)={&(0x7f0000000800)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a00)={&(0x7f0000000080), 0xc, &(0x7f0000000700)={&(0x7f0000000c00)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001000)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000000200)={0x2c, 0x70, 0x605, 0x1, 0x0, "", [@generic="1400018008000100000001000500030003000000"]}, 0x2c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 914400][T13359] netlink: 244 bytes leftover after parsing attributes in process `syz.9.1460'. [ 867.365022][T13377] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 867.374616][T13377] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 867.384398][T13377] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 867.541784][T11142] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 868.560930][T11142] usb 8-1: device descriptor read/all, error -71 [ 868.786899][T13393] loop0: detected capacity change from 0 to 128 [ 868.879659][T13393] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 868.953579][T13393] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.247744][T10897] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 869.377703][T13404] loop4: detected capacity change from 0 to 512 [ 869.395723][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.402329][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.478752][T13404] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 869.579406][T13404] System zones: 0-2, 18-18, 34-35 [ 869.642704][T13404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.705964][T13404] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.072694][T10592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.078796][T13451] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 874.088712][T13451] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 874.101478][T13451] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 874.459247][T13470] loop4: detected capacity change from 0 to 256 [ 874.468259][T13470] exfat: Deprecated parameter 'utf8' [ 874.582221][T13470] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 875.111621][T13473] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1483'. [ 875.337553][T13473] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 875.421532][T13475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1483'. [ 875.613054][T13470] veth0_to_bond: mtu less than device minimum [ 875.658970][T13473] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 875.775820][T13480] loop8: detected capacity change from 0 to 128 [ 875.886532][T13480] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 875.951871][T12778] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 875.977981][T13480] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.112626][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 876.142940][T12778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.190193][T10490] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 876.191032][T12778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 876.264084][T12778] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 876.307579][T12778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.347963][T12778] usb 1-1: Product: syz [ 876.371020][T12778] usb 1-1: Manufacturer: syz [ 876.397014][T12778] usb 1-1: SerialNumber: syz [ 876.480111][T12778] usb 1-1: 0:2 : does not exist [ 876.674625][T12778] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 876.724409][T11263] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 876.845888][T12778] usb 1-1: USB disconnect, device number 26 [ 876.923395][T11263] usb 9-1: Using ep0 maxpacket: 8 [ 876.951784][T11263] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 876.987991][T11263] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.016656][ T7429] udevd[7429]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 877.038083][T11263] pvrusb2: Hardware description: Terratec Grabster AV400 [ 877.075941][T11263] pvrusb2: ********** [ 877.106316][T11263] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 877.137202][T11263] pvrusb2: Important functionality might not be entirely working. [ 877.157585][T11263] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 877.205063][T11263] pvrusb2: ********** [ 877.246039][ T2363] pvrusb2: Invalid write control endpoint [ 877.530790][T12778] usb 9-1: USB disconnect, device number 16 [ 880.019494][ T2363] pvrusb2: Invalid write control endpoint [ 880.032223][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 880.068035][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 880.115866][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 880.159901][ T2363] pvrusb2: Device being rendered inoperable [ 880.181385][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 880.214510][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 880.245731][ T2363] pvrusb2: Attached sub-driver cx25840 [ 880.280242][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 880.334595][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 880.586070][T13539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.802707][T11263] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 881.630959][T11263] usb 8-1: unable to get BOS descriptor or descriptor too short [ 881.811988][T11263] usb 8-1: config 8 has an invalid interface number: 59 but max is 3 [ 881.828876][T11263] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 881.894625][T11263] usb 8-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 881.939381][T11263] usb 8-1: config 8 has no interface number 0 [ 881.977489][T11263] usb 8-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 882.023666][T11263] usb 8-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid maxpacket 64, setting to 0 [ 882.034863][T11263] usb 8-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 882.120934][T11263] usb 8-1: config 8 interface 59 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 882.174368][T11263] usb 8-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 882.266973][T11263] usb 8-1: config 8 interface 59 has no altsetting 0 [ 882.281438][T11263] usb 8-1: string descriptor 0 read error: -22 [ 882.298453][T11263] usb 8-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 882.320657][T11263] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.603691][T11263] ttusbir 8-1:8.59: cannot find expected altsetting [ 882.660506][T13565] loop4: detected capacity change from 0 to 256 [ 882.690694][T13565] exfat: Deprecated parameter 'utf8' [ 882.741920][T13565] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 882.862129][T12778] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 882.952477][T13565] veth0_to_bond: mtu less than device minimum [ 882.977799][ T5917] usb 8-1: USB disconnect, device number 12 [ 882.994265][T13565] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1499'. [ 883.065248][T13565] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 883.116889][T13575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1499'. [ 883.456282][T12778] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 883.958473][T12778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.967843][T12778] usb 1-1: Product: syz [ 883.972123][T12778] usb 1-1: Manufacturer: syz [ 883.978329][T12778] usb 1-1: SerialNumber: syz [ 884.720618][ T5896] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 885.001715][T12778] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 885.202351][T12778] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 885.231025][T12778] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 885.262444][T12778] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 885.280715][T12778] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 885.313781][T12778] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 885.354081][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 885.416225][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.479202][ T5896] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 885.532420][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.582188][ T5896] usb 5-1: config 0 descriptor?? [ 886.620838][T11142] usb 1-1: USB disconnect, device number 27 [ 886.778674][ T5896] usb 5-1: string descriptor 0 read error: -71 [ 886.844918][ T5896] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 886.892458][ T5896] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 886.953331][ T5896] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 887.024331][ T5896] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 887.128607][ T5896] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 887.216703][ T5896] usb 5-1: USB disconnect, device number 21 [ 887.402888][ T5757] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 887.561766][ T5917] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 887.601928][ T5757] usb 6-1: Using ep0 maxpacket: 16 [ 887.971814][ T5917] usb 10-1: Using ep0 maxpacket: 16 [ 888.007205][ T5757] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 888.023329][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.057481][ T5757] usb 6-1: Product: syz [ 888.063410][ T5917] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.066965][ T5757] usb 6-1: Manufacturer: syz [ 888.091128][ T5757] usb 6-1: SerialNumber: syz [ 888.100692][ T5757] usb 6-1: config 0 descriptor?? [ 888.118235][ T5917] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 888.209516][ T5757] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 889.192795][ T5917] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 889.196020][ T5757] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 889.202142][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.202175][ T5917] usb 10-1: Product: syz [ 889.202203][ T5917] usb 10-1: Manufacturer: syz [ 889.202222][ T5917] usb 10-1: SerialNumber: syz [ 889.217516][ T5917] usb 10-1: 0:2 : does not exist [ 890.933320][ T5757] usb 6-1: USB disconnect, device number 14 [ 890.973174][ T5917] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 892.225003][ T5757] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 892.523900][ T5757] usb 5-1: unable to get BOS descriptor or descriptor too short [ 892.559413][ T5757] usb 5-1: config 8 has an invalid interface number: 59 but max is 3 [ 892.575974][ T5757] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 892.587384][ T5757] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 892.596577][ T5757] usb 5-1: config 8 has no interface number 0 [ 892.619688][ T5757] usb 5-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 892.723329][ T5917] usb 10-1: USB disconnect, device number 17 [ 893.553196][ T5757] usb 5-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid maxpacket 64, setting to 0 [ 893.641954][ T5757] usb 5-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 893.713935][ T5757] usb 5-1: config 8 interface 59 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 893.775167][ T5757] usb 5-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 893.836380][ T5757] usb 5-1: config 8 interface 59 has no altsetting 0 [ 893.870801][ T5757] usb 5-1: string descriptor 0 read error: -22 [ 893.892468][ T5757] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 893.922926][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.988779][ T5757] usb 5-1: can't set config #8, error -71 [ 894.024802][ T5757] usb 5-1: USB disconnect, device number 22 [ 894.072198][T13702] loop9: detected capacity change from 0 to 512 [ 894.080386][T13702] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 894.098094][T13702] EXT4-fs (loop9): 1 truncate cleaned up [ 894.106120][T13702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.270547][T10446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.442162][ T5743] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 894.469198][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 894.487497][T10339] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 894.849454][T10339] usb 9-1: Using ep0 maxpacket: 16 [ 895.076112][T10339] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.159501][T10339] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.240204][T10339] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 895.265837][T10339] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.280548][T10339] usb 9-1: Product: syz [ 895.285208][T10339] usb 9-1: Manufacturer: syz [ 895.289976][T10339] usb 9-1: SerialNumber: syz [ 895.348242][T10339] usb 9-1: 0:2 : does not exist [ 895.465673][ T5743] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 895.507294][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.679032][T13724] ISOFS: Unable to identify CD-ROM format. [ 896.054395][ T5743] usb 1-1: Product: syz [ 896.058637][ T5743] usb 1-1: Manufacturer: syz [ 896.065629][ T5743] usb 1-1: SerialNumber: syz [ 896.207862][T10339] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 897.320725][T13733] loop7: detected capacity change from 0 to 512 [ 897.370151][T10339] usb 9-1: USB disconnect, device number 17 [ 897.480606][T13733] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 897.566396][ T5743] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 897.582690][T13733] System zones: 0-2, 18-18, 34-35 [ 897.591775][ T5743] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 897.618510][ T5743] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 897.669628][T13733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.736709][T13733] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.887785][ T5743] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 898.679589][ T5743] usb 1-1: USB disconnect, device number 28 [ 898.964896][ T7429] udevd[7429]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 900.387971][T13771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 900.511562][T13763] vlan2: entered allmulticast mode [ 900.516796][T13763] bond0: entered allmulticast mode [ 900.524353][T13763] bond_slave_0: entered allmulticast mode [ 900.530094][T13763] bond_slave_1: entered allmulticast mode [ 900.752821][T10857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.058496][T13789] loop4: detected capacity change from 0 to 512 [ 903.159473][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 903.200377][T13789] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 903.273724][T13789] System zones: 0-2, 18-18, 34-35 [ 903.369343][T13789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.070697][T13789] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.319449][T10592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.631512][T13831] vlan2: entered allmulticast mode [ 906.639168][T13831] bond0: entered allmulticast mode [ 906.653111][T13831] bond_slave_0: entered allmulticast mode [ 906.682188][T13831] bond_slave_1: entered allmulticast mode [ 906.721757][ T5757] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 906.892021][T11142] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 906.924094][ T5757] usb 8-1: unable to get BOS descriptor or descriptor too short [ 906.944799][ T5757] usb 8-1: config 8 has an invalid interface number: 59 but max is 3 [ 906.963467][ T5757] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 906.997683][ T5757] usb 8-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 907.023340][ T5757] usb 8-1: config 8 has no interface number 0 [ 907.037351][ T5757] usb 8-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 907.065459][ T5757] usb 8-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid maxpacket 64, setting to 0 [ 907.081778][T11142] usb 5-1: Using ep0 maxpacket: 16 [ 907.102625][T11142] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 907.107459][ T5757] usb 8-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 907.142689][T11142] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.183800][T11142] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 907.214490][T11142] usb 5-1: config 1 has no interface number 1 [ 907.234456][ T5757] usb 8-1: config 8 interface 59 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 907.248987][T11142] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.293008][T11142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.328427][ T5757] usb 8-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 907.331519][T11142] usb 5-1: Product: syz [ 907.394706][T11142] usb 5-1: Manufacturer: syz [ 907.404704][ T5757] usb 8-1: config 8 interface 59 has no altsetting 0 [ 907.414005][T11142] usb 5-1: SerialNumber: syz [ 907.454233][ T5757] usb 8-1: string descriptor 0 read error: -22 [ 907.456666][T11142] usb 5-1: 0:2 : does not exist [ 907.490961][ T5757] usb 8-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 907.502368][T11142] usb 5-1: unit 6 not found! [ 907.537590][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.067590][ T5757] ttusbir 8-1:8.59: cannot find expected altsetting [ 908.895873][T11142] usb 5-1: USB disconnect, device number 23 [ 909.008905][ T5896] usb 8-1: USB disconnect, device number 13 [ 909.041303][T13730] udevd[13730]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 910.701477][T13878] loop8: detected capacity change from 0 to 512 [ 910.766037][T13878] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 910.841915][T13878] System zones: 0-2, 18-18, 34-35 [ 911.363797][T13878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.484052][T13878] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.981075][T10490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.122133][ T5896] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 912.296659][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 912.317109][ T5896] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 912.348070][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.407799][ T5896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 912.444705][ T5896] pvrusb2: ********** [ 912.456960][ T5896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 912.490516][ T5896] pvrusb2: Important functionality might not be entirely working. [ 912.520127][ T5896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 912.569401][ T5896] pvrusb2: ********** [ 912.627567][ T2363] pvrusb2: Invalid write control endpoint [ 913.557311][T10339] usb 5-1: USB disconnect, device number 24 [ 913.703002][ T2363] pvrusb2: Invalid write control endpoint [ 913.904492][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 914.615246][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 914.622990][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 914.633044][ T2363] pvrusb2: Device being rendered inoperable [ 914.640094][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 914.647334][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 914.762413][ T2363] pvrusb2: Attached sub-driver cx25840 [ 914.823372][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 915.064589][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 917.224858][T13941] fuse: Unknown parameter 'user_id00000000000000000000' [ 918.490156][T13941] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1589'. [ 920.850182][T13965] FAT-fs (nbd5): unable to read boot sector [ 921.209894][T13968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 923.959251][T13982] loop0: detected capacity change from 0 to 40427 [ 923.980170][T13982] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 923.988241][T13982] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 923.999117][T13982] F2FS-fs (loop0): invalid crc value [ 924.183871][T13982] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 924.227544][T13982] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 924.234774][T13982] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 924.586455][T13984] loop5: detected capacity change from 0 to 512 [ 924.733097][T12778] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 924.868966][T13984] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 924.911171][T13984] System zones: 0-2, 18-18, 34-35 [ 924.930089][T12778] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 924.952196][T12778] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.961793][T11263] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 924.962102][T12778] usb 8-1: Product: syz [ 924.974443][T12778] usb 8-1: Manufacturer: syz [ 924.979137][T12778] usb 8-1: SerialNumber: syz [ 924.989893][T13984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.009016][T12778] usb 8-1: config 0 descriptor?? [ 925.016465][T13984] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 925.154463][T12778] ch341 8-1:0.0: ch341-uart converter detected [ 925.437470][T14011] gadgetfs: bound to dummy_udc driver [ 925.579735][T11263] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 926.043521][T14012] loop9: detected capacity change from 0 to 512 [ 926.129459][T14012] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 926.145222][T11263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.155011][T11263] usb 5-1: Product: syz [ 926.159512][T11263] usb 5-1: Manufacturer: syz [ 926.171726][T11263] usb 5-1: SerialNumber: syz [ 926.177312][T14012] System zones: 0-2, 18-18, 34-35 [ 926.207502][T10846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.228476][T14012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.259382][T14012] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 926.432265][T12778] ch341-uart ttyUSB0: break control not supported, using simulated break [ 926.522965][T12778] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 926.789753][T11263] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 926.802997][T12778] usb 8-1: USB disconnect, device number 14 [ 926.863738][T11263] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 926.885965][T12778] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 926.898462][T12778] ch341 8-1:0.0: device disconnected [ 926.976168][T11263] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 927.075995][T11263] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 927.257351][T11263] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 927.274908][T10446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.537236][T11263] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 929.427159][ T5896] usb 5-1: USB disconnect, device number 25 [ 929.886827][T14052] 9p: Bad value for 'rfdno' [ 930.708858][T14060] loop7: detected capacity change from 0 to 40427 [ 930.784936][ T5896] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 930.834721][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.841403][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.097389][T14060] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 931.105311][T14060] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 931.118711][T14060] F2FS-fs (loop7): invalid crc value [ 931.219055][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 931.347180][T14060] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 931.514345][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.531376][T14060] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 931.542188][T14060] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 932.162764][ T5896] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 932.188321][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.211049][ T5896] usb 6-1: config 0 descriptor?? [ 932.591864][T12778] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 932.711991][T10339] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 932.764419][T12778] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 932.800842][T12778] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.821175][T12778] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 932.834523][T12778] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.850745][T12778] usb 9-1: config 0 descriptor?? [ 933.105281][T10339] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 933.230463][ T5896] usb 6-1: string descriptor 0 read error: -71 [ 933.250252][T10339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.616542][T10339] usb 5-1: Product: syz [ 933.674480][ T5896] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 933.699053][T10339] usb 5-1: Manufacturer: syz [ 933.752519][T12778] usbhid 9-1:0.0: can't add hid device: -32 [ 933.773393][T10339] usb 5-1: SerialNumber: syz [ 933.790756][ T5896] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 933.809557][T12778] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 933.856155][ T5896] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 933.876873][T12778] usb 9-1: USB disconnect, device number 18 [ 933.902452][ T5896] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 933.945142][ T5896] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 934.043690][ T5896] usb 6-1: USB disconnect, device number 15 [ 934.091783][ T5917] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 934.277261][T10339] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 934.325491][ T5917] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 934.329431][T10339] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 934.405199][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.449704][ T5917] usb 1-1: Product: syz [ 934.487810][ T5917] usb 1-1: Manufacturer: syz [ 934.535260][ T5917] usb 1-1: SerialNumber: syz [ 934.598450][ T5917] usb 1-1: config 0 descriptor?? [ 934.646754][ T5917] ch341 1-1:0.0: ch341-uart converter detected [ 935.745808][T10339] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 935.797201][ T5917] ch341-uart ttyUSB0: break control not supported, using simulated break [ 935.936628][T10339] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 935.962774][ T5917] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 935.972872][ T5917] usb 1-1: USB disconnect, device number 29 [ 935.985674][ T5917] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 935.995457][ T5917] ch341 1-1:0.0: device disconnected [ 936.157709][T10339] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 936.211556][T10339] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 936.296029][T10339] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 936.385425][T10339] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 936.742831][T14125] 9p: Bad value for 'rfdno' [ 937.063119][T10339] usb 5-1: USB disconnect, device number 26 [ 937.191758][ T29] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 937.602283][T14130] loop4: detected capacity change from 0 to 40427 [ 937.620609][T14130] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 937.628440][T14130] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 937.642166][T14130] F2FS-fs (loop4): invalid crc value [ 938.432702][ T29] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 938.447529][T14130] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 938.491971][T14130] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 938.499052][T14130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 938.776110][ T29] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 938.793160][ T29] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 938.802899][ T29] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 940.502309][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 940.607282][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 940.742986][ T29] usb 10-1: string descriptor 0 read error: -71 [ 940.836755][ T29] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 940.886975][ T29] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 940.902363][T11263] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 940.963425][ T29] usb 10-1: can't set config #1, error -71 [ 940.970217][T14159] loop0: detected capacity change from 0 to 512 [ 941.048338][T14159] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 941.048633][ T29] usb 10-1: USB disconnect, device number 18 [ 941.080897][T14159] System zones: 0-2, 18-18, 34-35 [ 941.116475][T11263] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 941.142911][T14159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.199561][T11263] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.226496][T14166] loop9: detected capacity change from 0 to 256 [ 941.245360][T14159] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.260504][T11263] usb 8-1: Product: syz [ 941.277018][T14166] exfat: Deprecated parameter 'utf8' [ 941.296855][T11263] usb 8-1: Manufacturer: syz [ 941.324599][T11263] usb 8-1: SerialNumber: syz [ 941.360824][T14166] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 942.364673][T14166] veth0_to_bond: mtu less than device minimum [ 942.421150][T14166] netlink: 412 bytes leftover after parsing attributes in process `syz.9.1640'. [ 942.476026][T14166] netlink: 'syz.9.1640': attribute type 1 has an invalid length. [ 942.560777][T14173] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1640'. [ 942.582143][T11263] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 942.667263][T11263] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 942.759028][T10897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.369329][T14188] loop9: detected capacity change from 0 to 40427 [ 944.415217][T14188] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 944.423236][T14188] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 944.434032][T14188] F2FS-fs (loop9): invalid crc value [ 944.648848][T14194] loop0: detected capacity change from 0 to 32768 [ 944.659338][T14194] btrfs: Deprecated parameter 'usebackuproot' [ 944.665518][T14194] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 944.677047][T14194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1647 (14194) [ 944.774210][T11263] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 944.793379][T11263] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 944.818216][T14188] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 944.842042][T14188] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 944.849165][T14188] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 944.868482][T11263] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 944.882790][T14194] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 944.893356][T14194] BTRFS info (device loop0): using crc32c checksum algorithm [ 944.942472][T11263] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 945.188605][T11263] usb 8-1: USB disconnect, device number 15 [ 945.199804][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 945.345951][T14194] BTRFS error (device loop0): failed to load root extent [ 945.353167][T14194] BTRFS warning (device loop0): try to load backup roots slot 1 [ 945.361431][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 945.452800][T14194] BTRFS warning (device loop0): couldn't read tree root [ 945.459875][T14194] BTRFS warning (device loop0): try to load backup roots slot 2 [ 945.468524][ T1119] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 945.531586][T14194] BTRFS warning (device loop0): couldn't read tree root [ 945.540488][T14194] BTRFS warning (device loop0): try to load backup roots slot 3 [ 945.572799][T14194] BTRFS info (device loop0): rebuilding free space tree [ 945.650572][T14194] BTRFS info (device loop0): checking UUID tree [ 945.664359][T14194] BTRFS info (device loop0): enabling ssd optimizations [ 945.671374][T14194] BTRFS info (device loop0): turning on async discard [ 945.681113][T14194] BTRFS info (device loop0): enabling free space tree [ 945.688079][T14194] BTRFS info (device loop0): force clearing of disk cache [ 945.695340][T14194] BTRFS info (device loop0): enabling auto defrag [ 945.701894][T14194] BTRFS info (device loop0): trying to use backup root at mount time [ 945.709990][T14194] BTRFS info (device loop0): use zstd compression, level 3 [ 947.310663][T14240] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1648'. [ 947.866033][T10897] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 948.222494][T14250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.243762][T14267] loop7: detected capacity change from 0 to 40427 [ 949.252888][ T29] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 949.444491][T14267] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 949.452346][T14267] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 949.491237][T14267] F2FS-fs (loop7): invalid crc value [ 949.618900][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 949.844069][ T29] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.900563][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 949.969350][T14267] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 949.995698][ T29] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 949.998268][T14267] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 950.012008][T14267] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 950.098270][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.148173][ T29] usb 1-1: config 0 descriptor?? [ 951.329569][ T29] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 951.461811][ T29] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 951.481812][ T29] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 951.509857][ T29] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 951.599053][ T29] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 952.650925][ T29] usb 1-1: USB disconnect, device number 30 [ 953.159892][T14294] loop4: detected capacity change from 0 to 40427 [ 953.176071][T14294] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 953.183873][T14294] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 953.193778][T14294] F2FS-fs (loop4): invalid crc value [ 953.265771][T14294] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 953.294433][T14294] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 953.301520][T14294] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 953.640404][T14302] overlayfs: failed to resolve './bus': -2 [ 954.369115][T14290] fido_id[14290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 959.659064][T11263] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 960.139207][T11263] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 960.359461][T11263] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 960.499994][T11263] usb 9-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 960.607975][T11263] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 960.707427][T11263] usb 9-1: config 220 has no interface number 2 [ 960.853787][T11263] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 960.914890][T11263] usb 9-1: config 220 interface 0 has no altsetting 0 [ 960.948201][T11263] usb 9-1: config 220 interface 76 has no altsetting 0 [ 961.832913][T11263] usb 9-1: config 220 interface 1 has no altsetting 0 [ 961.997471][T11263] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 962.006889][T11263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.016460][T11263] usb 9-1: Product: syz [ 962.021057][T11263] usb 9-1: Manufacturer: syz [ 962.025814][T11263] usb 9-1: SerialNumber: syz [ 962.898415][T14361] netlink: 244 bytes leftover after parsing attributes in process `syz.9.1675'. [ 964.541831][T11263] usb 9-1: can't set config #220, error -71 [ 964.590098][T11263] usb 9-1: USB disconnect, device number 19 [ 965.005533][T14376] netlink: 244 bytes leftover after parsing attributes in process `syz.8.1678'. [ 965.040547][ T29] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 965.324130][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 965.419159][ T29] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 965.531865][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.080162][ T29] pvrusb2: Hardware description: Terratec Grabster AV400 [ 966.249585][ T29] pvrusb2: ********** [ 966.357853][ T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 966.608482][ T29] pvrusb2: Important functionality might not be entirely working. [ 966.802988][ T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 967.043688][ T29] pvrusb2: ********** [ 967.093681][ T2363] pvrusb2: Invalid write control endpoint [ 967.183077][T14385] loop5: detected capacity change from 0 to 256 [ 967.199019][T14385] exfat: Deprecated parameter 'utf8' [ 967.281007][T14385] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 967.328608][T11142] usb 5-1: USB disconnect, device number 27 [ 967.383136][T14385] veth0_to_bond: mtu less than device minimum [ 967.399183][T14385] netlink: 'syz.5.1680': attribute type 1 has an invalid length. [ 967.410750][T14385] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1680'. [ 967.555811][ T2363] pvrusb2: Invalid write control endpoint [ 967.585853][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 967.944360][T14395] loop8: detected capacity change from 0 to 40427 [ 967.956911][T14395] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 967.964790][T14395] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 967.980309][T14395] F2FS-fs (loop8): invalid crc value [ 967.996469][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 968.061437][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 968.074898][ T2363] pvrusb2: Device being rendered inoperable [ 968.081191][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 968.094549][T14395] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 968.111491][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 968.127520][T14395] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 968.134630][T14395] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 968.382734][ T2363] pvrusb2: Attached sub-driver cx25840 [ 968.388258][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 968.398556][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 968.533887][T14404] overlayfs: failed to resolve './bus': -2 [ 972.243352][ T29] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 972.605506][T14433] loop5: detected capacity change from 0 to 40427 [ 972.633579][ T29] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 972.642000][T14433] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 972.649781][T14433] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 972.661973][ T29] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 972.672027][ T29] usb 5-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 972.681143][ T29] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 972.692547][ T29] usb 5-1: config 220 has no interface number 2 [ 972.698862][T14433] F2FS-fs (loop5): invalid crc value [ 972.705266][ T29] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 972.727111][ T29] usb 5-1: config 220 interface 0 has no altsetting 0 [ 972.735208][ T29] usb 5-1: config 220 interface 76 has no altsetting 0 [ 972.745514][ T29] usb 5-1: config 220 interface 1 has no altsetting 0 [ 972.785094][ T29] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 972.795442][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.805833][ T29] usb 5-1: Product: syz [ 972.810309][ T29] usb 5-1: Manufacturer: syz [ 972.819648][ T29] usb 5-1: SerialNumber: syz [ 973.026680][T14433] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 973.134474][T14433] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 973.141595][T14433] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 973.860106][ T29] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 974.523920][ T29] uvcvideo 5-1:220.0: No valid video chain found. [ 974.530526][ T29] usb 5-1: selecting invalid altsetting 0 [ 974.545526][ T29] usb 5-1: selecting invalid altsetting 0 [ 974.551304][ T29] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 974.573660][ T29] usb 5-1: USB disconnect, device number 28 [ 974.881169][T14448] overlayfs: failed to clone lowerpath [ 975.368416][T14454] loop0: detected capacity change from 0 to 40427 [ 975.395275][T14454] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 975.403130][T14454] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 975.412985][T14454] F2FS-fs (loop0): invalid crc value [ 975.559107][T14454] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 975.584047][T14454] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 975.591174][T14454] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 977.713688][T14482] loop8: detected capacity change from 0 to 256 [ 977.785120][T14482] exfat: Deprecated parameter 'utf8' [ 977.874891][T14482] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 978.038219][T14482] veth0_to_bond: mtu less than device minimum [ 978.077436][T14482] netlink: 484 bytes leftover after parsing attributes in process `syz.8.1701'. [ 978.153097][T14482] netlink: 'syz.8.1701': attribute type 1 has an invalid length. [ 978.185638][T14482] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1701'. [ 978.731774][ T29] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 978.895100][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.248225][T14509] loop9: detected capacity change from 0 to 40427 [ 979.257181][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.270224][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 979.283585][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 979.293104][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.304723][ T29] usb 9-1: config 0 descriptor?? [ 979.319742][T14509] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 979.327694][T14509] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 979.383434][T14509] F2FS-fs (loop9): invalid crc value [ 979.496156][T14509] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 979.535920][T14509] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 979.543223][T14509] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 979.544518][T14513] loop4: detected capacity change from 0 to 40427 [ 979.662570][T14513] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 979.670424][T14513] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 979.701948][T14513] F2FS-fs (loop4): invalid crc value [ 979.805369][T14513] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 979.861269][T14513] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 979.872347][T14513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 981.734392][ T29] usbhid 9-1:0.0: can't add hid device: -71 [ 981.785032][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 981.906209][ T29] usb 9-1: USB disconnect, device number 20 [ 986.215482][T14558] loop4: detected capacity change from 0 to 256 [ 986.229338][T14558] exfat: Deprecated parameter 'utf8' [ 986.257670][T14558] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 986.337642][T14560] netlink: 484 bytes leftover after parsing attributes in process `syz.4.1715'. [ 986.404583][T14561] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 986.432657][T11263] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 986.462168][T14562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1715'. [ 986.621891][T11263] usb 10-1: Using ep0 maxpacket: 8 [ 986.635131][T11263] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 986.661816][T11263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.695801][T11263] pvrusb2: Hardware description: Terratec Grabster AV400 [ 986.711786][T11263] pvrusb2: ********** [ 986.721716][T11263] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 986.742036][T11263] pvrusb2: Important functionality might not be entirely working. [ 986.761719][T11263] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 986.781689][T11263] pvrusb2: ********** [ 986.898537][ T2363] pvrusb2: Invalid write control endpoint [ 986.956783][ T2363] pvrusb2: Invalid write control endpoint [ 986.969084][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 986.983955][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 986.996052][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 987.006792][ T2363] pvrusb2: Device being rendered inoperable [ 987.015590][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 987.025568][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 987.039069][ T2363] pvrusb2: Attached sub-driver cx25840 [ 987.045176][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 987.059595][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 987.117776][T14559] pvrusb2: Attempted to execute control transfer when device not ok [ 987.128375][T11263] usb 10-1: USB disconnect, device number 19 [ 988.641882][T14558] veth0_to_bond: mtu less than device minimum [ 990.057429][T14584] loop4: detected capacity change from 0 to 512 [ 990.105916][T14584] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 990.208062][T14584] EXT4-fs (loop4): 1 truncate cleaned up [ 990.282735][T14584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.389117][T14591] loop8: detected capacity change from 0 to 256 [ 990.407807][T14591] exfat: Deprecated parameter 'utf8' [ 990.450325][T14591] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 990.492109][ T5353] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 990.591495][T14591] veth0_to_bond: mtu less than device minimum [ 990.636637][T14591] netlink: 'syz.8.1725': attribute type 1 has an invalid length. [ 990.670259][T10592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.675446][T14591] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1725'. [ 990.688527][ T5353] usb 10-1: Using ep0 maxpacket: 8 [ 990.745123][ T5353] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 990.765514][T14598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1727'. [ 990.778009][ T5353] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.845201][ T5353] pvrusb2: Hardware description: Terratec Grabster AV400 [ 990.888772][ T5353] pvrusb2: ********** [ 990.920247][ T5353] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 990.953332][T14600] netlink: 'syz.4.1728': attribute type 10 has an invalid length. [ 990.972080][ T5353] pvrusb2: Important functionality might not be entirely working. [ 991.014141][T14600] team0: Device veth0_vlan failed to register rx_handler [ 991.035588][ T5353] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 991.127449][ T5353] pvrusb2: ********** [ 991.151068][ T2363] pvrusb2: Invalid write control endpoint [ 991.172514][T14606] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1730'. [ 991.198468][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1731'. [ 991.220732][T14606] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1730'. [ 991.275584][T14606] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1730'. [ 991.426671][T14589] pvrusb2: Invalid write control endpoint [ 991.479548][ T5353] usb 10-1: USB disconnect, device number 20 [ 991.480468][ T2363] pvrusb2: Invalid write control endpoint [ 991.568005][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 991.624565][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 991.674093][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 991.753022][ T2363] pvrusb2: Device being rendered inoperable [ 991.789884][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 991.844476][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 991.906227][ T2363] pvrusb2: Attached sub-driver cx25840 [ 991.928655][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 991.983396][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 992.274676][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.285032][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.018421][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1750'. [ 993.075855][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1750'. [ 994.234497][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1768'. [ 994.816501][T14720] netlink: 'syz.8.1775': attribute type 11 has an invalid length. [ 994.860132][T14720] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1775'. [ 995.194996][T14729] netlink: 'syz.0.1780': attribute type 16 has an invalid length. [ 997.034909][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 997.365442][T14741] netlink: 'syz.8.1782': attribute type 2 has an invalid length. [ 997.445340][T14741] netlink: 'syz.8.1782': attribute type 1 has an invalid length. [ 997.867558][T14757] netlink: 9275 bytes leftover after parsing attributes in process `syz.8.1790'. [ 999.922120][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1000.864187][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1828'. [ 1000.946842][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 1000.999339][T14865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1830'. [ 1001.088334][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 1001.654483][T14886] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1838'. [ 1001.708515][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1840'. [ 1003.322403][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1856'. [ 1004.245834][T14960] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1863'. [ 1004.633557][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1863'. [ 1006.441017][T14894] veth0: entered promiscuous mode [ 1006.453028][T14894] veth1: entered promiscuous mode [ 1006.465855][T14894] veth0: left promiscuous mode [ 1006.486774][T14894] veth1: left promiscuous mode [ 1006.538823][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1006.784589][T14977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1867'. [ 1007.021547][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1869'. [ 1007.975235][T15024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1885'. [ 1008.670855][T15044] key id 00000001 not found [ 1008.693212][T15044] key id 00000001 not found [ 1009.109183][T15061] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 1009.190367][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 1009.194130][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1901'. [ 1011.168307][T15128] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1929'. [ 1011.913291][ T6498] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.418862][T15175] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1946'. [ 1012.463592][T15175] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1946'. [ 1012.509002][T15182] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1946'. [ 1012.564967][T15182] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1946'. [ 1012.776007][T15195] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1951'. [ 1013.276284][T11263] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1013.371846][T12778] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1013.463705][T11263] usb 5-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 1013.509498][T11263] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 1013.538480][T12778] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1013.542817][T11263] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 64 [ 1013.566722][T11263] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1013.578025][T11263] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 64 [ 1013.588321][T12778] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1013.606344][T12778] usb 9-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 1013.624931][T12778] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.639062][T12778] usb 9-1: Product: syz [ 1013.655513][T11263] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1013.682256][T12778] usb 9-1: Manufacturer: syz [ 1013.686935][T12778] usb 9-1: SerialNumber: syz [ 1013.737314][T11263] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 1013.780318][T11263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1013.792705][T11263] usb 5-1: Product: syz [ 1013.811748][T11263] usb 5-1: Manufacturer: syz [ 1015.049042][T11263] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1015.057821][T11263] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1015.069645][T11263] speedtch 5-1:1.0: probe with driver speedtch failed with error -71 [ 1015.134959][T11263] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 1015.171439][T11263] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -71! [ 1015.178652][T11263] speedtch 5-1:1.1: probe with driver speedtch failed with error -71 [ 1015.193731][T11263] usb 5-1: USB disconnect, device number 29 [ 1015.687784][T15244] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1967'. [ 1016.885654][T12778] ax88179_178a 9-1:1.0: probe with driver ax88179_178a failed with error -71 [ 1016.924534][T12778] usb 9-1: USB disconnect, device number 21 [ 1018.314782][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1988'. [ 1018.349856][T15300] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1988'. [ 1018.894586][T15328] x_tables: duplicate underflow at hook 1 [ 1018.941948][ T5353] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PREFIX) [ 1018.955509][T15293] ceph: No mds server is up or the cluster is laggy [ 1019.185069][T15334] netlink: 9275 bytes leftover after parsing attributes in process `syz.8.1997'. [ 1019.380232][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2000'. [ 1019.632237][T11263] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 1019.836963][T11263] usb 9-1: Invalid ep0 maxpacket: 64 [ 1019.937470][ T5896] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1019.991857][T11263] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 1020.171961][T11263] usb 9-1: Invalid ep0 maxpacket: 64 [ 1020.182203][T11263] usb usb9-port1: attempt power cycle [ 1020.204637][ T5896] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1020.534755][T11263] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 1020.573705][T11263] usb 9-1: Invalid ep0 maxpacket: 64 [ 1020.694570][T15360] ceph: No mds server is up or the cluster is laggy [ 1020.711833][T11263] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 1020.737410][ T5353] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1020.752557][T11263] usb 9-1: Invalid ep0 maxpacket: 64 [ 1020.770006][T11263] usb usb9-port1: unable to enumerate USB device [ 1020.934647][T15372] ceph: No mds server is up or the cluster is laggy [ 1020.947423][T11263] libceph: mon0 (2)127.0.0.1:6667 socket closed (con state V2_BANNER_PAYLOAD) [ 1021.340436][T15406] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.686138][T15407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.931286][T15406] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.052322][T15407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.320549][T15406] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.670068][T15407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.213960][T15406] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.635380][T15407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.869604][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1023.895556][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1023.935027][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1023.976081][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1024.047187][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1024.200097][ T6498] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.273015][ T6498] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.482071][ T87] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.754391][ T87] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.205860][T15486] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 1025.287355][T10339] IPVS: starting estimator thread 0... [ 1025.454670][T15488] IPVS: using max 26 ests per chain, 62400 per kthread [ 1025.727028][T15459] infiniband syz1: set active [ 1025.735638][T15459] infiniband syz1: added veth0 [ 1025.780430][T15459] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1025.799043][T15459] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1025.817722][T15459] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1026.111852][ T5629] Bluetooth: hci6: command tx timeout [ 1026.315105][T15459] RDS/IB: syz1: added [ 1026.397464][T15459] smc: adding ib device syz1 with port count 1 [ 1026.413129][T15459] smc: ib device syz1 port 1 has no pnetid [ 1027.841317][T10899] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1027.958395][T10899] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1027.979129][T10899] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1028.058796][T10899] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1028.075407][T10899] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1028.195322][ T5629] Bluetooth: hci6: command tx timeout [ 1029.642332][T15462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.673409][T15462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.702350][T15462] bridge_slave_0: entered allmulticast mode [ 1029.726465][T15462] bridge_slave_0: entered promiscuous mode [ 1029.760983][T15462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.784390][T15462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.809196][T15462] bridge_slave_1: entered allmulticast mode [ 1029.861891][T15462] bridge_slave_1: entered promiscuous mode [ 1030.192418][ T5629] Bluetooth: hci7: command tx timeout [ 1030.282437][ T5629] Bluetooth: hci6: command tx timeout [ 1030.301340][T15462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.339416][T15462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.497029][T15462] team0: Port device team_slave_0 added [ 1030.527392][T15462] team0: Port device team_slave_1 added [ 1030.616943][T15462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.637251][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.701796][T15462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.725426][T15462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.744630][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.803682][T15462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.936891][T15462] hsr_slave_0: entered promiscuous mode [ 1030.953507][T15462] hsr_slave_1: entered promiscuous mode [ 1032.286106][ T5629] Bluetooth: hci7: command tx timeout [ 1032.351906][ T5629] Bluetooth: hci6: command tx timeout [ 1033.470423][T15462] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1033.496304][T15462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1033.518513][T15462] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1033.561901][T15462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1033.580058][T15462] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1033.608450][T15462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1033.626153][T15462] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1033.658467][T15462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1033.927086][T15462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.094965][T15462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.184266][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.191488][T13516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.289478][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.296684][ T6498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.353254][ T5629] Bluetooth: hci7: command tx timeout [ 1034.958001][T15579] smc: net device lo applied user defined pnetid SYZ0 [ 1035.434852][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2063'. [ 1036.217533][T15597] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2065'. [ 1036.315545][T15599] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2065'. [ 1036.432555][ T5629] Bluetooth: hci7: command tx timeout [ 1037.073867][T15511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.138076][T15511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.195358][T15511] bridge_slave_0: entered allmulticast mode [ 1037.266407][T15511] bridge_slave_0: entered promiscuous mode [ 1037.317949][T15511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.369645][T15511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.409346][T15511] bridge_slave_1: entered allmulticast mode [ 1037.460275][T15511] bridge_slave_1: entered promiscuous mode [ 1037.522040][T15624] lo speed is unknown, defaulting to 1000 [ 1037.670420][T15624] lo speed is unknown, defaulting to 1000 [ 1037.712675][T15624] lo speed is unknown, defaulting to 1000 [ 1037.740525][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2072'. [ 1037.755286][T15511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.823402][T15511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.088947][T15511] team0: Port device team_slave_0 added [ 1038.146239][T15511] team0: Port device team_slave_1 added [ 1038.419493][T15511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.487116][T15511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.703455][T15511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.830460][T15511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.877877][T15511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.060430][T15511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.381986][T15624] infiniband syz0: set active [ 1039.420441][T15624] infiniband syz0: added lo [ 1039.573427][T11263] lo speed is unknown, defaulting to 1000 [ 1039.610974][T15624] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1039.630976][T15511] hsr_slave_0: entered promiscuous mode [ 1039.668500][T15511] hsr_slave_1: entered promiscuous mode [ 1039.684289][T15511] debugfs: 'hsr0' already exists in 'hsr' [ 1039.719784][T15511] Cannot create hsr debugfs directory [ 1039.789659][T15624] infiniband syz0: Couldn't open port 1 [ 1039.845431][T15624] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1039.917813][T15624] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1039.981701][T15624] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1040.224141][T15462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.358935][T15624] RDS/IB: syz0: added [ 1040.380156][T15624] smc: adding ib device syz0 with port count 1 [ 1040.409958][T15624] smc: ib device syz0 port 1 has no pnetid [ 1040.441547][T11263] lo speed is unknown, defaulting to 1000 [ 1040.558917][T15624] lo speed is unknown, defaulting to 1000 [ 1040.981160][T10899] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1040.996606][T10899] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1041.023735][T10899] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1041.068191][T10899] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1041.102451][T10899] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1041.520409][T15679] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1041.931302][T15462] veth0_vlan: entered promiscuous mode [ 1042.119255][T15462] veth1_vlan: entered promiscuous mode [ 1042.624833][T15624] lo speed is unknown, defaulting to 1000 [ 1042.796428][T15462] veth0_macvtap: entered promiscuous mode [ 1043.130616][T15462] veth1_macvtap: entered promiscuous mode [ 1043.232450][T10899] Bluetooth: hci8: command tx timeout [ 1043.632733][T15462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.992476][T15462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.034103][T15624] lo speed is unknown, defaulting to 1000 [ 1044.104309][ T6498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.157053][ T6498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.399112][ T1173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.471061][ T1173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.312760][T10899] Bluetooth: hci8: command tx timeout [ 1045.706178][T15624] lo speed is unknown, defaulting to 1000 [ 1045.773518][T13516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.821341][T13516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.305939][T13516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.370897][T13516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.382866][T15511] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1046.441258][T15511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.483208][T15511] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1046.569513][T15511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.621237][T15511] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1046.662940][T15511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.729384][T15511] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1046.811241][T15511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1046.886403][T15624] lo speed is unknown, defaulting to 1000 [ 1047.202369][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.393164][T10899] Bluetooth: hci8: command tx timeout [ 1047.758976][T15511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.895464][T15511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.170481][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.177682][ T6498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.518482][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.525708][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.657536][T15667] lo speed is unknown, defaulting to 1000 [ 1049.482461][T10899] Bluetooth: hci8: command tx timeout [ 1049.979495][T15624] lo speed is unknown, defaulting to 1000 [ 1051.760987][T15624] lo speed is unknown, defaulting to 1000 [ 1052.632655][T15667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.706126][T15667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.770403][T15667] bridge_slave_0: entered allmulticast mode [ 1052.825673][T15667] bridge_slave_0: entered promiscuous mode [ 1052.870156][T15667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.915867][T15667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.951587][T15667] bridge_slave_1: entered allmulticast mode [ 1052.994615][T15667] bridge_slave_1: entered promiscuous mode [ 1053.043821][T15511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.083850][T15832] syz_tun: mtu less than device minimum [ 1053.532698][ T5629] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1053.554562][ T5629] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1053.567839][ T5629] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1053.584858][ T5629] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1053.601265][ T5629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1053.683752][T15667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.728480][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.741534][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.945356][T15667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.010802][T15624] lo speed is unknown, defaulting to 1000 [ 1054.122214][T15667] team0: Port device team_slave_0 added [ 1054.174385][T15667] team0: Port device team_slave_1 added [ 1054.478442][T15667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.504764][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.610701][T15667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.671624][T15667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.714413][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.826032][T15667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.466728][T15624] lo speed is unknown, defaulting to 1000 [ 1055.496466][T15667] hsr_slave_0: entered promiscuous mode [ 1055.515546][T15667] hsr_slave_1: entered promiscuous mode [ 1055.532961][T15667] debugfs: 'hsr0' already exists in 'hsr' [ 1055.543635][T15667] Cannot create hsr debugfs directory [ 1055.573738][T15511] veth0_vlan: entered promiscuous mode [ 1055.645324][ T5629] Bluetooth: hci9: command tx timeout [ 1056.134721][T15511] veth1_vlan: entered promiscuous mode [ 1056.234920][T15878] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2126'. [ 1056.546391][T15624] lo speed is unknown, defaulting to 1000 [ 1056.611680][T15511] veth0_macvtap: entered promiscuous mode [ 1056.649395][T15511] veth1_macvtap: entered promiscuous mode [ 1056.946880][T15511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.982233][T15511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.103816][ T1119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.172378][ T1119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.323799][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.341303][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.379095][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.423458][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.712246][ T5629] Bluetooth: hci9: command tx timeout [ 1057.818859][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.843543][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.560350][T15759] rdma_rxe: rxe_newlink: failed to add lo [ 1059.640967][T15902] veth1_macvtap: left promiscuous mode [ 1059.744618][ T1173] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.793999][ T5629] Bluetooth: hci9: command tx timeout [ 1060.206653][ T1173] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.987786][ T1173] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.352696][ T5750] IPVS: starting estimator thread 0... [ 1061.482830][T15936] IPVS: using max 25 ests per chain, 60000 per kthread [ 1061.873675][ T5629] Bluetooth: hci9: command tx timeout [ 1062.449462][ T1173] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.602183][ T5750] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 1062.784660][ T5750] usb 4-1: Invalid ep0 maxpacket: 64 [ 1062.985548][ T5750] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 1063.147045][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2154'. [ 1063.212888][ T5750] usb 4-1: Invalid ep0 maxpacket: 64 [ 1063.222291][T15972] openvswitch: netlink: Flow actions attr not present in new flow. [ 1063.262577][ T5750] usb usb4-port1: attempt power cycle [ 1063.395139][T15969] ovs-system: entered promiscuous mode [ 1063.643791][ T5750] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 1063.716389][ T5750] usb 4-1: Invalid ep0 maxpacket: 64 [ 1063.891823][ T5750] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 1063.952323][ T5750] usb 4-1: Invalid ep0 maxpacket: 64 [ 1063.996592][ T5750] usb usb4-port1: unable to enumerate USB device [ 1064.583453][T15667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1064.679990][T15667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1064.728362][T15667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1064.816803][T15667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1064.979266][T15667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1065.049705][T15667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1065.129438][T15840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.150091][T15840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.170450][T15840] bridge_slave_0: entered allmulticast mode [ 1065.173824][T16013] xt_nfacct: accounting object `syz0' does not exist [ 1065.478435][T15840] bridge_slave_0: entered promiscuous mode [ 1065.675470][T15840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.716925][T15840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.763408][T15840] bridge_slave_1: entered allmulticast mode [ 1065.835554][T15840] bridge_slave_1: entered promiscuous mode [ 1065.932105][T15667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1065.970516][T15667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1066.137215][ T1173] bridge_slave_1: left allmulticast mode [ 1066.166313][ T1173] bridge_slave_1: left promiscuous mode [ 1066.206468][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.266111][ T1173] bridge_slave_0: left allmulticast mode [ 1066.284367][ T1173] bridge_slave_0: left promiscuous mode [ 1066.299368][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.690490][T16036] nvme nvme0: failed to connect socket: -101 [ 1067.721235][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.770222][ T1173] bond_slave_0: left allmulticast mode [ 1068.121513][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.214087][ T1173] bond_slave_1: left allmulticast mode [ 1068.421591][ T1173] bond0 (unregistering): Released all slaves [ 1068.627871][T16005] lo speed is unknown, defaulting to 1000 [ 1068.656473][T16057] veth1_macvtap: left promiscuous mode [ 1069.230067][T15840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.333656][T15840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.239745][T15840] team0: Port device team_slave_0 added [ 1070.338339][T15840] team0: Port device team_slave_1 added [ 1071.056861][T15840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.098287][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.283242][T15840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.696501][T15840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.748775][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.951002][T15840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.110999][T16120] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2190'. [ 1072.519890][T16127] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2193'. [ 1072.621081][T16128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2193'. [ 1073.317321][ T1173] hsr_slave_0: left promiscuous mode [ 1073.342834][ T1173] hsr_slave_1: left promiscuous mode [ 1073.363297][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.403113][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.453794][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.497522][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.596908][ T1173] veth1_macvtap: left promiscuous mode [ 1073.603798][ T1173] veth0_macvtap: left promiscuous mode [ 1073.609731][ T1173] veth1_vlan: left promiscuous mode [ 1073.616765][ T1173] veth0_vlan: left promiscuous mode [ 1074.144362][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2199'. [ 1074.506516][T16153] netlink: 'syz.8.2203': attribute type 1 has an invalid length. [ 1074.547148][T16153] netlink: 'syz.8.2203': attribute type 1 has an invalid length. [ 1074.587876][T16153] netlink: 'syz.8.2203': attribute type 1 has an invalid length. [ 1074.634875][T16153] netlink: 'syz.8.2203': attribute type 1 has an invalid length. [ 1074.657525][T16153] netlink: 'syz.8.2203': attribute type 1 has an invalid length. [ 1074.786087][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 1074.824535][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 1075.190928][ T5932] smc: removing ib device syz0 [ 1075.460846][T15840] hsr_slave_0: entered promiscuous mode [ 1075.512858][T15840] hsr_slave_1: entered promiscuous mode [ 1075.580892][T15840] debugfs: 'hsr0' already exists in 'hsr' [ 1075.613998][T15840] Cannot create hsr debugfs directory [ 1075.620638][ T5932] smbdirect: ib_dev[syz0] removed [ 1075.678547][ T5917] lo speed is unknown, defaulting to 1000 [ 1075.716153][ T5917] syz0: Port: 1 Link DOWN [ 1078.354541][T16193] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2211'. [ 1078.417609][T16195] netlink: 'syz.3.2212': attribute type 2 has an invalid length. [ 1079.106128][T15667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.292777][T15667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.934848][T15840] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.342246][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.349548][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.765677][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.772944][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.240547][T15840] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.472362][T16230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1081.526891][T16230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1081.590480][T16230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1081.710773][T16230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1081.741935][T16230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1082.292936][T15840] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.838277][T15840] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.872122][T16230] Bluetooth: hci4: command tx timeout [ 1084.948342][T15840] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1085.020522][T15840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1085.167010][T15840] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1085.263222][T15840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.311094][T15840] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1085.369744][T15840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.415631][T15840] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1085.549377][T15840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.962367][T16230] Bluetooth: hci4: command tx timeout [ 1086.161544][T15667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.748212][T15840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.066917][T15840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.188859][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.196074][ T6498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.280924][T15667] veth0_vlan: entered promiscuous mode [ 1087.320157][T10845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.327403][T10845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.465113][T15667] veth1_vlan: entered promiscuous mode [ 1087.853950][T15667] veth0_macvtap: entered promiscuous mode [ 1087.916309][T15667] veth1_macvtap: entered promiscuous mode [ 1088.035379][T16230] Bluetooth: hci4: command tx timeout [ 1089.774529][ T5629] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1089.791959][ T5629] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1089.814524][ T5629] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1089.893424][ T5629] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1089.941924][ T5629] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1089.973341][T15667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.112236][T16230] Bluetooth: hci4: command tx timeout [ 1090.971058][T15667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.185368][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.752171][ T5931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.119522][T16230] Bluetooth: hci10: command tx timeout [ 1092.383557][T11976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.757844][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.829998][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.252945][ T5931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.366192][T15840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.420458][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.429966][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.657988][T16229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.695843][T16229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.731184][T16229] bridge_slave_0: entered allmulticast mode [ 1093.800769][T16229] bridge_slave_0: entered promiscuous mode [ 1094.137859][T16229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.160522][T16229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.192967][T16229] bridge_slave_1: entered allmulticast mode [ 1094.202421][T16230] Bluetooth: hci10: command tx timeout [ 1094.543850][T16229] bridge_slave_1: entered promiscuous mode [ 1095.027735][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2230'. [ 1095.090516][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2230'. [ 1095.119034][T16379] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2230'. [ 1095.133338][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2230'. [ 1095.159967][T16379] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2230'. [ 1095.209628][T16379] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2230'. [ 1095.670761][ T87] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.746627][T16229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.813449][T16229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.286951][T16230] Bluetooth: hci10: command tx timeout [ 1096.378087][ T87] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.467573][T16229] team0: Port device team_slave_0 added [ 1096.561188][T16229] team0: Port device team_slave_1 added [ 1096.847279][ T87] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.859610][T11263] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 1096.885102][T16386] ceph: No mds server is up or the cluster is laggy [ 1097.343342][ T87] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.405825][T16229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.429702][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.468284][T16229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.524770][T16229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.533160][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.565667][T16229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.358073][T16230] Bluetooth: hci10: command tx timeout [ 1098.586711][T16229] hsr_slave_0: entered promiscuous mode [ 1098.637748][T16229] hsr_slave_1: entered promiscuous mode [ 1098.682160][T16229] debugfs: 'hsr0' already exists in 'hsr' [ 1098.719993][T16229] Cannot create hsr debugfs directory [ 1098.905282][T15840] veth0_vlan: entered promiscuous mode [ 1099.445845][ T87] bridge_slave_1: left allmulticast mode [ 1099.455494][ T87] bridge_slave_1: left promiscuous mode [ 1099.461394][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.478158][ T87] bridge_slave_0: left allmulticast mode [ 1099.498026][ T87] bridge_slave_0: left promiscuous mode [ 1099.510636][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.184785][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1100.232638][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1100.277512][ T87] bond0 (unregistering): Released all slaves [ 1100.765965][T16430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.986229][T15840] veth1_vlan: entered promiscuous mode [ 1101.282268][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1101.299267][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1101.315068][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1101.328009][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1101.339267][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1102.335007][T16430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.543830][T16300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.578074][T16300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.610664][T16300] bridge_slave_0: entered allmulticast mode [ 1102.694092][T16300] bridge_slave_0: entered promiscuous mode [ 1102.897033][T16430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.942402][T16300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.949836][T16300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.957914][T16300] bridge_slave_1: entered allmulticast mode [ 1102.980128][T16300] bridge_slave_1: entered promiscuous mode [ 1103.297296][T16430] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.403239][ T5629] Bluetooth: hci7: command tx timeout [ 1103.545048][T16300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.596151][T16300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.685756][ T87] hsr_slave_0: left promiscuous mode [ 1103.698258][ T87] hsr_slave_1: left promiscuous mode [ 1103.713922][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.741968][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.756575][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.772718][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.809179][ T87] veth0_macvtap: left promiscuous mode [ 1103.815024][ T87] veth1_vlan: left promiscuous mode [ 1103.834468][ T87] veth0_vlan: left promiscuous mode [ 1104.285521][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1104.327166][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1104.770801][T16229] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.957075][T16300] team0: Port device team_slave_0 added [ 1104.983896][T16300] team0: Port device team_slave_1 added [ 1105.200020][T15840] veth0_macvtap: entered promiscuous mode [ 1105.281378][T16300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.296304][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.371995][T16300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.445735][T16300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.460387][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.489025][ T5629] Bluetooth: hci7: command tx timeout [ 1105.500721][T16300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.570798][T15840] veth1_macvtap: entered promiscuous mode [ 1105.819082][ T87] IPVS: stop unused estimator thread 0... [ 1105.855118][T16300] hsr_slave_0: entered promiscuous mode [ 1105.902785][T16300] hsr_slave_1: entered promiscuous mode [ 1105.925496][T16300] debugfs: 'hsr0' already exists in 'hsr' [ 1105.945157][T16300] Cannot create hsr debugfs directory [ 1106.146070][T15840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.326902][T15840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.795545][T16229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1106.849197][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1106.896288][T16229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1106.924199][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1106.974147][ T5932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.021755][T16229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1107.047303][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1107.077122][T16229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1107.114101][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1107.397156][T16300] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.557519][ T5629] Bluetooth: hci7: command tx timeout [ 1107.603342][ T1173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.942427][T16300] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.302089][T11976] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.320974][T10845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.348899][T10845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.399398][T16300] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.610467][T16300] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.703199][ T62] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.908040][T11976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.919341][T11976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.644755][ T5629] Bluetooth: hci7: command tx timeout [ 1110.869638][T16300] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1110.918507][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1110.976697][T16300] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1111.022199][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.095688][T16300] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1111.142790][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.183765][T16300] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1111.225084][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.509684][T16229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.638447][T16229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.710270][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.717463][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.768056][ T5764] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1111.807750][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.815029][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.988973][ T5764] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 1112.033641][ T5764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1112.052864][ T29] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1112.064859][ T5764] usb 7-1: Product: syz [ 1112.081267][ T5764] usb 7-1: Manufacturer: syz [ 1112.328864][T16447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.349061][T16447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.372801][T16447] bridge_slave_0: entered allmulticast mode [ 1112.400617][T16447] bridge_slave_0: entered promiscuous mode [ 1112.464607][T16447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.491098][T16447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.510223][T16447] bridge_slave_1: entered allmulticast mode [ 1112.534611][T16447] bridge_slave_1: entered promiscuous mode [ 1112.554711][ T29] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 1112.609358][ T29] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1112.687123][ T29] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 1112.735977][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1112.772509][ T29] usb 2-1: Product: syz [ 1112.792409][ T29] usb 2-1: Manufacturer: syz [ 1112.883356][T16447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.920606][T16447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.048453][T16447] team0: Port device team_slave_0 added [ 1113.068616][T16447] team0: Port device team_slave_1 added [ 1113.257034][T16447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.277852][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.341508][ T5764] speedtch 7-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1113.375917][T16447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.395837][ T5764] speedtch 7-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1113.413952][ T5764] speedtch 7-1:1.0: probe with driver speedtch failed with error -71 [ 1113.438240][T16447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.456677][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.506299][ T5764] speedtch 7-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 1113.545401][ T5764] speedtch 7-1:1.1: usbatm_usb_probe: bind failed: -71! [ 1113.565473][ T5764] speedtch 7-1:1.1: probe with driver speedtch failed with error -71 [ 1113.575788][T16447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.602507][ T5764] usb 7-1: USB disconnect, device number 26 [ 1113.678572][T16300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.911214][T16300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.967845][T16447] hsr_slave_0: entered promiscuous mode [ 1114.007640][T16447] hsr_slave_1: entered promiscuous mode [ 1114.050461][T16447] debugfs: 'hsr0' already exists in 'hsr' [ 1114.074596][T16447] Cannot create hsr debugfs directory [ 1114.318774][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.326054][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.471059][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.478345][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.654532][ T29] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1114.728276][ T29] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1114.779355][ T29] speedtch 2-1:1.0: probe with driver speedtch failed with error -71 [ 1115.160610][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.168429][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.375508][ T29] speedtch 2-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 1115.495108][ T29] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -71! [ 1115.524922][ T29] speedtch 2-1:1.1: probe with driver speedtch failed with error -71 [ 1115.727925][ T5917] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 1115.750300][T16605] ceph: No mds server is up or the cluster is laggy [ 1115.757860][T16447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.079024][ T29] usb 2-1: USB disconnect, device number 28 [ 1116.365653][T16447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.977405][T16447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.499968][T16641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2265'. [ 1117.660965][T16230] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1117.705313][T16230] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1117.739545][T16230] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1117.756572][T16447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.842069][T16230] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1117.862893][T16230] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1117.911925][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2265'. [ 1118.140908][T16650] tipc: Started in network mode [ 1118.167410][T16650] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1118.237548][T16650] tipc: Enabled bearer , priority 0 [ 1119.357088][T11142] tipc: Node number set to 43690 [ 1119.652117][T16447] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1119.777246][T16447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1119.820760][T16447] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1119.908501][T16685] siw: device registration error -23 [ 1119.931004][T16447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1119.965556][T16685] rdma_op ffff88802980c1f0 conn xmit_rdma 0000000000000000 [ 1119.977839][T16447] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1120.045722][ T5629] Bluetooth: hci11: command tx timeout [ 1120.054418][T16447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1120.090276][T16683] lo speed is unknown, defaulting to 1000 [ 1120.101553][T16447] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1120.186341][T16447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1120.240310][T16683] lo speed is unknown, defaulting to 1000 [ 1120.298075][T16229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.329761][T16683] lo speed is unknown, defaulting to 1000 [ 1120.915104][T16229] veth0_vlan: entered promiscuous mode [ 1121.096197][T16229] veth1_vlan: entered promiscuous mode [ 1121.162806][T16300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.283738][T16447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.474412][T16447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.535011][T16229] veth0_macvtap: entered promiscuous mode [ 1121.621695][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.628924][T11974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.730434][T16229] veth1_macvtap: entered promiscuous mode [ 1121.820614][T11974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.827872][T11974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.116839][ T5629] Bluetooth: hci11: command tx timeout [ 1122.255751][T16229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.310690][T16683] infiniband syz0: set active [ 1122.343363][T16683] infiniband syz0: added lo [ 1122.381330][T16683] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1122.388160][T16683] infiniband syz0: Couldn't open port 1 [ 1122.450069][T16683] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1122.506131][T16683] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1122.560654][T16683] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1122.633111][ T5764] lo speed is unknown, defaulting to 1000 [ 1122.708869][T16229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.160050][T16683] RDS/IB: syz0: added [ 1123.181475][T16683] smc: adding ib device syz0 with port count 1 [ 1123.206642][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.225345][T16683] smc: ib device syz0 port 1 has no pnetid [ 1123.295508][T16683] lo speed is unknown, defaulting to 1000 [ 1123.301535][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 1123.421270][ T5750] lo speed is unknown, defaulting to 1000 [ 1123.441921][ T5932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.584109][T10845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.148805][T16300] veth0_vlan: entered promiscuous mode [ 1124.178164][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.202615][ T5629] Bluetooth: hci11: command tx timeout [ 1124.214695][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.255127][T11974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.379886][T16300] veth1_vlan: entered promiscuous mode [ 1124.728036][T13517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.742304][T16735] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1124.794815][T13517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.991442][T16300] veth0_macvtap: entered promiscuous mode [ 1125.065486][T16300] veth1_macvtap: entered promiscuous mode [ 1125.266032][T16300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.347519][T16683] lo speed is unknown, defaulting to 1000 [ 1125.376815][T16300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.231987][T11974] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.272799][ T5629] Bluetooth: hci11: command tx timeout [ 1127.099728][T16643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.149655][T16643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.199182][T16643] bridge_slave_0: entered allmulticast mode [ 1127.258600][T16643] bridge_slave_0: entered promiscuous mode [ 1127.335883][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.376789][T16643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.405755][T16643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.429736][T16643] bridge_slave_1: entered allmulticast mode [ 1127.476045][T16643] bridge_slave_1: entered promiscuous mode [ 1127.527465][T16447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.562882][T10845] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.575794][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.625880][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.036164][T16643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.218061][T16643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.623103][T16643] team0: Port device team_slave_0 added [ 1128.658389][T11974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.669707][T16683] lo speed is unknown, defaulting to 1000 [ 1128.683330][T10845] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.714440][T11974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.745143][T16643] team0: Port device team_slave_1 added [ 1128.885427][T16791] tipc: Started in network mode [ 1128.903774][T16791] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1128.953260][T16791] tipc: Enabled bearer , priority 0 [ 1129.122682][T16796] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2286'. [ 1129.228171][T16643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.305982][T16643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.474091][T16643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.602936][T16643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.639319][T16643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.857449][T16643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.043902][ T5743] tipc: Node number set to 43690 [ 1130.479892][T16643] hsr_slave_0: entered promiscuous mode [ 1130.547318][T16643] hsr_slave_1: entered promiscuous mode [ 1130.609703][T16643] debugfs: 'hsr0' already exists in 'hsr' [ 1130.667333][T16643] Cannot create hsr debugfs directory [ 1130.723052][T16683] lo speed is unknown, defaulting to 1000 [ 1131.009285][ T5764] IPVS: starting estimator thread 0... [ 1131.152349][T16819] IPVS: using max 24 ests per chain, 57600 per kthread [ 1131.450955][T16826] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 1133.226550][T16683] lo speed is unknown, defaulting to 1000 [ 1133.233764][T13517] netdevsim netdevsim99 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.351627][T16447] veth0_vlan: entered promiscuous mode [ 1133.538803][T16447] veth1_vlan: entered promiscuous mode [ 1134.568323][T16447] veth0_macvtap: entered promiscuous mode [ 1134.667551][T16447] veth1_macvtap: entered promiscuous mode [ 1134.860576][T16447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.963640][T16447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.102749][T11976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.168684][T11976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.464844][ T6498] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.708926][T16683] lo speed is unknown, defaulting to 1000 [ 1135.827071][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.030836][T16230] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1136.063148][T16230] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1136.089900][T16230] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1136.119069][T16230] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1136.167147][T16230] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1136.296906][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.307105][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.815368][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2312'. [ 1136.870203][T16899] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.2313'. [ 1137.280104][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.316078][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.670996][T16683] lo speed is unknown, defaulting to 1000 [ 1138.284034][T16230] Bluetooth: hci12: command tx timeout [ 1138.333868][T16916] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2316'. [ 1139.290713][T16683] lo speed is unknown, defaulting to 1000 [ 1140.018201][T16939] netlink: 16399 bytes leftover after parsing attributes in process `syz.9.2323'. [ 1140.364041][T16230] Bluetooth: hci12: command tx timeout [ 1140.610559][T16683] lo speed is unknown, defaulting to 1000 [ 1141.295651][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2330'. [ 1142.116731][T16683] lo speed is unknown, defaulting to 1000 [ 1142.431927][T16230] Bluetooth: hci12: command tx timeout [ 1142.884523][T16683] lo speed is unknown, defaulting to 1000 [ 1144.272579][T16683] lo speed is unknown, defaulting to 1000 [ 1144.305032][T17005] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2342'. [ 1144.522354][T16230] Bluetooth: hci12: command tx timeout [ 1145.284222][T16683] lo speed is unknown, defaulting to 1000 [ 1145.950157][T16683] lo speed is unknown, defaulting to 1000 [ 1147.954017][ T5629] Bluetooth: hci6: command 0x0406 tx timeout [ 1148.342756][ T5629] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1148.362603][ T5629] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1148.380208][ T5629] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1148.406723][ T5629] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1148.557019][ T5629] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1150.759667][ T5629] Bluetooth: hci13: command tx timeout [ 1152.849788][ T5629] Bluetooth: hci13: command tx timeout [ 1153.898206][T16683] lo speed is unknown, defaulting to 1000 [ 1154.911832][ T5629] Bluetooth: hci13: command tx timeout [ 1155.355057][T16230] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1155.371039][T16230] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1155.383735][T16230] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1155.405746][T16230] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1155.422656][T16230] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1156.799297][T16853] rdma_rxe: rxe_newlink: failed to add lo [ 1156.996227][ T5629] Bluetooth: hci13: command tx timeout [ 1157.552152][ T5629] Bluetooth: hci14: command tx timeout [ 1159.103537][T17044] lo speed is unknown, defaulting to 1000 [ 1159.551847][T11976] bridge_slave_1: left allmulticast mode [ 1159.607074][T11976] bridge_slave_1: left promiscuous mode [ 1159.635531][ T5629] Bluetooth: hci14: command tx timeout [ 1159.672717][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.831042][T11976] bridge_slave_0: left allmulticast mode [ 1159.846774][T11976] bridge_slave_0: left promiscuous mode [ 1159.864536][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.669067][T16230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1160.695314][T16230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1160.705732][T16230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1160.741411][T16230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1160.758611][T16230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1161.201532][T11976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.273940][T11976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.298696][T11976] bond0 (unregistering): Released all slaves [ 1161.351972][T16853] tipc: Resetting bearer [ 1161.551630][T16853] tipc: Disabling bearer [ 1161.711993][ T5629] Bluetooth: hci14: command tx timeout [ 1162.269495][T17124] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.185096][ T5629] Bluetooth: hci4: command tx timeout [ 1163.795791][ T5629] Bluetooth: hci14: command tx timeout [ 1164.562166][ T1173] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.162649][T16997] tipc: Resetting bearer [ 1165.232249][ T5629] Bluetooth: hci4: command tx timeout [ 1165.419824][T16997] tipc: Disabling bearer [ 1166.137804][T17084] lo speed is unknown, defaulting to 1000 [ 1166.225530][T16883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.258627][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.290624][T16883] bridge_slave_0: entered allmulticast mode [ 1166.334833][T16883] bridge_slave_0: entered promiscuous mode [ 1166.410755][T16883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.446702][T16883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.473699][T16883] bridge_slave_1: entered allmulticast mode [ 1166.493191][T16883] bridge_slave_1: entered promiscuous mode [ 1166.579795][T11976] hsr_slave_0: left promiscuous mode [ 1166.607194][T11976] hsr_slave_1: left promiscuous mode [ 1166.635849][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.643960][T11976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.681732][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.712003][T11976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.777370][T11976] veth1_macvtap: left promiscuous mode [ 1166.801327][T11976] veth0_macvtap: left promiscuous mode [ 1166.821902][T11976] veth1_vlan: left promiscuous mode [ 1166.858033][T11976] veth0_vlan: left promiscuous mode [ 1167.324540][ T5629] Bluetooth: hci4: command tx timeout [ 1167.817763][T11976] team0 (unregistering): Port device team_slave_1 removed [ 1167.848364][T11976] team0 (unregistering): Port device team_slave_0 removed [ 1168.190822][T11263] lo speed is unknown, defaulting to 1000 [ 1168.225640][T11263] syz0: Port: 1 Link DOWN [ 1168.350426][T17128] lo speed is unknown, defaulting to 1000 [ 1168.921884][ T32] INFO: task syz.0.1886:15025 blocked for more than 143 seconds. [ 1168.935522][T16883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1168.962669][ T32] Tainted: G L syzkaller #0 [ 1168.977139][T11263] lo speed is unknown, defaulting to 1000 [ 1169.003804][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1169.057040][ T32] task:syz.0.1886 state:D stack:28424 pid:15025 tgid:15021 ppid:10897 task_flags:0x400040 flags:0x00080002 [ 1169.102065][ T5932] smc: removing ib device syz0 [ 1169.122691][ T32] Call Trace: [ 1169.133820][ T32] [ 1169.145294][T17178] bridge0: port 3(veth0) entered blocking state [ 1169.152395][ T32] __schedule+0x17d9/0x56c0 [ 1169.167345][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1169.175293][T17178] bridge0: port 3(veth0) entered disabled state [ 1169.188158][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1169.199075][T17178] veth0: entered allmulticast mode [ 1169.227795][ T32] ? __pfx___schedule+0x10/0x10 [ 1169.275310][T17178] veth0: entered promiscuous mode [ 1169.286287][ T32] ? schedule+0x90/0x2b0 [ 1169.329825][ T32] schedule+0x164/0x2b0 [ 1169.340045][T17178] bridge0: port 3(veth0) entered blocking state [ 1169.349470][T17178] bridge0: port 3(veth0) entered forwarding state [ 1169.399299][ T32] schedule_preempt_disabled+0x13/0x30 [ 1169.420854][ T5629] Bluetooth: hci4: command tx timeout [ 1169.429566][ T32] __mutex_lock+0x7bf/0x1550 [ 1169.442859][ T32] ? kasan_save_track+0x3e/0x80 [ 1169.455788][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1169.465498][ T32] ? write_ports+0xb5/0xd10 [ 1169.479109][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1169.507216][ T32] write_ports+0xb5/0xd10 [ 1169.537848][T16883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.571913][ T32] ? __pfx_write_ports+0x10/0x10 [ 1169.595304][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.640060][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.698944][ T32] ? _copy_from_user+0x94/0xb0 [ 1169.723795][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.767272][ T32] ? simple_transaction_get+0x12d/0x160 [ 1169.789687][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1169.818573][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1169.844509][ T32] vfs_write+0x296/0xba0 [ 1169.855857][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1169.864125][ T32] ? __fget_files+0x2a/0x420 [ 1169.868791][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.875796][ T32] ? __fget_files+0x3a2/0x420 [ 1169.880550][ T32] ? __fget_files+0x2a/0x420 [ 1169.886789][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.892818][ T32] ksys_write+0x150/0x270 [ 1169.897192][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1169.906194][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.913955][ T32] do_syscall_64+0x174/0x580 [ 1169.918609][ T32] ? trace_irq_disable+0x3b/0x140 [ 1169.937833][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.944991][ T32] RIP: 0033:0x7f485c39e019 [ 1169.949456][ T32] RSP: 002b:00007f485d267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1169.967323][ T32] RAX: ffffffffffffffda RBX: 00007f485c626090 RCX: 00007f485c39e019 [ 1169.975662][ T32] RDX: 0000000000000009 RSI: 00002000000004c0 RDI: 0000000000000007 [ 1169.984385][ T32] RBP: 00007f485c43500c R08: 0000000000000000 R09: 0000000000000000 [ 1169.993689][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.002080][ T32] R13: 00007f485c626128 R14: 00007f485c626090 R15: 00007fffb5a0b628 [ 1170.010114][ T32] [ 1170.016830][ T32] INFO: task syz.9.1941:15156 blocked for more than 144 seconds. [ 1170.028131][ T32] Tainted: G L syzkaller #0 [ 1170.103335][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1170.129789][ T32] task:syz.9.1941 state:D stack:27496 pid:15156 tgid:15154 ppid:10446 task_flags:0x400140 flags:0x00080002 [ 1170.188153][ T32] Call Trace: [ 1170.198769][ T32] [ 1170.236984][ T32] __schedule+0x17d9/0x56c0 [ 1170.273878][ T5932] smbdirect: ib_dev[syz0] removed [ 1170.293155][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1170.315051][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1170.347658][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1170.378745][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1170.406572][ T32] ? arch_stack_walk+0xfb/0x150 [ 1170.428121][ T32] ? __pfx___schedule+0x10/0x10 [ 1170.473158][ T32] ? schedule+0x90/0x2b0 [ 1170.499991][ T32] schedule+0x164/0x2b0 [ 1170.524724][ T32] schedule_preempt_disabled+0x13/0x30 [ 1170.569200][ T32] __mutex_lock+0x7bf/0x1550 [ 1170.595934][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1170.637694][ T32] ? write_versions+0x95/0xe30 [ 1170.663235][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1170.699693][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1170.732273][ T32] write_versions+0x95/0xe30 [ 1170.750242][ T32] ? __pfx_write_versions+0x10/0x10 [ 1170.788199][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1170.817254][ T32] ? _copy_from_user+0x94/0xb0 [ 1170.836081][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1170.877612][ T32] ? simple_transaction_get+0x12d/0x160 [ 1170.902705][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1170.909470][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1170.916682][ T32] vfs_write+0x296/0xba0 [ 1170.922820][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1170.928950][ T32] ? __fget_files+0x2a/0x420 [ 1170.934659][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1170.941112][ T32] ? __fget_files+0x3a2/0x420 [ 1170.949506][ T32] ? __fget_files+0x2a/0x420 [ 1170.977802][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.025516][ T32] ksys_write+0x150/0x270 [ 1171.046309][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1171.068580][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.099516][ T32] do_syscall_64+0x174/0x580 [ 1171.119017][ T32] ? trace_irq_disable+0x3b/0x140 [ 1171.145139][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.183668][ T32] RIP: 0033:0x7f2f72f9e019 [ 1171.204090][ T32] RSP: 002b:00007f2f73e3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1171.241607][ T32] RAX: ffffffffffffffda RBX: 00007f2f73225fa0 RCX: 00007f2f72f9e019 [ 1171.274193][ T32] RDX: 0000000000000009 RSI: 0000200000000450 RDI: 0000000000000003 [ 1171.292425][ T32] RBP: 00007f2f7303500c R08: 0000000000000000 R09: 0000000000000000 [ 1171.313324][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.332129][ T32] R13: 00007f2f73226038 R14: 00007f2f73225fa0 R15: 00007ffd4246be18 [ 1171.344442][ T32] [ 1171.357417][ T32] INFO: task syz.9.1941:15157 blocked for more than 145 seconds. [ 1171.580673][ T32] Tainted: G L syzkaller #0 [ 1171.595951][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1171.649471][ T32] task:syz.9.1941 state:D stack:27984 pid:15157 tgid:15154 ppid:10446 task_flags:0x400040 flags:0x00080002 [ 1171.752611][ T32] Call Trace: [ 1171.783844][ T32] [ 1171.808029][ T32] __schedule+0x17d9/0x56c0 [ 1171.847320][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1171.853613][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1171.859699][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.866258][ T32] ? kernel_text_address+0xa5/0xe0 [ 1171.874976][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.912497][ T32] ? __kernel_text_address+0xd/0x30 [ 1171.918798][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1172.004147][ T32] ? __pfx___schedule+0x10/0x10 [ 1172.026098][ T32] ? schedule+0x90/0x2b0 [ 1172.053180][ T32] schedule+0x164/0x2b0 [ 1172.072521][ T32] schedule_preempt_disabled+0x13/0x30 [ 1172.102140][ T32] __mutex_lock+0x7bf/0x1550 [ 1172.125282][ T32] ? nfsctl_transaction_write+0xc7/0x160 [ 1172.172568][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1172.202142][ T32] ? nfsd4_write_time+0xb1/0x6c0 [ 1172.232508][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1172.250406][ T32] nfsd4_write_time+0xb1/0x6c0 [ 1172.275075][ T32] ? __pfx_nfsd4_write_time+0x10/0x10 [ 1172.310192][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.332741][ T32] ? net_generic+0x1e/0x240 [ 1172.355922][ T32] ? net_generic+0x1e/0x240 [ 1172.397764][ T32] ? net_generic+0x1e/0x240 [ 1172.409066][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.429192][ T32] ? net_generic+0x1f4/0x240 [ 1172.449377][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.480125][ T32] ? write_gracetime+0x8a/0xb0 [ 1172.501708][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1172.543039][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1172.561811][ T32] vfs_write+0x296/0xba0 [ 1172.573086][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1172.601820][ T32] ? __fget_files+0x2a/0x420 [ 1172.621047][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.647672][ T32] ? __fget_files+0x3a2/0x420 [ 1172.669751][ T32] ? __fget_files+0x2a/0x420 [ 1172.694558][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.721834][ T32] ksys_write+0x150/0x270 [ 1172.726486][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1172.733191][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.751708][ T32] do_syscall_64+0x174/0x580 [ 1172.757862][ T32] ? trace_irq_disable+0x3b/0x140 [ 1172.778223][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.791724][ T32] RIP: 0033:0x7f2f72f9e019 [ 1172.806944][ T32] RSP: 002b:00007f2f73e1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1172.834132][ T32] RAX: ffffffffffffffda RBX: 00007f2f73226090 RCX: 00007f2f72f9e019 [ 1172.844026][ T32] RDX: 0000000000000003 RSI: 0000200000000470 RDI: 0000000000000004 [ 1172.863567][ T32] RBP: 00007f2f7303500c R08: 0000000000000000 R09: 0000000000000000 [ 1172.885251][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.908164][ T32] R13: 00007f2f73226128 R14: 00007f2f73226090 R15: 00007ffd4246be18 [ 1172.931849][ T32] [ 1172.943774][ T32] INFO: task syz.9.1941:15158 blocked for more than 147 seconds. [ 1172.983540][ T32] Tainted: G L syzkaller #0 [ 1173.001985][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1173.031722][ T32] task:syz.9.1941 state:D stack:28424 pid:15158 tgid:15154 ppid:10446 task_flags:0x400040 flags:0x00080002 [ 1173.053712][ T32] Call Trace: [ 1173.062024][ T32] [ 1173.066507][ T32] __schedule+0x17d9/0x56c0 [ 1173.084217][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1173.089232][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1173.101198][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.121702][ T32] ? kernel_text_address+0xa5/0xe0 [ 1173.131965][ T32] ? __kernel_text_address+0xd/0x30 [ 1173.144714][ T32] ? __pfx___schedule+0x10/0x10 [ 1173.154380][ T32] ? schedule+0x90/0x2b0 [ 1173.165372][ T32] schedule+0x164/0x2b0 [ 1173.181727][ T32] schedule_preempt_disabled+0x13/0x30 [ 1173.187358][ T32] __mutex_lock+0x7bf/0x1550 [ 1173.201712][ T32] ? kasan_save_track+0x3e/0x80 [ 1173.206646][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1173.232253][ T32] ? write_ports+0xb5/0xd10 [ 1173.239309][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1173.251724][ T32] write_ports+0xb5/0xd10 [ 1173.256132][ T32] ? __pfx_write_ports+0x10/0x10 [ 1173.271722][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.284568][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.301578][ T32] ? _copy_from_user+0x94/0xb0 [ 1173.326655][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.357722][ T32] ? simple_transaction_get+0x12d/0x160 [ 1173.383000][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1173.397321][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1173.411716][ T32] vfs_write+0x296/0xba0 [ 1173.431726][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1173.438113][ T32] ? __fget_files+0x2a/0x420 [ 1173.451790][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.462001][ T32] ? __fget_files+0x3a2/0x420 [ 1173.474897][ T32] ? __fget_files+0x2a/0x420 [ 1173.491975][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.498771][ T32] ksys_write+0x150/0x270 [ 1173.507202][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1173.522492][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.541757][ T32] do_syscall_64+0x174/0x580 [ 1173.546425][ T32] ? trace_irq_disable+0x3b/0x140 [ 1173.551483][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.571747][ T32] RIP: 0033:0x7f2f72f9e019 [ 1173.584153][ T32] RSP: 002b:00007f2f73dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1173.601701][ T32] RAX: ffffffffffffffda RBX: 00007f2f73226180 RCX: 00007f2f72f9e019 [ 1173.624597][ T32] RDX: 0000000000000009 RSI: 0000200000000400 RDI: 0000000000000005 [ 1173.642673][ T32] RBP: 00007f2f7303500c R08: 0000000000000000 R09: 0000000000000000 [ 1173.662081][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.674851][ T32] R13: 00007f2f73226218 R14: 00007f2f73226180 R15: 00007ffd4246be18 [ 1173.694286][ T32] [ 1173.757839][ T32] INFO: task syz.9.1941:15165 blocked for more than 148 seconds. [ 1174.018462][ T32] Tainted: G L syzkaller #0 [ 1174.129635][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1174.153449][ T32] task:syz.9.1941 state:D stack:27496 pid:15165 tgid:15154 ppid:10446 task_flags:0x400040 flags:0x00080002 [ 1174.181733][ T32] Call Trace: [ 1174.185086][ T32] [ 1174.188029][ T32] __schedule+0x17d9/0x56c0 [ 1174.203574][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1174.219193][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1174.244318][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.275659][ T32] ? kernel_text_address+0xa5/0xe0 [ 1174.293864][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.315396][ T32] ? __kernel_text_address+0xd/0x30 [ 1174.331062][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1174.375860][ T32] ? __pfx___schedule+0x10/0x10 [ 1174.391783][ T32] ? schedule+0x90/0x2b0 [ 1174.401719][ T32] schedule+0x164/0x2b0 [ 1174.412727][ T32] schedule_preempt_disabled+0x13/0x30 [ 1174.427743][ T32] __mutex_lock+0x7bf/0x1550 [ 1174.447625][ T32] ? nfsctl_transaction_write+0xc7/0x160 [ 1174.470670][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1174.487982][ T32] ? write_threads+0x39d/0x5a0 [ 1174.501755][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1174.511957][ T32] ? simple_strntoull+0x111/0x190 [ 1174.523214][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.543479][ T32] ? qword_get+0x5ad/0x650 [ 1174.550998][ T32] write_threads+0x39d/0x5a0 [ 1174.561770][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.570426][ T32] ? __pfx_write_threads+0x10/0x10 [ 1174.588383][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.612957][ T32] ? _copy_from_user+0x94/0xb0 [ 1174.628359][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.652956][ T32] ? simple_transaction_get+0x12d/0x160 [ 1174.671792][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1174.698926][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1174.723808][ T32] vfs_write+0x296/0xba0 [ 1174.738048][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1174.759119][ T32] ? __fget_files+0x2a/0x420 [ 1174.773797][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.793828][ T32] ? __fget_files+0x3a2/0x420 [ 1174.798602][ T32] ? __fget_files+0x2a/0x420 [ 1174.811708][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.826318][ T32] ksys_write+0x150/0x270 [ 1174.841788][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1174.846717][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.866526][ T32] do_syscall_64+0x174/0x580 [ 1174.882014][ T32] ? trace_irq_disable+0x3b/0x140 [ 1174.887129][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.901791][ T32] RIP: 0033:0x7f2f72f9e019 [ 1174.908615][ T32] RSP: 002b:00007f2f73dd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1174.933219][ T32] RAX: ffffffffffffffda RBX: 00007f2f73226270 RCX: 00007f2f72f9e019 [ 1174.955593][ T32] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000006 [ 1174.972883][ T32] RBP: 00007f2f7303500c R08: 0000000000000000 R09: 0000000000000000 [ 1174.991983][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.012805][ T32] R13: 00007f2f73226308 R14: 00007f2f73226270 R15: 00007ffd4246be18 [ 1175.033256][ T32] [ 1175.036454][ T32] INFO: task syz.4.2039:15481 blocked for more than 149 seconds. [ 1175.046740][ T32] Tainted: G L syzkaller #0 [ 1175.191881][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1175.307632][ T32] task:syz.4.2039 state:D stack:28424 pid:15481 tgid:15479 ppid:10592 task_flags:0x400140 flags:0x00080002 [ 1175.334364][ T32] Call Trace: [ 1175.337688][ T32] [ 1175.340626][ T32] __schedule+0x17d9/0x56c0 [ 1175.345771][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1175.350855][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1175.356258][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.375057][ T32] ? kernel_text_address+0xa5/0xe0 [ 1175.380236][ T32] ? __kernel_text_address+0xd/0x30 [ 1175.387796][ T32] ? __pfx___schedule+0x10/0x10 [ 1175.395438][ T32] ? schedule+0x90/0x2b0 [ 1175.399730][ T32] schedule+0x164/0x2b0 [ 1175.410830][ T32] schedule_preempt_disabled+0x13/0x30 [ 1175.429416][ T32] __mutex_lock+0x7bf/0x1550 [ 1175.443200][ T32] ? kasan_save_track+0x3e/0x80 [ 1175.453179][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1175.471103][ T32] ? write_ports+0xb5/0xd10 [ 1175.489789][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1175.512437][ T32] write_ports+0xb5/0xd10 [ 1175.520910][ T32] ? __pfx_write_ports+0x10/0x10 [ 1175.541744][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.547462][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.581766][ T32] ? _copy_from_user+0x94/0xb0 [ 1175.586627][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.594349][ T32] ? simple_transaction_get+0x12d/0x160 [ 1175.611955][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1175.617575][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1175.637933][ T32] vfs_write+0x296/0xba0 [ 1175.651789][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1175.658074][ T32] ? __fget_files+0x2a/0x420 [ 1175.672451][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.691761][ T32] ? __fget_files+0x3a2/0x420 [ 1175.696524][ T32] ? __fget_files+0x2a/0x420 [ 1175.701149][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.721713][ T32] ksys_write+0x150/0x270 [ 1175.726122][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1175.730997][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.755536][ T32] do_syscall_64+0x174/0x580 [ 1175.771885][ T32] ? trace_irq_disable+0x3b/0x140 [ 1175.780086][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.793634][ T32] RIP: 0033:0x7f2489b9e019 [ 1175.804048][ T32] RSP: 002b:00007f248aacc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1175.821722][ T32] RAX: ffffffffffffffda RBX: 00007f2489e25fa0 RCX: 00007f2489b9e019 [ 1175.841985][ T32] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 1175.853208][ T32] RBP: 00007f2489c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1175.884994][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.901695][ T32] R13: 00007f2489e26038 R14: 00007f2489e25fa0 R15: 00007ffe10158098 [ 1175.921731][ T32] [ 1175.953383][ T32] [ 1175.953383][ T32] Showing all locks held in the system: [ 1175.967279][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1176.086023][ T32] 6 locks held by kworker/u8:0/12: [ 1176.172401][ T32] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1176.261914][ T32] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1176.292365][ T32] #2: ffff888061f307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1176.323347][ T32] #3: ffffffff9a9ce338 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 1176.347160][ T32] #4: ffff8880b86281d8 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3e0 [ 1176.400939][ T32] #5: ffff8880b863f6a8 ((local_lock_t *)&pcs->lock){+.+.}-{3:3}, at: __kfree_rcu_sheaf+0x1f/0x5e0 [ 1176.434425][ T32] 1 lock held by khungtaskd/32: [ 1176.453008][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1176.473454][ T32] 2 locks held by dhcpcd/5282: [ 1176.493878][ T32] #0: ffff88802b72f6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1176.524165][ T32] #1: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14a0 [ 1176.552329][ T32] 3 locks held by kworker/1:3/5353: [ 1176.558521][ T32] 2 locks held by getty/5378: [ 1176.572727][ T32] #0: ffff888035eaf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1176.594917][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.604791][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.621718][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1176.651790][ T32] 5 locks held by kworker/u8:12/5932: [ 1176.664664][ T32] 5 locks held by kworker/u8:18/11976: [ 1176.685409][ T32] #0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1176.731839][ T32] #1: ffffc90004a47c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1176.753353][ T32] #2: ffffffff9001f328 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1176.783587][ T32] #3: ffff88805f5dd610 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 1176.812753][ T32] #4: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1176.843869][ T32] 3 locks held by syz.0.1886/15022: [ 1176.864056][ T32] #0: ffff88802a7ce2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1176.881715][ T32] #1: ffff888029802450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1176.922793][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1176.941740][ T32] 3 locks held by syz.0.1886/15025: [ 1176.956262][ T32] #0: ffff88802273db30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1176.983211][ T32] #1: ffff888029802450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.014646][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1177.033025][ T32] 3 locks held by syz.9.1941/15156: [ 1177.061882][ T32] #0: ffff88807712db30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.083164][ T32] #1: ffff88807cb3a450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.106251][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1177.131806][ T32] 3 locks held by syz.9.1941/15157: [ 1177.144428][ T32] #0: ffff888058890d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.176393][ T32] #1: ffff88807cb3a450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.188544][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0 [ 1177.201422][ T32] 3 locks held by syz.9.1941/15158: [ 1177.210228][ T32] #0: ffff88805fdf8ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.222654][ T32] #1: ffff88807cb3a450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.236487][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1177.248793][ T32] 3 locks held by syz.9.1941/15165: [ 1177.255679][ T32] #0: ffff888058891b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.268474][ T32] #1: ffff88807cb3a450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.281494][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1177.293623][ T32] 3 locks held by syz.4.2039/15481: [ 1177.300227][ T32] #0: ffff88802237f970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.360456][ T32] #1: ffff88802a6b4450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.422576][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1177.434599][ T32] 3 locks held by syz.5.2195/16133: [ 1177.440929][ T32] #0: ffff8880695dad30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.453131][ T32] #1: ffff888052190450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.465668][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1177.484540][ T32] 3 locks held by syz.5.2195/16136: [ 1177.490596][ T32] #0: ffff88802b8d9b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.502818][ T32] #1: ffff888052190450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.518288][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1177.532414][ T32] 3 locks held by syz.5.2195/16138: [ 1177.538757][ T32] #0: ffff88802b8d8ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.551121][ T32] #1: ffff888052190450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.562820][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1177.574926][ T32] 3 locks held by syz.3.2222/16268: [ 1177.581278][ T32] #0: ffff888032023270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.593312][ T32] #1: ffff8880682d2450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.606345][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1177.622180][ T32] 3 locks held by syz.3.2222/16271: [ 1177.628169][ T32] #0: ffff8880538aed30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.647838][ T32] #1: ffff8880682d2450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.662630][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1177.675298][ T32] 3 locks held by syz.3.2222/16272: [ 1177.681736][ T32] #0: ffff88807ff487f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.693808][ T32] #1: ffff8880682d2450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.706638][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1177.722809][ T32] 3 locks held by syz.8.2246/16446: [ 1177.729211][ T32] #0: ffff8880588909b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.741632][ T32] #1: ffff88801b148450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.754464][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1177.766861][ T32] 3 locks held by syz.8.2246/16450: [ 1177.773133][ T32] #0: ffff888058890b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.785426][ T32] #1: ffff88801b148450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.797870][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1177.812425][ T32] 3 locks held by syz.8.2246/16452: [ 1177.821542][ T32] #0: ffff8880320220f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1177.834436][ T32] #1: ffff88801b148450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1177.846924][ T32] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1177.859152][ T32] 4 locks held by syz-executor/16643: [ 1177.865569][ T32] #0: ffff888039c78ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1177.879553][ T32] #1: ffff888039c780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 1177.895469][ T32] #2: ffffffff901b5700 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 1177.908765][ T32] #3: ffff88803b3f1af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 1177.924773][ T32] 3 locks held by syz-executor/16883: [ 1177.931337][ T32] #0: ffff888039340ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1177.945371][ T32] #1: ffff8880393400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 1177.960847][ T32] #2: ffffffff901b5700 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 1177.974316][ T32] 1 lock held by syz-executor/17044: [ 1177.980641][ T32] #0: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1177.992330][ T32] 2 locks held by syz-executor/17084: [ 1177.998774][ T32] #0: ffffffff9001f328 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1178.012379][ T32] #1: ffff8880790106f8 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x38/0x300 [ 1178.050610][ T32] 2 locks held by syz-executor/17128: [ 1178.058416][ T32] #0: ffffffff9001f328 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1178.070509][ T32] #1: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120 [ 1178.083550][ T32] 2 locks held by syz.9.2360/17172: [ 1178.089692][ T32] #0: ffff888039fbcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1178.143819][ T32] #1: ffff888039fbc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 1178.157094][ T32] 1 lock held by dhcpcd/17193: [ 1178.163464][ T32] #0: ffff888031912260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1178.176813][ T32] 1 lock held by dhcpcd/17194: [ 1178.182703][ T32] #0: ffff888065326260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1178.272658][ T32] 1 lock held by dhcpcd/17196: [ 1178.302121][ T32] #0: ffff88805b272260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1178.364864][ T32] 1 lock held by dhcpcd/17197: [ 1178.381701][ T32] #0: ffff88802b9c6260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1178.403597][ T32] [ 1178.471956][ T32] ============================================= [ 1178.471956][ T32] [ 1178.568429][ T32] NMI backtrace for cpu 1 [ 1178.568456][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.568491][ T32] Tainted: [L]=SOFTLOCKUP [ 1178.568501][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1178.568516][ T32] Call Trace: [ 1178.568526][ T32] [ 1178.568537][ T32] dump_stack_lvl+0xe8/0x150 [ 1178.568582][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1178.568611][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1178.568660][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1178.568691][ T32] sys_info+0x135/0x170 [ 1178.568731][ T32] watchdog+0xfd7/0x1030 [ 1178.568772][ T32] ? watchdog+0x1c7/0x1030 [ 1178.568813][ T32] kthread+0x388/0x470 [ 1178.568852][ T32] ? __pfx_watchdog+0x10/0x10 [ 1178.568882][ T32] ? __pfx_kthread+0x10/0x10 [ 1178.568922][ T32] ret_from_fork+0x514/0xb70 [ 1178.568964][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1178.569002][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1178.569032][ T32] ? __switch_to+0xc89/0x1420 [ 1178.569070][ T32] ? __pfx_kthread+0x10/0x10 [ 1178.569109][ T32] ret_from_fork_asm+0x1a/0x30 [ 1178.569151][ T32] [ 1178.569204][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1178.703791][ C0] NMI backtrace for cpu 0 [ 1178.703821][ C0] CPU: 0 UID: 0 PID: 5743 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.703856][ C0] Tainted: [L]=SOFTLOCKUP [ 1178.703866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1178.703884][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 1178.703920][ C0] RIP: 0010:unwind_next_frame+0x1b5f/0x2550 [ 1178.703955][ C0] Code: c6 03 01 4c 8b 6c 24 50 4c 8b 7c 24 10 43 0f b6 04 27 84 c0 0f 85 6d 02 00 00 41 c7 06 00 00 00 00 31 ed e8 43 8d 59 0a 85 c0 <74> 3a e8 3a 41 34 00 84 c0 75 31 e8 31 8d 59 0a 85 c0 74 28 80 3d [ 1178.703977][ C0] RSP: 0018:ffffc900000078c8 EFLAGS: 00000202 [ 1178.703999][ C0] RAX: 0000000000000001 RBX: ffffc900000079d8 RCX: ffff88807b0d1f00 [ 1178.704018][ C0] RDX: ffffc90000007a01 RSI: dffffc0000000000 RDI: ffffc900000079d0 [ 1178.704038][ C0] RBP: 1ffffffff21dba01 R08: ffffc90000007a50 R09: ffffc90000007a18 [ 1178.704058][ C0] R10: dffffc0000000000 R11: fffff52000000f45 R12: ffffc90000000000 [ 1178.704077][ C0] R13: ffffffff8177927f R14: ffffc900000079c8 R15: ffffc90000007a60 [ 1178.704100][ C0] FS: 0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 1178.704128][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1178.704146][ C0] CR2: 00007ffc83d93c04 CR3: 0000000020f7c000 CR4: 0000000000350ef0 [ 1178.704168][ C0] Call Trace: [ 1178.704179][ C0] [ 1178.704195][ C0] ? arch_stack_walk+0xe3/0x150 [ 1178.704226][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1178.704259][ C0] __unwind_start+0x514/0x660 [ 1178.704290][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1178.704327][ C0] arch_stack_walk+0xe3/0x150 [ 1178.704358][ C0] ? stack_trace_save+0xa9/0x100 [ 1178.704395][ C0] stack_trace_save+0xa9/0x100 [ 1178.704428][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1178.704459][ C0] ? stack_trace_save+0xa9/0x100 [ 1178.704496][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1178.704527][ C0] ? __lock_acquire+0x683/0x2cf0