last executing test programs: 47.650903458s ago: executing program 3 (id=17): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'gretap0\x00', @ifru_addrs=@ethernet={0x1, @local}}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) bind$llc(r1, &(0x7f0000000200)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10) bind$llc(r1, &(0x7f0000000300)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @broadcast}, 0x10) 47.386666545s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/mptcp/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n\x00', 0x2) 47.009211827s ago: executing program 2 (id=22): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)='espintcp\x00', 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write(r0, &(0x7f0000000100)="0008000000000102", 0x8) recvfrom$inet(r0, &(0x7f0000000200), 0x10, 0x0, 0x0, 0x0) 46.998605348s ago: executing program 3 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='proto\x00', &(0x7f0000000700)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='port\x00', &(0x7f0000000b00)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001000)='mountport\x00', &(0x7f0000001100)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001200)='mountproto\x00', &(0x7f0000001300)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) accept(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ed) mount(&(0x7f0000000380)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f00000003a0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/sunrpc/xprt-switches/xprt-switch-0/xprt-0-tcp/dstaddr\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='127.0.0.1\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/sunrpc/xprt-switches/xprt-switch-0/xprt-0-tcp/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='offline\n\x00', 0x8) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 46.71205505s ago: executing program 2 (id=24): mkdirat(0x9, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0x9, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9) close(r0) r1 = openat(0x9, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) mkdirat(0x9, &(0x7f00000001c0)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./rpc_pipefs\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0x9, &(0x7f0000000280)='./rpc_pipefs/cache/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 testuser\n', 0x77) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = socket(0x2, 0x1, 0x0) connect(r3, &(0x7f0000000600)=@in={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000700)="800000c8123456780000000000000002000186a300000003000000000000000600000034000000010000000000000001000000030000000a7465737468616e646c650000000000060000001c040400ffffff00f0000000000000010000000000000000000000000000002c0000000100"/151, 0x97) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 46.301393069s ago: executing program 2 (id=27): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='vers\x00', &(0x7f0000000300)='4.2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='xprtsec\x00', &(0x7f0000000700)='mtls\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='addr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000001000), 0x28, 0x100, 0x0, 0x0) writev(r2, &(0x7f0000002000)=[{&(0x7f0000002100)="80000020", 0x4}, {&(0x7f0000001004)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000002200)="000000010000000000000000000000085354415254544c5300000000", 0x1c}], 0x3) 45.556058121s ago: executing program 3 (id=28): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000100)=0x54) 45.365924273s ago: executing program 3 (id=30): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000300)='sit0:0\x00'/16, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x890b, &(0x7f0000000100)="00000000000000000200000000000000000000000000000002000000000000000000000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000000000000030000007f00"/126) 45.171901326s ago: executing program 3 (id=31): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\n', 0x2) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'lo\x00', {0x2, 0x0, @loopback}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000700)={0x2, 0x4e24, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000900)='hello', 0x5) read(r6, &(0x7f0000000a00), 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x1}, 0x0) 45.088502461s ago: executing program 2 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="b40000000001010400000000141a0000020000002400018014000180080001007f000001080002007f0000010c00028005000100060000000800020010000800030054062400028014000180080001007f000002080002007f0000010c000280050001000600000008000200540608000300100008000340000000180c000f800a000140482e32343500000800074000000100"], 0xb4}, 0x1, 0x0, 0x0, 0x401}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_int(r1, 0x1, 0x2, &(0x7f0000000100)=0x1, 0x4) bind$inet(r1, &(0x7f0000000300)={0x2, 0x5406, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000340)={0x2, 0x1000, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000380)={0x2, 0x5406, @loopback}, 0x10) write(r2, &(0x7f0000000400)="0300002000"/32, 0x20) 44.598320536s ago: executing program 2 (id=34): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) syz_clone(0x10011, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, 0xa) close(r0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) close(0xa) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) 44.228129279s ago: executing program 2 (id=37): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) unshare(0x40000000) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 44.009017761s ago: executing program 0 (id=38): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000000), 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x4d2, 0x33}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x4c, 0x1, {{'digest_null\x00'}, 0x20, "00010203"}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000000), 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@newpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x33}, 0x2, @in=@empty, 0x0, 0x1}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) write(r1, &(0x7f0000000200)="1234567890", 0xa) 43.659104935s ago: executing program 0 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5b4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe8}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000200)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x5000, @loopback}, 0x10) 42.659682852s ago: executing program 0 (id=40): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x1, 0x1, 0x0) bind(r1, &(0x7f0000000000)=@un=@file={0x1, 'test_unix_sock1\x00'}, 0x12) socket(0x1, 0x1, 0x0) socket(0x1, 0x1, 0x0) socket(0x1, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000100000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) 42.46285895s ago: executing program 0 (id=41): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400010301000000000000002c000000000000001800"/36], 0x24}}, 0x0) 42.230246472s ago: executing program 0 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000050)={0x0, r1, 0x1}, 0x14}}, 0x0) 42.022651893s ago: executing program 0 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='3\n\x00', 0x2) write(r1, &(0x7f00000001c0)='4\n\x00', 0x2) write(r1, &(0x7f0000000200)='5\n\x00', 0x2) write(r1, &(0x7f0000000240)='6\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) 29.370685075s ago: executing program 32 (id=31): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\n', 0x2) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'lo\x00', {0x2, 0x0, @loopback}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000700)={0x2, 0x4e24, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000900)='hello', 0x5) read(r6, &(0x7f0000000a00), 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x1}, 0x0) 29.228632963s ago: executing program 1 (id=54): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x6c}, {@in6=@remote, 0x1234, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 28.933869923s ago: executing program 33 (id=37): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) unshare(0x40000000) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 27.121790317s ago: executing program 1 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}}, [@NFT_MSG_NEWTABLE={0x20, 0xa00, 0x1, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0xa01, 0x1, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0xa0, 0xa02, 0x1, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, '\x00\x00\x00\x00'}]}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "ffffffff"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}}}, 0x120}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="1234", 0x4, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) 26.181529891s ago: executing program 34 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='3\n\x00', 0x2) write(r1, &(0x7f00000001c0)='4\n\x00', 0x2) write(r1, &(0x7f0000000200)='5\n\x00', 0x2) write(r1, &(0x7f0000000240)='6\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) 24.030089264s ago: executing program 1 (id=58): r0 = socket$tipc(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) accept4$tipc(r0, 0x0, 0x0, 0x800) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 23.245061945s ago: executing program 1 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='11 1', 0x4) close(r0) 18.104995931s ago: executing program 1 (id=60): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r2, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) 16.491887308s ago: executing program 1 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000540)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f0000000580)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) 0s ago: executing program 35 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000540)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f0000000580)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 86.662396][ T5575] cgroup: Unknown subsys name 'net' [ 86.940195][ T5575] cgroup: Unknown subsys name 'cpuset' [ 86.998655][ T5575] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.968785][ T5575] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.611397][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.642973][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.670851][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.688980][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.692718][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.696533][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.697445][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.708404][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.710599][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.712334][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.760637][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.761947][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.762865][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.765337][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.771328][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.806760][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.810807][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.816140][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.819395][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.842492][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.056164][ T10] cfg80211: failed to load regulatory.db [ 93.901100][ T5605] Bluetooth: hci1: command tx timeout [ 93.968096][ T5605] Bluetooth: hci2: command tx timeout [ 94.002283][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.003476][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.003705][ T5591] bridge_slave_0: entered allmulticast mode [ 94.006775][ T5591] bridge_slave_0: entered promiscuous mode [ 94.051094][ T5605] Bluetooth: hci0: command tx timeout [ 94.059077][ T5605] Bluetooth: hci3: command tx timeout [ 94.100889][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.101224][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.101540][ T5591] bridge_slave_1: entered allmulticast mode [ 94.104095][ T5591] bridge_slave_1: entered promiscuous mode [ 94.192672][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.192928][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.193128][ T5592] bridge_slave_0: entered allmulticast mode [ 94.195758][ T5592] bridge_slave_0: entered promiscuous mode [ 94.256524][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.256874][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.257157][ T5592] bridge_slave_1: entered allmulticast mode [ 94.275896][ T5592] bridge_slave_1: entered promiscuous mode [ 94.317741][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.374329][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.457211][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.482585][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.482943][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.483239][ T5589] bridge_slave_0: entered allmulticast mode [ 94.486011][ T5589] bridge_slave_0: entered promiscuous mode [ 94.613423][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.613867][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.614196][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.614633][ T5593] bridge_slave_0: entered allmulticast mode [ 94.617107][ T5593] bridge_slave_0: entered promiscuous mode [ 94.656809][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.657176][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.657434][ T5589] bridge_slave_1: entered allmulticast mode [ 94.670594][ T5589] bridge_slave_1: entered promiscuous mode [ 94.686040][ T5591] team0: Port device team_slave_0 added [ 94.711529][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.711803][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.712003][ T5593] bridge_slave_1: entered allmulticast mode [ 94.714406][ T5593] bridge_slave_1: entered promiscuous mode [ 94.759008][ T5591] team0: Port device team_slave_1 added [ 94.853650][ T5592] team0: Port device team_slave_0 added [ 94.881073][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.911627][ T5592] team0: Port device team_slave_1 added [ 94.917125][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.937336][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.947105][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.947157][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.947223][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.007749][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.035742][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.035754][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.035774][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.135850][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.135863][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.135880][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.193927][ T5589] team0: Port device team_slave_0 added [ 95.200092][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.200106][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.200168][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.225251][ T5593] team0: Port device team_slave_0 added [ 95.242154][ T5589] team0: Port device team_slave_1 added [ 95.284312][ T5593] team0: Port device team_slave_1 added [ 95.406309][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.406321][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.406338][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.455173][ T5591] hsr_slave_0: entered promiscuous mode [ 95.457021][ T5591] hsr_slave_1: entered promiscuous mode [ 95.492140][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.492153][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.492172][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.494855][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.494866][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.494885][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.571208][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.571258][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.571334][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.639206][ T5592] hsr_slave_0: entered promiscuous mode [ 95.640987][ T5592] hsr_slave_1: entered promiscuous mode [ 95.642589][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 95.642693][ T5592] Cannot create hsr debugfs directory [ 95.970133][ T5605] Bluetooth: hci1: command tx timeout [ 96.048109][ T5605] Bluetooth: hci2: command tx timeout [ 96.113278][ T5589] hsr_slave_0: entered promiscuous mode [ 96.115010][ T5589] hsr_slave_1: entered promiscuous mode [ 96.116437][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 96.116461][ T5589] Cannot create hsr debugfs directory [ 96.129001][ T5605] Bluetooth: hci3: command tx timeout [ 96.129016][ T5596] Bluetooth: hci0: command tx timeout [ 96.179737][ T5593] hsr_slave_0: entered promiscuous mode [ 96.181489][ T5593] hsr_slave_1: entered promiscuous mode [ 96.182882][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 96.182903][ T5593] Cannot create hsr debugfs directory [ 96.957129][ T5591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.022441][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.036708][ T5591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.074340][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.085888][ T5591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.115123][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.143806][ T5591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.184639][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.294730][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.324144][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.340734][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.383151][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.387077][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.424015][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.454208][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.484050][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.645825][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.673490][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.691724][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.735581][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.753748][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.782712][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.812437][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.845487][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.014445][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.046912][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.058272][ T5605] Bluetooth: hci1: command tx timeout [ 98.076872][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.104025][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.110947][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.128620][ T5605] Bluetooth: hci2: command tx timeout [ 98.147372][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.174756][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.205433][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.208535][ T5605] Bluetooth: hci3: command tx timeout [ 98.209121][ T5596] Bluetooth: hci0: command tx timeout [ 98.263726][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.371938][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.431042][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.431854][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.472908][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.494783][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.494886][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.634635][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.689728][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.690695][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.745415][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.784974][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.794192][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.886223][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.975614][ T1536] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.977713][ T1536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.026991][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.172607][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.172777][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.275087][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.334230][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.334745][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.443375][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.445632][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.012183][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.130861][ T5605] Bluetooth: hci1: command tx timeout [ 100.209017][ T5605] Bluetooth: hci2: command tx timeout [ 100.291933][ T5605] Bluetooth: hci0: command tx timeout [ 100.301078][ T5605] Bluetooth: hci3: command tx timeout [ 100.494672][ T5591] veth0_vlan: entered promiscuous mode [ 100.517077][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.616551][ T5591] veth1_vlan: entered promiscuous mode [ 100.870976][ T5592] veth0_vlan: entered promiscuous mode [ 100.925433][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.970328][ T5592] veth1_vlan: entered promiscuous mode [ 101.000413][ T5591] veth0_macvtap: entered promiscuous mode [ 101.047430][ T5591] veth1_macvtap: entered promiscuous mode [ 101.080439][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.158914][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.217169][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.233457][ T5592] veth0_macvtap: entered promiscuous mode [ 101.303390][ T5592] veth1_macvtap: entered promiscuous mode [ 101.316668][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.326178][ T5589] veth0_vlan: entered promiscuous mode [ 101.342052][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.366260][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.392471][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.487173][ T5589] veth1_vlan: entered promiscuous mode [ 101.514946][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.579613][ T5593] veth0_vlan: entered promiscuous mode [ 101.628021][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.832740][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.835135][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.866297][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.878501][ T5593] veth1_vlan: entered promiscuous mode [ 101.897530][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.014343][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.014364][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.065115][ T5589] veth0_macvtap: entered promiscuous mode [ 102.135232][ T5589] veth1_macvtap: entered promiscuous mode [ 102.378340][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.378360][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.480778][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.480797][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.535230][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.561111][ T5593] veth0_macvtap: entered promiscuous mode [ 102.586645][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.659052][ T5593] veth1_macvtap: entered promiscuous mode [ 102.672967][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.672986][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.705257][ T1135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.731877][ T1135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.796033][ T1135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.837273][ T1135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.947382][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.154739][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.385856][ T1135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.455561][ T1135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.519818][ T1135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.592390][ T1135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.754740][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.754761][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.254485][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.254506][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.352547][ T5756] lo speed is unknown, defaulting to 1000 [ 104.376176][ T5757] lo speed is unknown, defaulting to 1000 [ 104.430170][ T5760] rdma_op ffff888037093270 conn xmit_rdma 0000000000000000 [ 104.514374][ T5757] lo speed is unknown, defaulting to 1000 [ 104.528178][ T5756] lo speed is unknown, defaulting to 1000 [ 104.611915][ T5756] lo speed is unknown, defaulting to 1000 [ 104.632609][ T5757] lo speed is unknown, defaulting to 1000 [ 104.679957][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.679979][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.711656][ T5757] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 104.711696][ T5757] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 104.711747][ T5757] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 104.875299][ T5757] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.964701][ T5757] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.175542][ T722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.175559][ T722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.648480][ T5757] lo speed is unknown, defaulting to 1000 [ 105.702356][ T5757] lo speed is unknown, defaulting to 1000 [ 105.719267][ T5757] lo speed is unknown, defaulting to 1000 [ 105.723621][ T5757] lo speed is unknown, defaulting to 1000 [ 105.787483][ T5756] infiniband syz0: set active [ 105.829579][ T5756] infiniband syz0: added lo [ 105.857000][ T5756] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 105.861976][ T5756] infiniband syz0: Couldn't open port 1 [ 105.862364][ T5756] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 105.862396][ T5756] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 105.862437][ T5756] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 105.932728][ T198] lo speed is unknown, defaulting to 1000 [ 106.194691][ T5756] RDS/IB: syz0: added [ 106.250985][ T5756] smc: adding ib device syz0 with port count 1 [ 106.251575][ T5756] smc: ib device syz0 port 1 has no pnetid [ 106.347233][ T5756] lo speed is unknown, defaulting to 1000 [ 106.450988][ T822] lo speed is unknown, defaulting to 1000 [ 107.722607][ T5793] Zero length message leads to an empty skb [ 108.267544][ T5803] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 108.512015][ T5756] lo speed is unknown, defaulting to 1000 [ 109.831524][ T5756] lo speed is unknown, defaulting to 1000 [ 110.514950][ T5838] netlink: 116 bytes leftover after parsing attributes in process `syz.2.32'. [ 111.064868][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 111.064908][ T5847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 111.064938][ T5847] netlink: 56 bytes leftover after parsing attributes in process `syz.0.36'. [ 111.113651][ T5834] lo speed is unknown, defaulting to 1000 [ 111.967265][ T5756] lo speed is unknown, defaulting to 1000 [ 111.993434][ T5834] lo speed is unknown, defaulting to 1000 [ 112.894513][ T5850] lo speed is unknown, defaulting to 1000 [ 114.995202][ T5850] lo speed is unknown, defaulting to 1000 [ 122.646622][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'. [ 126.951002][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.026108][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.041142][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.044955][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.047000][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.453209][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.488747][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.490659][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.491991][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.493549][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.058098][ T5596] Bluetooth: hci5: command tx timeout [ 130.351083][ T5596] Bluetooth: hci4: command tx timeout [ 131.386500][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.434949][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.438377][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.442689][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.444654][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.142508][ T5605] Bluetooth: hci5: command tx timeout [ 132.368316][ T5605] Bluetooth: hci4: command tx timeout [ 132.856799][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867437][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.609318][ T5605] Bluetooth: hci6: command tx timeout [ 135.465732][ T5605] Bluetooth: hci5: command tx timeout [ 135.465768][ T5605] Bluetooth: hci4: command tx timeout [ 135.484038][ T5910] lo speed is unknown, defaulting to 1000 [ 135.648119][ T5596] Bluetooth: hci6: command tx timeout [ 137.059232][ T1022] netdevsim netdevsim11 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.614865][ T5605] Bluetooth: hci5: command tx timeout [ 137.614923][ T5596] Bluetooth: hci4: command tx timeout [ 137.803731][ T5596] Bluetooth: hci6: command tx timeout [ 138.418385][ T5950] syz0: rxe_newlink: already configured on lo [ 139.424683][ T5910] lo speed is unknown, defaulting to 1000 [ 139.457043][ T5908] lo speed is unknown, defaulting to 1000 [ 140.426851][ T5596] Bluetooth: hci6: command tx timeout [ 141.465859][ T5908] lo speed is unknown, defaulting to 1000 [ 141.476979][ T5921] lo speed is unknown, defaulting to 1000 [ 144.913502][ T5921] lo speed is unknown, defaulting to 1000 [ 154.990820][ T1022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.326156][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.368872][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.372277][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.394713][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.561835][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.728070][ T5596] Bluetooth: hci0: command tx timeout [ 161.808839][ T5596] Bluetooth: hci0: command tx timeout [ 162.075369][ T1022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.429956][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.430426][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.430733][ T5910] bridge_slave_0: entered allmulticast mode [ 162.460791][ T5910] bridge_slave_0: entered promiscuous mode [ 162.520412][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.520807][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.521254][ T5908] bridge_slave_0: entered allmulticast mode [ 162.568186][ T5908] bridge_slave_0: entered promiscuous mode [ 162.633919][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.634316][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.634634][ T5910] bridge_slave_1: entered allmulticast mode [ 162.699201][ T5910] bridge_slave_1: entered promiscuous mode [ 162.888333][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.888710][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.889060][ T5908] bridge_slave_1: entered allmulticast mode [ 162.924771][ T5908] bridge_slave_1: entered promiscuous mode [ 164.148294][ T5596] Bluetooth: hci0: command tx timeout [ 165.312606][ T1022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.208274][ T5596] Bluetooth: hci0: command tx timeout [ 166.651966][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.705207][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.686762][ T1022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.054767][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.131448][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.353251][ T5910] team0: Port device team_slave_0 added [ 172.451639][ T5908] team0: Port device team_slave_0 added [ 172.468200][ T5910] team0: Port device team_slave_1 added [ 172.468407][ T5969] lo speed is unknown, defaulting to 1000 [ 172.527497][ T5908] team0: Port device team_slave_1 added [ 174.685599][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.685617][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.685644][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.860516][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.860535][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.860563][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.874594][ T5969] lo speed is unknown, defaulting to 1000 [ 174.902288][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.902317][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.902345][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.264674][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.264691][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.264721][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.584483][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.697940][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.698366][ T5921] bridge_slave_0: entered allmulticast mode [ 177.703397][ T5921] bridge_slave_0: entered promiscuous mode [ 177.855319][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.855714][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.856039][ T5921] bridge_slave_1: entered allmulticast mode [ 177.878279][ T5921] bridge_slave_1: entered promiscuous mode [ 181.524081][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.608793][ T5908] hsr_slave_0: entered promiscuous mode [ 181.614674][ T5908] hsr_slave_1: entered promiscuous mode [ 181.631875][ T5908] debugfs: 'hsr0' already exists in 'hsr' [ 181.631909][ T5908] Cannot create hsr debugfs directory [ 181.679722][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.443043][ T5921] team0: Port device team_slave_0 added [ 184.848202][ T1022] bridge_slave_1: left allmulticast mode [ 184.848360][ T1022] bridge_slave_1: left promiscuous mode [ 184.874903][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.463095][ T1022] bridge_slave_0: left allmulticast mode [ 185.463134][ T1022] bridge_slave_0: left promiscuous mode [ 185.463414][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.063446][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.097069][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.116388][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.126076][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.127579][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.408895][ T5596] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.455259][ T5596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.486975][ T5596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.571814][ T5596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.630811][ T5596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.768069][ T5605] Bluetooth: hci7: command tx timeout [ 190.999034][ T5605] Bluetooth: hci3: command tx timeout [ 192.847997][ T5605] Bluetooth: hci7: command tx timeout [ 193.008028][ T5605] Bluetooth: hci3: command tx timeout [ 193.911707][ T5596] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 193.915873][ T5596] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 193.933268][ T5596] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 193.934920][ T5596] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 193.936366][ T5596] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 194.354096][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.354206][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.928257][ T5605] Bluetooth: hci7: command tx timeout [ 195.097982][ T5605] Bluetooth: hci3: command tx timeout [ 195.968944][ T5605] Bluetooth: hci8: command tx timeout [ 197.037158][ T5605] Bluetooth: hci7: command tx timeout [ 197.798146][ T5605] Bluetooth: hci3: command tx timeout [ 197.922314][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.128114][ T5605] Bluetooth: hci8: command tx timeout [ 199.949695][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.045266][ T1022] bond0 (unregistering): Released all slaves [ 200.126668][ T5910] hsr_slave_0: entered promiscuous mode [ 200.207968][ T5605] Bluetooth: hci8: command tx timeout [ 200.236150][ T5910] hsr_slave_1: entered promiscuous mode [ 200.410772][ T5910] debugfs: 'hsr0' already exists in 'hsr' [ 200.412301][ T5910] Cannot create hsr debugfs directory [ 201.012019][ T5921] team0: Port device team_slave_1 added [ 202.380417][ T5605] Bluetooth: hci8: command tx timeout [ 205.166315][ T6014] lo speed is unknown, defaulting to 1000 [ 205.408140][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.408503][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.408842][ T5969] bridge_slave_0: entered allmulticast mode [ 205.446467][ T5969] bridge_slave_0: entered promiscuous mode [ 205.533974][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.537646][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.555823][ T5969] bridge_slave_1: entered allmulticast mode [ 205.599668][ T5969] bridge_slave_1: entered promiscuous mode [ 206.079231][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.222001][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.078862][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 217.158186][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 217.699743][ T5600] Bluetooth: hci2: command 0x0406 tx timeout [ 217.965297][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.003157][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.007132][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.047139][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.082415][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.530662][ T5910] syz-executor (5910) used greatest stack depth: 19776 bytes left [ 221.133469][ T5969] team0: Port device team_slave_0 added [ 221.141139][ T6001] lo speed is unknown, defaulting to 1000 [ 221.144281][ T6014] lo speed is unknown, defaulting to 1000 [ 222.588099][ T5605] Bluetooth: hci4: command tx timeout [ 224.608010][ T5605] Bluetooth: hci4: command tx timeout [ 225.410724][ T6009] lo speed is unknown, defaulting to 1000 [ 225.416821][ T6001] lo speed is unknown, defaulting to 1000 [ 226.858751][ T5605] Bluetooth: hci4: command tx timeout [ 229.670551][ T5605] Bluetooth: hci4: command tx timeout [ 234.843386][ T6009] lo speed is unknown, defaulting to 1000 [ 236.926099][ T6068] lo speed is unknown, defaulting to 1000 [ 243.129485][ T1022] hsr_slave_0: left promiscuous mode [ 243.496315][ T1022] hsr_slave_1: left promiscuous mode [ 243.521448][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.521558][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.638091][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.638121][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.285548][ T1022] veth1_macvtap: left promiscuous mode [ 244.286113][ T1022] veth0_macvtap: left promiscuous mode [ 244.286590][ T1022] veth1_vlan: left promiscuous mode [ 244.287052][ T1022] veth0_vlan: left promiscuous mode [ 249.406991][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.445513][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.455822][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.469534][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.470506][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.893787][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.948302][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.949520][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.954694][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.955496][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.568141][ T5605] Bluetooth: hci0: command tx timeout [ 251.626019][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 252.048026][ T5605] Bluetooth: hci5: command tx timeout [ 253.457804][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.485981][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.495227][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.568353][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.585768][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.612543][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 253.652748][ T5600] Bluetooth: hci0: command tx timeout [ 254.129099][ T5605] Bluetooth: hci5: command tx timeout [ 256.074406][ T5605] Bluetooth: hci6: command tx timeout [ 256.075063][ T5600] Bluetooth: hci0: command tx timeout [ 256.207954][ T5596] Bluetooth: hci5: command tx timeout [ 257.065890][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.066009][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.321366][ T5600] Bluetooth: hci5: command tx timeout [ 259.088817][ T5600] Bluetooth: hci6: command tx timeout [ 261.167982][ T5600] Bluetooth: hci6: command tx timeout [ 262.143476][ T5600] Bluetooth: hci0: command tx timeout [ 262.377686][ T6068] lo speed is unknown, defaulting to 1000 [ 262.478964][ T5251] 8021q: adding VLAN 0 to HW filter on device eth2 [ 263.249281][ T5600] Bluetooth: hci6: command tx timeout [ 266.228089][ T6101] lo speed is unknown, defaulting to 1000 [ 269.280217][ T6101] lo speed is unknown, defaulting to 1000 [ 269.281923][ T6113] lo speed is unknown, defaulting to 1000 [ 271.525174][ T39] INFO: task syz.0.43:5869 blocked for more than 144 seconds. [ 271.525215][ T39] Not tainted syzkaller #0 [ 271.525226][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.525237][ T39] task:syz.0.43 state:D stack:28680 pid:5869 tgid:5867 ppid:5591 task_flags:0x400040 flags:0x00080002 [ 271.527939][ T39] Call Trace: [ 271.527952][ T39] [ 271.527966][ T39] __schedule+0x1709/0x5530 [ 271.528030][ T39] ? irqentry_exit+0x218/0x8f0 [ 271.528051][ T39] ? trace_irq_disable+0x3b/0x140 [ 271.528076][ T39] ? __pfx___schedule+0x10/0x10 [ 271.528125][ T39] rt_mutex_schedule+0x76/0xf0 [ 271.528147][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 271.528185][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 271.528217][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 271.528250][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 271.528280][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 271.528351][ T39] ? fdget_pos+0x252/0x320 [ 271.528399][ T39] ? fdget_pos+0x252/0x320 [ 271.528421][ T39] mutex_lock_nested+0x168/0x1d0 [ 271.528448][ T39] ? __fget_files+0x2a/0x420 [ 271.528476][ T39] fdget_pos+0x252/0x320 [ 271.528502][ T39] ksys_write+0x79/0x270 [ 271.528533][ T39] ? __pfx_ksys_write+0x10/0x10 [ 271.528556][ T39] ? __pfx_kcov_ioctl+0x10/0x10 [ 271.528601][ T39] do_syscall_64+0x17b/0x530 [ 271.528624][ T39] ? irqentry_exit+0x10f/0x8f0 [ 271.528645][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.528669][ T39] ? clear_bhb_loop+0x40/0x90 [ 271.528697][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.528720][ T39] RIP: 0033:0x7f293e04e019 [ 271.528749][ T39] RSP: 002b:00007f293c285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.528772][ T39] RAX: ffffffffffffffda RBX: 00007f293e2d6090 RCX: 00007f293e04e019 [ 271.528789][ T39] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000004 [ 271.528803][ T39] RBP: 00007f293e0e500c R08: 0000000000000000 R09: 0000000000000000 [ 271.528817][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.528830][ T39] R13: 00007f293e2d6128 R14: 00007f293e2d6090 R15: 00007ffc563e96a8 [ 271.528866][ T39] [ 271.528876][ T39] INFO: task syz.0.43:5870 blocked for more than 144 seconds. [ 271.528893][ T39] Not tainted syzkaller #0 [ 271.528904][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.528913][ T39] task:syz.0.43 state:D stack:28872 pid:5870 tgid:5867 ppid:5591 task_flags:0x400040 flags:0x00080002 [ 271.528990][ T39] Call Trace: [ 271.528997][ T39] [ 271.529010][ T39] __schedule+0x1709/0x5530 [ 271.536039][ T39] ? __pfx___schedule+0x10/0x10 [ 271.536098][ T39] rt_mutex_schedule+0x76/0xf0 [ 271.536122][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 271.536167][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 271.536200][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 271.536232][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 271.536279][ T39] ? fdget_pos+0x252/0x320 [ 271.536309][ T39] ? fdget_pos+0x252/0x320 [ 271.536341][ T39] mutex_lock_nested+0x168/0x1d0 [ 271.536369][ T39] ? __fget_files+0x2a/0x420 [ 271.536397][ T39] fdget_pos+0x252/0x320 [ 271.536423][ T39] ksys_write+0x79/0x270 [ 271.536453][ T39] ? __pfx_ksys_write+0x10/0x10 [ 271.536477][ T39] ? __pfx_kcov_ioctl+0x10/0x10 [ 271.536520][ T39] do_syscall_64+0x17b/0x530 [ 271.536543][ T39] ? irqentry_exit+0x10f/0x8f0 [ 271.536564][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.536588][ T39] ? clear_bhb_loop+0x40/0x90 [ 271.536616][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.536638][ T39] RIP: 0033:0x7f293e04e019 [ 271.536658][ T39] RSP: 002b:00007f293c264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.536681][ T39] RAX: ffffffffffffffda RBX: 00007f293e2d6180 RCX: 00007f293e04e019 [ 271.536697][ T39] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000004 [ 271.536711][ T39] RBP: 00007f293e0e500c R08: 0000000000000000 R09: 0000000000000000 [ 271.536725][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.536738][ T39] R13: 00007f293e2d6218 R14: 00007f293e2d6180 R15: 00007ffc563e96a8 [ 271.536774][ T39] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 271.536784][ T39] INFO: task syz.0.43:5871 blocked for more than 144 seconds. [ 271.536800][ T39] Not tainted syzkaller #0 [ 271.536811][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.536820][ T39] task:syz.0.43 state:D stack:28872 pid:5871 tgid:5867 ppid:5591 task_flags:0x400040 flags:0x00080002 [ 271.536905][ T39] Call Trace: [ 271.536912][ T39] [ 271.536925][ T39] __schedule+0x1709/0x5530 [ 271.536987][ T39] ? __pfx___schedule+0x10/0x10 [ 271.537035][ T39] rt_mutex_schedule+0x76/0xf0 [ 271.537057][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 271.537100][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 271.537131][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 271.537160][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 271.537205][ T39] ? fdget_pos+0x252/0x320 [ 271.537235][ T39] ? fdget_pos+0x252/0x320 [ 271.537274][ T39] mutex_lock_nested+0x168/0x1d0 [ 271.537301][ T39] ? __fget_files+0x2a/0x420 [ 271.537336][ T39] fdget_pos+0x252/0x320 [ 271.537381][ T39] ksys_write+0x79/0x270 [ 271.537410][ T39] ? __pfx_ksys_write+0x10/0x10 [ 271.537434][ T39] ? __pfx_kcov_ioctl+0x10/0x10 [ 271.537478][ T39] do_syscall_64+0x17b/0x530 [ 271.544932][ T39] ? irqentry_exit+0x10f/0x8f0 [ 271.544959][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.544982][ T39] ? clear_bhb_loop+0x40/0x90 [ 271.545010][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.545032][ T39] RIP: 0033:0x7f293e04e019 [ 271.545051][ T39] RSP: 002b:00007f293be41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.545073][ T39] RAX: ffffffffffffffda RBX: 00007f293e2d6270 RCX: 00007f293e04e019 [ 271.545090][ T39] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 271.545103][ T39] RBP: 00007f293e0e500c R08: 0000000000000000 R09: 0000000000000000 [ 271.545117][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.545130][ T39] R13: 00007f293e2d6308 R14: 00007f293e2d6270 R15: 00007ffc563e96a8 [ 271.545163][ T39] [ 271.545173][ T39] INFO: task syz.0.43:5872 blocked for more than 144 seconds. [ 271.545189][ T39] Not tainted syzkaller #0 [ 271.545199][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.545208][ T39] task:syz.0.43 state:D stack:28080 pid:5872 tgid:5867 ppid:5591 task_flags:0x400040 flags:0x00080002 [ 271.545271][ T39] Call Trace: [ 271.545278][ T39] [ 271.545290][ T39] __schedule+0x1709/0x5530 [ 271.545379][ T39] ? __pfx___schedule+0x10/0x10 [ 271.545430][ T39] rt_mutex_schedule+0x76/0xf0 [ 271.545452][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 271.545503][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 271.545534][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 271.545566][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 271.545595][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 271.545643][ T39] ? write_threads+0x3b4/0x610 [ 271.545681][ T39] ? write_threads+0x3b4/0x610 [ 271.545709][ T39] mutex_lock_nested+0x168/0x1d0 [ 271.545743][ T39] write_threads+0x3b4/0x610 [ 271.545797][ T39] ? __pfx_write_threads+0x10/0x10 [ 271.545850][ T39] ? _copy_from_user+0x94/0xb0 [ 271.545872][ T39] ? simple_transaction_get+0x130/0x170 [ 271.545899][ T39] nfsctl_transaction_write+0x112/0x160 [ 271.545934][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 271.545979][ T39] vfs_write+0x29f/0xbb0 [ 271.546013][ T39] ? __pfx_vfs_write+0x10/0x10 [ 271.546041][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 271.546062][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.546082][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.546103][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 271.546129][ T39] ? fdget_pos+0x252/0x320 [ 271.546180][ T39] ksys_write+0x156/0x270 [ 271.546210][ T39] ? __pfx_ksys_write+0x10/0x10 [ 271.546248][ T39] do_syscall_64+0x17b/0x530 [ 271.546270][ T39] ? irqentry_exit+0x10f/0x8f0 [ 271.546291][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.546314][ T39] ? clear_bhb_loop+0x40/0x90 [ 271.546352][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.546374][ T39] RIP: 0033:0x7f293e04e019 [ 271.791778][ T39] RSP: 002b:00007f293ba1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.791807][ T39] RAX: ffffffffffffffda RBX: 00007f293e2d6360 RCX: 00007f293e04e019 [ 271.791836][ T39] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000005 [ 271.791849][ T39] RBP: 00007f293e0e500c R08: 0000000000000000 R09: 0000000000000000 [ 271.791862][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.791874][ T39] R13: 00007f293e2d63f8 R14: 00007f293e2d6360 R15: 00007ffc563e96a8 [ 271.791906][ T39] [ 271.791951][ T39] [ 271.791951][ T39] Showing all locks held in the system: [ 271.791961][ T39] locks held by kworker/0:1/10: 2, on CPU#0: [ 271.791976][ T39] #0: ffff88813fe63938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.792031][ T39] #1: ffffc900000f7c60 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.792080][ T39] locks held by kworker/u8:0/12: 5, last CPU#1: [ 271.792094][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.792141][ T39] #1: ffffc90000117c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.792190][ T39] #2: ffff88803a24e310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 271.792254][ T39] #3: ffff88803ba16120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 271.792321][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 271.792376][ T39] locks held by kworker/u8:1/13: 3, on CPU#0: [ 271.792390][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.792437][ T39] #1: ffffc90000127c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.792484][ T39] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 271.792533][ T39] locks held by ktimers/0/16: 5, last CPU#0: [ 271.792547][ T39] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 271.792595][ T39] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 271.792643][ T39] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 271.792712][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 271.792760][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 271.792811][ T39] locks held by pr/legacy/17: 3, last CPU#1: [ 271.792825][ T39] #0: ffffffff8e3b5a40 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 271.792886][ T39] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 271.792968][ T39] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 271.793028][ T39] locks held by rcub/0/19: 1, on CPU#1: [ 271.793043][ T39] #0: ffffffff8e3c9448 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x30d/0x4c0 [ 271.793102][ T39] locks held by ksoftirqd/1/31: 4, last CPU#1: [ 271.793118][ T39] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 271.793170][ T39] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 271.793221][ T39] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 271.974070][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 271.974125][ T39] locks held by kworker/1:0/32: 5, last CPU#1: [ 271.974141][ T39] #0: ffff88813fe62538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.974195][ T39] #1: ffffc90000a6fc60 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.974248][ T39] #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 271.974313][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 271.974365][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 271.974428][ T39] locks hel[ 271.974428][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 271.974443][ T39] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 271.974507][ T39] locks held by kworker/u8:7/1022: 4, on CPU#1: [ 271.974522][ T39] #0: ffff88801bee0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.974576][ T39] #1: ffffc90006927c60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.974626][ T39] #2: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 271.974684][ T39] #3: ffff888033665978 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 271.974737][ T39] locks held by kworker/u8:8/1035: 4, last CPU#1: [ 271.974753][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.974805][ T39] #1: ffffc90005d07c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.974858][ T39] #2: ffff88805e1008d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 271.974917][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 271.974970][ T39] locks held by kworker/u8:9/1135: 5, last CPU#1: [ 271.974985][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.975037][ T39] #1: ffffc90006cb7c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.975092][ T39] #2: ffff8880366d2310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 271.975164][ T39] #3: ffff88804d48f920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 271.975228][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 271.975301][ T39] locks held by kworker/u8:13/1536: 6, last CPU#1: [ 271.975318][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 271.975372][ T39] #1: ffffc90007a17c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 272.023278][ T39] #2: ffff888039bf0310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 272.023469][ T39] #3: ffff88803a8e1920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 272.023626][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 272.023796][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 272.023992][ T39] locks held by getty/5342: 2, on CPU#1: [ 272.024019][ T39] #0: ffff888029c0d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 272.024200][ T39] #1: ffffc900044be2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 272.024353][ T39] locks held by sshd-session/5574: 2, last CPU#0: [ 272.024394][ T39] #0: ffff88802b1a9318 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 272.024556][ T39] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x65/0x1b10 [ 272.024707][ T39] locks held by syz-executor/5575: 4, last CPU#1: [ 272.024742][ T39] #0: ffff888035b98430 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 272.024915][ T39] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 272.025095][ T39] #2: ffff8880122b24d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 272.025261][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 272.025440][ T39] locks held by syz.0.43/5868: 3, on CPU#0: [ 272.025473][ T39] #0: ffff888035378528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 272.025613][ T39] #1: ffff888038d8e510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 272.025758][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 272.025918][ T39] locks held by syz.0.43/5869: 1, on CPU#1: [ 272.025946][ T39] #0: ffff888035378528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 272.026076][ T39] locks held by syz.0.43/5870: 1, on CPU#1: [ 272.026115][ T39] #0: ffff888035378528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 272.026246][ T39] locks held by syz.0.43/5871: 1, on CPU#0: [ 272.026289][ T39] #0: ffff888035378528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 272.026445][ T39] locks held by syz.0.43/5872: 3, on CPU#1: [ 272.026495][ T39] #0: ffff888033f4af28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 272.026653][ T39] #1: ffff888038d8e510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 272.026818][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 272.026976][ T39] locks held by syz.1.61/5953: 3, on CPU#1: [ 272.027017][ T39] #0: ffff88803fa93328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 272.027161][ T39] #1: ffff88803db82510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 272.027321][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 272.038120][ T39] locks held by syz.1.61/5954: 3, on CPU#1: [ 272.038161][ T39] #0: ffff88803fa92728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 272.038294][ T39] #1: ffff88803db82510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 272.038440][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 272.038504][ T39] locks held by syz.1.61/5955: 3, on CPU#1: [ 272.038520][ T39] #0: ffff88803fa93128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 272.038573][ T39] #1: ffff88803db82510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 272.038632][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 272.038698][ T39] locks held by syz-executor/6001: 1, on CPU#1: [ 272.038714][ T39] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 272.038767][ T39] locks held by syz-executor/6009: 4, on CPU#1: [ 272.038788][ T39] #0: ffff88806aa08f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 272.038853][ T39] #1: ffff88806aa080b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 272.038908][ T39] #2: ffffffff8f948e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 272.038966][ T39] #3: ffff88805f8aa370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 272.039047][ T39] locks held by syz-executor/6014: 2, on CPU#1: [ 272.039063][ T39] #0: ffff888070838f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 272.039127][ T39] #1: ffff8880708380b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 272.039185][ T39] locks held by syz-executor/6068: 2, on CPU#1: [ 272.039199][ T39] #0: ffffffff8fd0e208 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 272.039266][ T39] #1: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 272.039326][ T39] locks held by syz-executor/6101: 2, on CPU#0: [ 272.039342][ T39] #0: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 272.039399][ T39] #1: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 272.039464][ T39] locks held by syz-executor/6107: 4, on CPU#0: [ 272.039480][ T39] #0: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 272.039536][ T39] #1: ffffffff8f510300 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 272.039589][ T39] #2: ffffffff8f510540 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 272.039642][ T39] #3: ffff8880223951c8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 272.039695][ T39] locks held by syz-executor/6113: 4, last CPU#0: [ 272.039711][ T39] #0: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 272.039786][ T39] #1: ffffffff8f510300 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 272.039850][ T39] #2: ffffffff8f510540 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 272.039896][ T39] #3: ffff8880223951c8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 272.039969][ T39] locks held by cmp/6152: 1, last CPU#0: [ 272.039997][ T39] #0: ffff88803ee23088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 272.040198][ T39] [ 272.040209][ T39] ============================================= [ 272.040209][ T39] [ 272.040251][ T39] NMI backtrace for cpu 0 [ 272.040299][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 272.040355][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.040383][ T39] Call Trace: [ 272.040402][ T39] [ 272.040421][ T39] dump_stack_lvl+0xe8/0x150 [ 272.040494][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 272.040582][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 272.040663][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 272.040754][ T39] sys_info+0x135/0x170 [ 272.040833][ T39] watchdog+0xfd7/0x1030 [ 272.040933][ T39] ? watchdog+0x1c7/0x1030 [ 272.041041][ T39] kthread+0x388/0x470 [ 272.041112][ T39] ? __pfx_watchdog+0x10/0x10 [ 272.041195][ T39] ? __pfx_kthread+0x10/0x10 [ 272.041285][ T39] ret_from_fork+0x514/0xb70 [ 272.041350][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 272.041380][ T39] ? __switch_to+0xc89/0x1420 [ 272.041492][ T39] ? __pfx_kthread+0x10/0x10 [ 272.041591][ T39] ret_from_fork_asm+0x1a/0x30 [ 272.041720][ T39] [ 272.041789][ T39] Sending NMI from CPU 0 to CPUs 1: [ 272.041851][ C1] NMI backtrace for cpu 1 [ 272.041870][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 272.041890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.041900][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 272.041924][ C1] Code: e8 6e 3b 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 92 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 272.041938][ C1] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 272.041953][ C1] RAX: 1ffffffff340f000 RBX: 00000000000003fd RCX: 0000000000000000 [ 272.041965][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 272.041975][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.041986][ C1] R10: dffffc0000000000 R11: ffffffff856067f0 R12: dffffc0000000000 [ 272.042000][ C1] R13: 0000000000000000 R14: ffffffff9a078580 R15: 0000000000000000 [ 272.042011][ C1] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 272.042026][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.042038][ C1] CR2: 00007ffd80f9bdcc CR3: 000000003ef92000 CR4: 00000000003526f0 [ 272.042053][ C1] Call Trace: [ 272.042059][ C1] [ 272.042067][ C1] wait_for_lsr+0x190/0x300 [ 272.042089][ C1] serial8250_console_write+0x113a/0x1b40 [ 272.042117][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 272.042141][ C1] ? console_flush_one_record+0x49d/0xb90 [ 272.042172][ C1] console_flush_one_record+0x667/0xb90 [ 272.042203][ C1] ? console_flush_one_record+0xfa/0xb90 [ 272.042232][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 272.042261][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 272.042287][ C1] legacy_kthread_func+0x1b6/0x250 [ 272.042316][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 272.042344][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 272.042369][ C1] ? __kthread_parkme+0x71/0x1f0 [ 272.042390][ C1] ? __kthread_parkme+0x196/0x1f0 [ 272.042413][ C1] kthread+0x388/0x470 [ 272.042437][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 272.042462][ C1] ? __pfx_kthread+0x10/0x10 [ 272.042486][ C1] ret_from_fork+0x514/0xb70 [ 272.042512][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 272.042536][ C1] ? __switch_to+0xc89/0x1420 [ 272.042558][ C1] ? __pfx_kthread+0x10/0x10 [ 272.042582][ C1] ret_from_fork_asm+0x1a/0x30 [ 272.042615][ C1] [ 273.030484][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 273.030507][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.030533][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.030546][ T39] Call Trace: [ 273.030555][ T39] [ 273.030564][ T39] vpanic+0x56c/0xa60 [ 273.030591][ T39] ? __pfx___schedule+0x10/0x10 [ 273.030625][ T39] ? __pfx_vpanic+0x10/0x10 [ 273.030655][ T39] panic+0xc5/0xd0 [ 273.030675][ T39] ? __pfx_panic+0x10/0x10 [ 273.030694][ T39] ? preempt_schedule_common+0x82/0xd0 [ 273.030727][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 273.030750][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 273.030784][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 273.030817][ T39] watchdog+0x1030/0x1030 [ 273.030857][ T39] ? watchdog+0x1c7/0x1030 [ 273.030896][ T39] kthread+0x388/0x470 [ 273.030924][ T39] ? __pfx_watchdog+0x10/0x10 [ 273.030953][ T39] ? __pfx_kthread+0x10/0x10 [ 273.030981][ T39] ret_from_fork+0x514/0xb70 [ 273.031013][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 273.031041][ T39] ? __switch_to+0xc89/0x1420 [ 273.031069][ T39] ? __pfx_kthread+0x10/0x10 [ 273.031098][ T39] ret_from_fork_asm+0x1a/0x30 [ 273.031143][ T39] [ 273.031774][ T39] Kernel Offset: disabled