last executing test programs:

2m28.252275602s ago: executing program 32 (id=2673):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x0, 0x0)
read(r2, &(0x7f0000000140)=""/64, 0x40)

2m25.734743338s ago: executing program 33 (id=2684):
unshare(0x40000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='udp 20000\n', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='1\n', 0x2)

2m25.22541247s ago: executing program 34 (id=2689):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='tcp 20000\n', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)

2m20.239679492s ago: executing program 35 (id=2699):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000120)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000160)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
read(r2, &(0x7f00000001a0)=""/128, 0x80)
close(r2)

2m18.729896959s ago: executing program 36 (id=2704):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='tcp 20000\n', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='-2 -3 +4\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\n', 0x2)
close(r2)

2m11.647100744s ago: executing program 7 (id=2739):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004850)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r2 = syz_open_dev$video4linux(0x0, 0x5, 0x141202)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, 0x0)
r3 = syz_open_dev$vim2m(0x0, 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffff0, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c)

2m11.443519609s ago: executing program 7 (id=2740):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='udp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000004c0)='1\n', 0x2)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)

2m5.219922283s ago: executing program 37 (id=2715):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
listen(r0, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x6f00, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='tcp 2049\n\x00', 0x9)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)='1\n\x00', 0x2)
close(r3)

2m5.196788552s ago: executing program 38 (id=2707):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='udp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00')
write(r2, &(0x7f0000000240)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000110000000102030405060708090a0b0c0d0e0f10\n', 0x6c)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000400)="123456780000000000000002000186a300000003000000000000000600000018000000010000000000000000000000010000000401020304000000060000001c040400ffffffffff00"/92, 0x4c, 0x0, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10)
close(r3)

2m0.708182155s ago: executing program 39 (id=2724):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='-2 -3\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='2049\n', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1\n', 0x2)

1m58.202074556s ago: executing program 40 (id=2731):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='1\n\x00', 0x2)
close(r1)

1m56.357163552s ago: executing program 41 (id=2740):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='udp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000004c0)='1\n', 0x2)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)

1m47.31334573s ago: executing program 2 (id=2812):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/1024, 0x400)

1m47.12084073s ago: executing program 2 (id=2813):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}})
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x2002, 0xfffffffe, 0x9, 0x0, 0x0)

1m46.920574675s ago: executing program 2 (id=2814):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, &(0x7f0000000180)=""/100, 0x64)
write$nci(r0, &(0x7f0000000500)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000600)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14)
read$nci(r0, &(0x7f0000000280)=""/100, 0x64)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
nanosleep(&(0x7f0000000d00)={0x0, 0x5f5e100}, 0x0)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
read$nci(r0, &(0x7f00000003c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000800)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
read$nci(r0, &(0x7f0000000440)=""/100, 0x64)
write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
read$nci(r0, &(0x7f0000000540)=""/100, 0x64)
write$nci(r0, &(0x7f0000000a00)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4)
nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0)

1m43.84689557s ago: executing program 2 (id=2831):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000800)={0x2, 0x6f, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='udp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n', 0x2)
close(r2)

1m38.67929249s ago: executing program 42 (id=2783):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='-2 -3\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='2049\n', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1\n', 0x2)

1m29.158811065s ago: executing program 43 (id=2830):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101402, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1002})
write(r0, &(0x7f0000000500)="ffffffffffff11223344556688ca5b500028003a00000000000001000001000012670000000000000000000000001122334411223344", 0x36)

1m28.657055466s ago: executing program 44 (id=2832):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)=' -3\n\x00', 0x4)
close(r0)

1m28.619076401s ago: executing program 45 (id=2831):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000800)={0x2, 0x6f, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='udp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n', 0x2)
close(r2)

1m27.651450995s ago: executing program 46 (id=2837):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6)
read$nci(r0, &(0x7f0000000340)=""/100, 0x64)
write$nci(r0, &(0x7f00000003c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14)
read$nci(r0, &(0x7f0000000400)=""/100, 0x64)
write$nci(r0, &(0x7f0000000480)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
read$nci(r0, &(0x7f0000000580)=""/100, 0x64)
write$nci(r0, &(0x7f0000000600)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
read$nci(r0, &(0x7f0000000640)=""/100, 0x64)
write$nci(r0, &(0x7f00000006c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
read$nci(r0, &(0x7f0000000700)=""/100, 0x64)
write$nci(r0, &(0x7f0000000780)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4)

1m22.163548026s ago: executing program 8 (id=2852):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="438801ffffffff02000100", 0xb}}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m21.949439065s ago: executing program 8 (id=2857):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14)
read$nci(r0, &(0x7f0000000380)=""/100, 0x64)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
read$nci(r0, &(0x7f00000005c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
read$nci(r0, &(0x7f0000000680)=""/100, 0x64)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4)
write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
read$nci(r0, &(0x7f0000000840)=""/100, 0x64)
write$nci(r0, &(0x7f00000008c0)=@NCI_OP_RF_DISCOVER_SELECT_RSP, 0x4)
write$nci(r0, &(0x7f0000000900)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x0, 0x0, 0x3, 0x5, 0x0, @a={0x0, 0x1, 0x1}}, 0x13)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x1)
connect$nfc_raw(r4, &(0x7f0000000940)={0x27, r1, 0x0, 0x1}, 0x10)
write(r4, &(0x7f0000000980)="1234", 0x4)

1m19.139409398s ago: executing program 47 (id=2850):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n\x00', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000200)='127.0.0.1:/\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])

1m12.716782532s ago: executing program 8 (id=2859):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000013000500"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000300)="0102030405060708", 0x8, 0x0, &(0x7f0000000400), 0x14)

1m12.380180781s ago: executing program 8 (id=2860):
setns(0xc9, 0x0)
r0 = socket(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000080), 0x12)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/x25/socket\x00', 0x0, 0x0)
read(r1, &(0x7f0000000300), 0x1000)

1m12.379847211s ago: executing program 7 (id=2854):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)=ANY=[], 0x298}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044002)
set_mempolicy(0x3, 0x0, 0x40)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
read(0xffffffffffffffff, &(0x7f0000000040), 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r1, 0x0, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)

1m12.168759483s ago: executing program 8 (id=2861):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c)
write(r1, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 1\n', 0x1c)
write(r1, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:11 1\n', 0x1c)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
write(r0, &(0x7f0000000340)='0\n', 0x2)
write(r1, &(0x7f0000000380)='disconnect 11:aa:aa:aa:aa:aa 0\n', 0x1f)
write(r1, &(0x7f00000003c0)='disconnect aa:aa:aa:aa:aa:10 0\n', 0x1f)
write(r1, &(0x7f0000000400)='disconnect aa:aa:aa:aa:aa:11 0\n', 0x1f)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

1m11.495962121s ago: executing program 8 (id=2864):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100), 0x2)

1m11.325347234s ago: executing program 7 (id=2865):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000500)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
write(r1, &(0x7f0000000800)="ffffffffffff001122334455080045000028000100004006f971c0a80101c0a8010204d204d200000000000000005002200000000000", 0x36)

1m11.142322428s ago: executing program 7 (id=2866):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
ioctl$sock_bt_hci(r0, 0x400448c9, 0x0)
syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="040e0e011efc0000080000000000000000"], 0x11)

1m9.669028039s ago: executing program 7 (id=2868):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
read(r0, &(0x7f0000000200)=""/100, 0x64)
write(r0, &(0x7f0000000140)='udp 20000\n', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/100, 0x64)
close(r1)

1m9.056054272s ago: executing program 9 (id=2869):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/devices\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/4096, 0x1000)

1m8.960994653s ago: executing program 9 (id=2870):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/kallsyms\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/config.gz\x00', 0x0, 0x0)

1m8.918436046s ago: executing program 48 (id=2856):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='-2 -3 +4 -4.1 -4.2\n', 0x13)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='udp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000004c0)='1\n', 0x2)

1m8.912305796s ago: executing program 9 (id=2872):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5, 0x40, 0x0, {}, {}, {0x1}, 0x1, @can={{0x1}}}, 0x48}}, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, &(0x7f0000000080)={0x1d, r1}, 0x10)
sendmsg$can_raw(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@can={{0x1}, 0x4}, 0x10}}, 0x0)
sendmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=@can={{0x1}, 0x8}, 0x10}}, 0x0)

1m8.615232334s ago: executing program 9 (id=2873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x134}}, 0x0)

1m8.492989604s ago: executing program 9 (id=2874):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp\x00', 0x9)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x1000, 0x4)
nanosleep(&(0x7f0000000100)={0x0, 0x2faf080}, 0x0)

1m8.21792823s ago: executing program 9 (id=2875):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-3 +4\n', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='udp 20000\n', 0xa)
close(r1)

56.0638363s ago: executing program 49 (id=2864):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100), 0x2)

54.566088848s ago: executing program 50 (id=2868):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
read(r0, &(0x7f0000000200)=""/100, 0x64)
write(r0, &(0x7f0000000140)='udp 20000\n', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/100, 0x64)
close(r1)

53.0684566s ago: executing program 51 (id=2875):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-3 +4\n', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='udp 20000\n', 0xa)
close(r1)

44.762223994s ago: executing program 1 (id=2914):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r3)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x8, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x20000800, 0x803ff, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x3, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x8, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb8b, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x1000, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x6, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0xfffe, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0x80000001, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0xffffffff, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0x249, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x8, 0x2, 0x60, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x7fff, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x200007, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x4000001, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0x9}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0x80000000, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8}, {0x9, 0x450, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x7, 0x7, 0xe}, {0x86, 0x9, 0x1, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0x94d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x1, 0x4}, {0x0, 0x8, 0x9, 0x10, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x9}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x1}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x5}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0xabc2974b7b1167cf}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

40.979926721s ago: executing program 1 (id=2916):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x6, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[], 0x6)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080))

39.90928009s ago: executing program 1 (id=2918):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, &(0x7f0000000380)=""/100, 0x64)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6)
read$nci(r0, &(0x7f0000000440)=""/100, 0x64)
write$nci(r0, &(0x7f00000004c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}]}, 0x24}}, 0x0)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
write$nci(r0, &(0x7f0000000940)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)

36.726872685s ago: executing program 1 (id=2924):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x1032})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/tap0/gro_flush_timeout\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='200000000\n', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/tap0/napi_defer_hard_irqs\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='10\n', 0x3)
close(r2)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'\x00', {0x2, 0x0, @rand_addr=0x64010101}})
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000280)=0x32, 0x4)
setsockopt$sock_int(r4, 0x1, 0x45, &(0x7f0000000290)=0x1, 0x4)
bind$inet(r4, &(0x7f00000002a0)={0x2, 0x4d2, @empty}, 0x10)
write(r0, &(0x7f0000000300)="ffffffffffff00112233445508004500002000014000401170c7640101026401010104d204d2000c000074657374", 0x2e)
recvfrom$inet(r4, &(0x7f0000000400), 0x100, 0x40, 0x0, 0x0)
write(r0, &(0x7f0000000500)="ffffffffffff00112233445508004500002c00024000400670c5640101026401010104d204d2000003e800000001501003e81194000061616161", 0x3a)
write(r0, &(0x7f0000000600)="ffffffffffff00112233445508004500002c00034000400670c4640101026401010104d204d2000003ec00000001501003e80f8e000062626262", 0x3a)

34.180202412s ago: executing program 1 (id=2927):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000340))
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x4, 0x2, 0x0, 0x8, 0x800, 0xffffffffffffffff, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x8000000000000000, 0xf17, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a0104000000000000000001000000"], 0xcc}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC=r7, @ANYBLOB="8f1a99f5d7e17d099adeb817d16ef229125d346a0bf0e9cf8d06f8e65ea796c1c76d0d8019aa108835edf2b0e88baafc7006ba446700ec4bb8bb6b5f15380d03ca8371c5d35ea591bd78e9b74de8545553a9573318f7e07e1988310394c78ed97135d8c490d78a978d68999dd0ea598f82731f75665d7ddd96f951b0608b8f87e16d32d87bce6307766ff81749ea04125eb19cf607c625b985a72bd2", @ANYRES64, @ANYRESOCT=0x0], 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
listns(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x39, &(0x7f00000000c0)={0x0, 0x2c}}, 0x40891)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
unshare(0x600)

33.92442511s ago: executing program 2 (id=2896):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/ports\x00', 0x2, 0x0)
read(r0, &(0x7f0000000300)=""/64, 0x40)

33.697428334s ago: executing program 2 (id=2928):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x5, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00240000000000001800128008000100677470000c00028005000500000000000800", @ANYRES32=r2], 0x40}}, 0x4000000)

33.143518822s ago: executing program 1 (id=2931):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
read(r0, &(0x7f00000001a0)=""/128, 0x80)
close(r0)

24.444482248s ago: executing program 3 (id=2947):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x601}, 0x20}}, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x20, 0x1}, 0x20}}, 0x0)
syz_emit_ethernet(0x3c, &(0x7f0000000500), 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

23.537244089s ago: executing program 3 (id=2950):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0)

23.409666752s ago: executing program 3 (id=2951):
syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000700000005", @ANYRES8=r0], 0x7c}}, 0x0)

21.104664499s ago: executing program 3 (id=2952):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x420, 0x51}, 0x0, &(0x7f0000000000), 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0xa, 0x4, 0xa80c00, 0x0, {}, {}, 0x0, 0x1, {0x0}, 0x2})
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f00000009c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x6, 0x2, 0x80, 0x40, 0x4}, 0x8, &(0x7f0000000480)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0x55, &(0x7f00000004c0)=@string={0x55, 0x3, "cec15cd0afb9ff4ec8217b9c0c1649077d54a203725ec5e21dfd1ce80a25bc75063430da40566db69b865d0e411a7f2e34ea747b51c2d0529d84bf7a5b86aa6b9c02e8d504c579b52bde35840178d615ce7a1d"}}, {0xc6, &(0x7f0000000540)=@string={0xc6, 0x3, "f58e51d2a13d8a71f78da38945a866198c165e12b6ced34016fdc07907f81eab7e2da1e2d486f1f7d9c6dd3f2b308ff887e6fe825c5b60096f5e653a77e8660904d4a858f637e377d5b84e35ba2ec262658b0f450184ad8d2f7c9a6ede23ae4a6e3790005af20fe0da41362130ba73e0c8e5325857de2bc1ce9d3ca2217034d901ffafcb19c65190e53d6b2be7b62d4bc969c1055caf7c7d107e86f2a97c4c0bc8e311be8a40e64388f6650cd4a1838c9bf43391f3a392f6e7b23fd42c264a6a8137c328"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x42c}}, {0xc7, &(0x7f0000000700)=@string={0xc7, 0x3, "452fd21a2f66fe07474b9e78bff3621ef119459622905e32fa6e1cb0896c85c39e349fd15bb3c5296f69dbc19b375310924d70301b1ea17b93d1373363da54c44ffc5bec00aa4750db3524d03cab94de8a607a766f185b472091e9badb466d79bf8b994633fba7555e995f1826e797bdc213cd3f112348ef86a31d3e4dfb8562449298a4a15784fe27c3e6cc94afa7e65bd34d5109d519b0a6352c5109e0618c89a8f9fa4a4b56a2547d27ad70620ba58a2501eccaa8fc4b4a242c8bd918e2cfd911fa7567"}}, {0xea, &(0x7f0000000800)=@string={0xea, 0x3, "3bcb387610388f3aa49f298e139febb167bc32d04d24dec7ca2c7e97f9b623f67d2d71037b6e9334cbd27eab2ae5999d026a9de59ee0a8a9d033265c2dd78bea095c32534237695fb4fbe1512123a2f5a21055df73a06c16bc042e4cfd03d1aff6307e4bc956735734ee997c2f613685b3e33ff0d95782f112524e193a8a85b88eac39980a2f04a66a128887075591f5b55305261f0f2f4d30cd14f3d7d5a2a63b5456dd2e437d85054f7212302b56d76f75e6a005af8541e6a4359f741b90c42e8e36db9e0fa8edf8b130b8b696b5f69626e3926f20ed53f2f8d03677fc852c27232bd0bda1b7b9"}}, {0x94, &(0x7f0000000900)=@string={0x94, 0x3, "d8ffafde301dcfc7451d728c0bf09f5155418108a3609167188a08d45ddaf212ca72b65cc8fab4107e17b3e9ef0e601f13f9ddc0479674076f54993baaf464c9510e02223efc0e3f1e900469a5d37d5af5ff60ef934fda51cac85ed71bfd8f1e32343b67866db1d935e1e5abbfc4c462dfade3dce5994b4480750e99489f237f8ff67541ec17308a9d839aa29e70d040581e"}}]})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4008000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e28, 0x3, @loopback, 0x40007}, 0x1c)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

18.861036967s ago: executing program 3 (id=2960):
socket(0x10, 0x803, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00')
socket$inet(0x2, 0x3, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0)

18.845626278s ago: executing program 3 (id=2961):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='udp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n', 0x2)
nanosleep(&(0x7f0000000600)={0x1}, 0x0)

18.549935407s ago: executing program 52 (id=2928):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x5, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00240000000000001800128008000100677470000c00028005000500000000000800", @ANYRES32=r2], 0x40}}, 0x4000000)

17.637991794s ago: executing program 53 (id=2931):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
read(r0, &(0x7f00000001a0)=""/128, 0x80)
close(r0)

7.315844494s ago: executing program 4 (id=2995):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write(r3, &(0x7f0000000500)="000000020104", 0x6)
read(r2, &(0x7f0000000310), 0x6)
sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10)
nanosleep(&(0x7f0000000600)={0x1}, 0x0)

6.814115678s ago: executing program 0 (id=2996):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x8, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x20000800, 0x803ff, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x3, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x8, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb8b, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x1000, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x6, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0xfffe, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0x80000001, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0xffffffff, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0x249, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x8, 0x2, 0x60, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x7fff, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x200007, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x4000001, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0x9}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0x80000000, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8}, {0x9, 0x450, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x7, 0x7, 0xe}, {0x86, 0x9, 0x1, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0x94d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x1, 0x4}, {0x0, 0x8, 0x9, 0x10, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x9}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x1}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x5}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0xabc2974b7b1167cf}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

6.724326244s ago: executing program 0 (id=2997):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x20)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f00000001c0)=<r2=>0x0, &(0x7f00000005c0)=<r3=>0x0)
syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000600)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000300))
socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

6.646474062s ago: executing program 0 (id=2998):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01010000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001"], 0xfc}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x2d)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x6)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil)
fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000)
creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc)
r5 = socket(0x11, 0x800000002, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000540)={'virt_wifi0\x00', {0x2, 0x0, @private=0xf30a4000}})

6.461565166s ago: executing program 5 (id=2999):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='300', 0x3)
unshare(0x40000000)

6.431599187s ago: executing program 4 (id=3000):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6)
write$nci(r0, &(0x7f00000004c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)

5.771882288s ago: executing program 5 (id=3003):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000ad00)={&(0x7f000000ab40)=[0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0xfffffffffffff29d, 0x9}, {0x6, 0x10001}, {0x6, 0xd}, {0xffffffff, 0x56}, {0x4, 0x7}, {0x3, 0x17}, {0x2, 0xd7}, {0x9, 0xfb4}, {0x6, 0x800}, {0xad, 0x8}, {0x9, 0x2}, {0x0, 0x4}, {0x8, 0x5}, {0x3, 0xd}, {0x8, 0x100000001}, {0x6, 0x6d4}, {0x8, 0x3}, {0x7, 0x9}, {0xfffffffffffffffd, 0x6}, {0x8, 0x7ffffffc}, {0x5, 0x4}, {0xffffffffffffffff, 0x5}, {0x6}, {0x4f, 0x5}, {0xac, 0x5}, {0x8, 0x1}, {0xa00, 0x3}, {0xffffffff, 0x6}, {0x8, 0x1}, {0x5, 0x7fff}, {0x7, 0xfffffffffffffff5}, {0x100000000, 0x400}, {0x7, 0x1}, {0x8000000000000001, 0x101}, {0x0, 0x4}, {0x7, 0x1}, {0x8, 0xbfa}, {0x6, 0xfffffffffffffff6}, {0x6dc, 0x7fa1}, {0xffffffffffffffff, 0x4}, {0xc42, 0xb}, {0x10001, 0x10000}, {0x80000001, 0x3b85e560}, {0x400, 0x8}, {0xa3, 0x9}, {0x8000, 0x8000000000000001}, {0x3, 0x3}, {0xc00, 0x3}, {0x9, 0x2dac}, {0x9, 0x8}, {0x5, 0x9}, {0x101, 0xd6}, {0x9, 0x3}, {0x800000000000c, 0xa93}, {0x7, 0x68e}, {0x7fffffff, 0x8000}, {0x8000, 0x7}, {0x8000000000000001, 0x280}, {0xffffffff80000000}, {0xf, 0x4c}, {0x0, 0x80}, {0x6, 0xab5}, {0x1ff, 0x2}, {0x9, 0x5}, {0x8, 0x7}, {0x18000, 0x53f78878}, {0x2, 0x5}, {0x81, 0x7b0}, {0x6, 0x6}, {0x3, 0x6}, {0x9}, {0x6, 0x7}, {0x1000, 0x8}, {0xfffffffffffffffd, 0x8c}, {0x9e5, 0x7fffffffffffffff}, {0x2, 0x9}, {0x8, 0xffffffffffffff01}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x76, 0x3}, {0xe, 0x4}, {0x80000000, 0x433c50c9}, {0x4, 0x100000000}, {0x7fffffff, 0x6}, {0x7a63fbff, 0x7}, {0x1, 0x65d6}, {0x2, 0x5c8}, {0x2b5, 0x8}, {0x8, 0x8}, {0x7}, {0x9, 0xb84a}, {0x1, 0x1}, {0x9, 0x7}, {0xff, 0x9}, {0x1, 0x1}, {0x200, 0x4}, {0x10, 0x5}, {0x5, 0xd}, {0xf, 0x400000000000000}, {0x204d, 0x9}, {0x10000007, 0x6}, {0x9, 0xc742}, {0xd}, {0x4, 0x7}, {0x8, 0x5}, {0x2, 0x3}, {0xbd0c, 0x80000000}, {0x1, 0xf}, {0x0, 0x8}, {0x8000000000000001, 0xfffffffffffffff3}, {0x3, 0x6}, {0x0, 0x1000}, {0x54cc, 0x9}, {0x7, 0x200}, {0x7fffffff}, {0xd5, 0x8}, {0x8b, 0x40b4421f}, {0x800, 0x5}, {0xf2, 0x6}, {0x80, 0x853d}, {0xf3e, 0x3522dbc3}, {0xdad, 0x5}, {0x7, 0x3}, {0x10001, 0x1}, {0x6, 0x1}, {0x444, 0x6}, {0x7, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0xac99, 0x10000}, {0x10000, 0x9}, {0xfffffffffffffff7, 0x8}, {0x1000, 0x653}, {0x4bcbe926, 0x5}, {0x3, 0x9}, {0x40, 0x6}, {0x4007, 0x2}, {0xf5a5, 0x5}, {0x2471e8df, 0x3}, {0x4, 0x74f0}, {0x7, 0xffffffff}, {0xb, 0x8}, {0x1, 0x1}, {0x5ae5d7cb, 0xffffffffffffffff}, {0x5, 0x1}, {0x8, 0xe}, {0x80000000, 0xfffffffffffff690}, {0x5}, {0x15, 0x7}, {0xfffffffffffffffa, 0xf740}, {0x5, 0x5}, {0x800, 0x8}, {0x7ff, 0x6}, {0x1, 0x1}, {0x59bd5112, 0x3b7}, {0x3, 0x8}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x100000000005, 0xa9}, {0x9, 0xf84}, {0x3}, {0x0, 0x3}, {0x18, 0x7ff}, {0xfffffffffffffffd, 0x3}, {0x5, 0x7fffffffffffffff}, {0x3, 0x4}, {0x6, 0x9}, {0x4, 0x5}, {0x1, 0x100000001}, {0x3, 0x200}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x32702b6e}, {0x8, 0x6}, {0x4, 0x3}, {0x4, 0x79}, {0x0, 0x5}, {0xffffffffffffffff, 0x1}, {0x490, 0x37}, {0xb, 0x9}, {0x9, 0x62b60558}, {0x1, 0xffffffffffffffff}, {0x0, 0x5}, {0x100000000, 0x2}, {0x28000000000, 0xffffffffffffffff}, {0x8, 0x5}, {0x690b, 0x8}, {0xffffffff, 0xd}, {0x9, 0xe133}, {0x10, 0x498e6a20}, {0x101, 0x3b}, {0x3, 0x3}, {0x5}, {0xc, 0x7}, {0x1, 0x9}, {0xb3, 0x8b}, {0x200, 0x80}, {0xa}, {0x8001, 0x2}, {0x3, 0x1}, {0x7, 0x7}, {0x3, 0x3}, {0x7d, 0x7}, {0x0, 0x7ff}, {0x6, 0x5a}, {0x5, 0xfffffffffffffff8}, {0x2, 0x7}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x80000000}, {0x3, 0xb22d}, {0x10001, 0x5}, {0xf7ffffff, 0x4}, {0x7b0, 0xc306}, {0x100, 0x10}, {0x3, 0x1}, {0xa540, 0x8000000000000000}, {0xfffffffffffffff8}, {0x3, 0x5}, {0x821f, 0x8}, {0x7f, 0x3}, {0x9, 0x3}, {0xce, 0x9}, {0x9, 0xffffffffffffffff}, {0xaa, 0x7fffffffffffffff}, {0x387, 0xffff}, {0xc, 0x1}, {0x702, 0x7e3ed377}, {0x5, 0x8}, {0x3, 0x4}, {0x6367d524, 0x5}, {0x5e265bbc, 0x1}, {0x6, 0x1}, {0x404, 0x3}, {0x100, 0x8}, {0x1, 0x3}, {0x1, 0xfffffffffffffffe}, {0x2, 0x2}, {0x7, 0x7ff}, {0x0, 0x7}, {0x8000, 0xffffffffffffff01}, {0x3, 0x6}, {0x2}, {0x3, 0x1}, {0x9, 0x400}, {0x10, 0x3}, {0x9, 0x91}, {0x99f, 0x2}, {0x1, 0x7f}, {0xffffffffffff8001, 0x1751}, {0x6d, 0xfffffffffffffffd}, {0xe70f, 0x7}, {0x9, 0x400000000}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff0100000000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000feffffffffffffff00100000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd00000000000000480002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017000100000025bd7000000000000000000028bd7000aa0e0000080000004c001400636d61632861657329"], 0x1a4}}, 0x0)

5.677473186s ago: executing program 5 (id=3004):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x6f3)
write(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0)
syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000580), &(0x7f0000000540), &(0x7f0000000f40))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4)
socket$netlink(0x10, 0x3, 0x14)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8001, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x3, 0x20}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000070000000900010073797a3000000000080002400000000350000000120a01010000000000000000070000000900010073797a3000000000050002006f303000080003400000000720000480060001000002000005000200110000000c00"], 0xcd0}}, 0x10)
connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x6000, 0x1)
accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)

3.779632108s ago: executing program 0 (id=3006):
syz_usb_connect$midi(0x3, 0x39, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x86a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x1, 0xfe, 0xf0, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xe5, [], [{{0x9, 0x5, 0xa, 0x4, 0x10, 0x4c, 0xd, 0x29, {0xc, 0x25, 0x1, 0x8, "f167ec04e6a6c858"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
fallocate(r0, 0x3, 0x0, 0x5345)
r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x659b40fd, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0x80000000, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0xba08, 0x4}})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x0, @win={{0x945559d4, 0x98c, 0x4, 0x80007}, 0x4, 0x7, 0x0, 0xfffffffe, 0x0, 0xfd}})
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x6813)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x7f}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)

3.767521579s ago: executing program 54 (id=2961):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='udp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n', 0x2)
nanosleep(&(0x7f0000000600)={0x1}, 0x0)

3.505747922s ago: executing program 6 (id=3008):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x20)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f00000001c0)=<r2=>0x0, &(0x7f00000005c0)=<r3=>0x0)
syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000600)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000300))
socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.412372718s ago: executing program 6 (id=3009):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)

3.342531178s ago: executing program 4 (id=3010):
syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a99010203010902"], 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xfff)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000680)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x100, 0x10400004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa806, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80, 0x2, 0x367}}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1)

3.231705432s ago: executing program 6 (id=3011):
syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0xa, 0xa, 0x0, 0x64}}}}, 0xd)

2.674759068s ago: executing program 6 (id=3012):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x1389, @empty}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1389, @empty}, 0x1, 0x0, 0x1}}, 0x1e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1389, @empty}, 0x1, 0x1, 0x1, 0x1}}, 0x1e)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4)

2.51893752s ago: executing program 6 (id=3013):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x101000)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x7, 0x0, 0x1, &(0x7f0000000080)="ce"}], 0x1})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x40}, 0x0, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, 0x0, &(0x7f00000007c0)={0x20, 0x82, 0x1, '\\'}, 0x0, 0x0, 0x0})

2.331882086s ago: executing program 5 (id=3014):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000500)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000600), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,sec=krb5,clientaddr=127.0.0.1,soft,timeo=1'])

2.204768439s ago: executing program 5 (id=3015):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0)

2.189510182s ago: executing program 5 (id=3016):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01010000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001"], 0xfc}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x2d)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x6)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil)
fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000)
creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc)
r5 = socket(0x11, 0x800000002, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000540)={'virt_wifi0\x00', {0x2, 0x0, @private=0xf30a4000}})

1.955027399s ago: executing program 4 (id=3017):
r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000002d80)={0x14, 0x0, &(0x7f0000002d40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000180))
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1)
read(r3, 0x0, 0x70)
ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000240))
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd, 0x0, <r5=>0x0})
mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000300)={r5})
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x20040815)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000)
unshare(0x26020480)
r7 = socket$packet(0x11, 0x2, 0x300)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000840)=""/145, 0x91}], 0x4}, 0x20)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x2})

1.505972235s ago: executing program 4 (id=3018):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000340))
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x4, 0x2, 0x0, 0x8, 0x800, 0xffffffffffffffff, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x8000000000000000, 0xf17, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a0104000000000000000001000000"], 0xcc}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC=r8, @ANYBLOB="8f1a99f5d7e17d099adeb817d16ef229125d346a0bf0e9cf8d06f8e65ea796c1c76d0d8019aa108835edf2b0e88baafc7006ba446700ec4bb8bb6b5f15380d03ca8371c5d35ea591bd78e9b74de8545553a9573318f7e07e1988310394c78ed97135d8c490d78a978d68999dd0ea598f82731f75665d7ddd96f951b0608b8f87e16d32d87bce6307766ff81749ea04125eb19cf607c625b985a72bd2", @ANYRES64, @ANYRESOCT=0x0], 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
listns(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x39, &(0x7f00000000c0)={0x0, 0x2c}}, 0x40891)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
unshare(0x600)

444.905017ms ago: executing program 0 (id=3019):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6)
write$nci(r0, &(0x7f00000004c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)

441.508579ms ago: executing program 4 (id=3020):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10)
listen(r0, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r8, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r9, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r10, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r11, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r12, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r13, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r14, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r15, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r16 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r16, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)

166.368725ms ago: executing program 0 (id=3021):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22401, 0x0)
fallocate(r2, 0x1, 0x460e, 0x3)

0s ago: executing program 6 (id=3022):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x1032})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/tap0/gro_flush_timeout\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='200000000\n', 0xa)
close(r1)
write(0xffffffffffffffff, &(0x7f00000001c0)='10\n', 0x3)

kernel console output (not intermixed with test programs):

40'.
[  497.195748][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  497.305537][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  497.414345][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  497.523905][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  497.633533][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  497.743539][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  497.856181][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  498.182734][T14371] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2846'.
[  498.256818][ T5599] Bluetooth: hci15: command tx timeout
[  498.300585][T14378] tipc: Started in network mode
[  498.300599][T14378] tipc: Node identity 4, cluster identity 4711
[  498.300606][T14378] tipc: Node number set to 4
[  498.301564][T14378] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  500.333768][ T5599] Bluetooth: hci15: command tx timeout
[  501.903570][   T49] net_ratelimit: 35 callbacks suppressed
[  501.903593][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  502.024829][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  502.133630][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  502.244423][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  502.353639][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  502.414319][ T5599] Bluetooth: hci15: command tx timeout
[  502.465280][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  502.574019][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  502.684406][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  502.794387][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  502.905052][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  503.581836][ T5608] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  503.592363][ T5608] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  503.601620][ T5608] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  503.603114][ T5608] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  503.610656][ T5608] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  503.814444][T14385] lo speed is unknown, defaulting to 1000
[  504.092507][T14385] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.092634][T14385] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.092752][T14385] bridge_slave_0: entered allmulticast mode
[  504.100554][T14385] bridge_slave_0: entered promiscuous mode
[  504.105630][T14385] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.105700][T14385] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.105792][T14385] bridge_slave_1: entered allmulticast mode
[  504.109618][T14385] bridge_slave_1: entered promiscuous mode
[  504.176993][T14385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.179607][T14385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.242874][ T5599] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  504.259953][ T5599] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  504.266166][T14385] team0: Port device team_slave_0 added
[  504.277204][T13856] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  504.281747][ T5599] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  504.286149][ T5599] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  504.289175][ T5599] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  504.289787][ T5599] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  504.291346][ T5599] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  504.293975][ T5599] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  504.294434][ T5599] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  504.296751][T14385] team0: Port device team_slave_1 added
[  504.380988][T14385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.381005][T14385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.381025][T14385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.382692][T14385] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.382705][T14385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.383094][T14385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.451069][T14385] hsr_slave_0: entered promiscuous mode
[  504.453313][T14385] hsr_slave_1: entered promiscuous mode
[  504.454065][T14385] debugfs: 'hsr0' already exists in 'hsr'
[  504.454081][T14385] Cannot create hsr debugfs directory
[  504.690959][T14385] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.836514][T14385] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.878655][T14407] lo speed is unknown, defaulting to 1000
[  504.944597][T14385] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.039152][T14385] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.118826][T14406] lo speed is unknown, defaulting to 1000
[  505.204433][ T5608] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  505.206870][ T5608] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  505.209853][ T5608] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  505.213893][ T5608] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  505.268901][ T5608] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  505.591243][T14385] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  505.604553][T14385] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  505.605236][T14385] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  505.608201][T14385] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  505.642344][T14385] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  505.653122][T14385] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  505.673587][T14385] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  505.682869][T14385] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  505.700539][ T5599] Bluetooth: hci16: command tx timeout
[  505.754220][T14407] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.754349][T14407] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.754449][T14407] bridge_slave_0: entered allmulticast mode
[  505.755757][T14407] bridge_slave_0: entered promiscuous mode
[  505.781992][T14427] lo speed is unknown, defaulting to 1000
[  505.788101][T14407] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.788231][T14407] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.788344][T14407] bridge_slave_1: entered allmulticast mode
[  505.790112][T14407] bridge_slave_1: entered promiscuous mode
[  505.845916][T14407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.883975][T14407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.950566][T14407] team0: Port device team_slave_0 added
[  505.962788][T14407] team0: Port device team_slave_1 added
[  506.008168][T14407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.008185][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.008205][T14407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.023254][T14407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  506.023269][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.023288][T14407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.212479][T14407] hsr_slave_0: entered promiscuous mode
[  506.212923][T14407] hsr_slave_1: entered promiscuous mode
[  506.213273][T14407] debugfs: 'hsr0' already exists in 'hsr'
[  506.213285][T14407] Cannot create hsr debugfs directory
[  506.236740][T14406] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.236809][T14406] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.236923][T14406] bridge_slave_0: entered allmulticast mode
[  506.239496][T14406] bridge_slave_0: entered promiscuous mode
[  506.241654][T14406] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.241760][T14406] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.242011][T14406] bridge_slave_1: entered allmulticast mode
[  506.243194][T14406] bridge_slave_1: entered promiscuous mode
[  506.333802][ T5599] Bluetooth: hci18: command tx timeout
[  506.365052][T14406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.386260][T14406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.426373][ T5599] Bluetooth: hci17: command tx timeout
[  506.480913][T14406] team0: Port device team_slave_0 added
[  506.508488][T14406] team0: Port device team_slave_1 added
[  506.578936][T14406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.578951][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.578968][T14406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.626059][T14406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  506.626073][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.626093][T14406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.714869][T14385] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.744599][T14406] hsr_slave_0: entered promiscuous mode
[  506.745086][T14406] hsr_slave_1: entered promiscuous mode
[  506.745409][T14406] debugfs: 'hsr0' already exists in 'hsr'
[  506.745427][T14406] Cannot create hsr debugfs directory
[  506.788702][T14407] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.825254][T14427] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.826181][T14427] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.826302][T14427] bridge_slave_0: entered allmulticast mode
[  506.827405][T14427] bridge_slave_0: entered promiscuous mode
[  506.829918][T14427] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.829984][T14427] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.830075][T14427] bridge_slave_1: entered allmulticast mode
[  506.831287][T14427] bridge_slave_1: entered promiscuous mode
[  506.842752][T14385] 8021q: adding VLAN 0 to HW filter on device team0
[  506.899089][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.899137][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.900339][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.900399][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.928075][T14427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.966458][T14407] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.991394][T14427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.000654][ T6019] net_ratelimit: 18 callbacks suppressed
[  507.000671][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  507.038952][T14427] team0: Port device team_slave_0 added
[  507.067387][T14407] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.072581][T14427] team0: Port device team_slave_1 added
[  507.090000][T14385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  507.090020][T14385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  507.169582][T14407] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.199829][T14427] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.199847][T14427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.199869][T14427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.241807][T14427] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.241822][T14427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.241841][T14427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.283943][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  507.303743][ T5599] Bluetooth: hci19: command tx timeout
[  507.365454][T14427] hsr_slave_0: entered promiscuous mode
[  507.365952][T14427] hsr_slave_1: entered promiscuous mode
[  507.366272][T14427] debugfs: 'hsr0' already exists in 'hsr'
[  507.366290][T14427] Cannot create hsr debugfs directory
[  507.443537][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  507.580423][T14406] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.643775][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  507.684032][T14406] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.692833][T14385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.764916][T14406] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.774449][ T5599] Bluetooth: hci16: command tx timeout
[  507.775488][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  507.839369][T14406] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.883590][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  507.934479][T14385] veth0_vlan: entered promiscuous mode
[  507.952769][T14385] veth1_vlan: entered promiscuous mode
[  507.998499][T14385] veth0_macvtap: entered promiscuous mode
[  508.002506][T14385] veth1_macvtap: entered promiscuous mode
[  508.026067][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  508.071346][T14385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  508.091988][T14385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  508.131813][T14407] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  508.148929][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  508.162572][T14407] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  508.185089][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  508.187897][T14407] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  508.210941][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  508.248174][T14427] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.255108][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  508.270719][T14407] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  508.300732][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  508.301336][ T6028] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.303894][   T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.303931][   T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.303959][   T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.393116][T14427] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.412376][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.412396][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.413811][ T5599] Bluetooth: hci18: command tx timeout
[  508.475237][T14427] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.481206][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.481227][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.484280][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  508.504265][ T5599] Bluetooth: hci17: command tx timeout
[  508.585439][T14427] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.631676][T14407] 8021q: adding VLAN 0 to HW filter on device bond0
[  508.669155][T14407] 8021q: adding VLAN 0 to HW filter on device team0
[  508.683591][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  508.689905][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.689978][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.739430][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.739501][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.882483][T14427] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  508.894699][T14427] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  508.895496][T14427] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  508.898334][T14427] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  508.900737][T14427] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  508.926157][T14427] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  508.929176][T14427] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  508.943178][T14427] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  509.127065][T14406] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  509.130798][T14406] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  509.139462][T14406] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  509.146783][T14406] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  509.151168][T14406] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  509.167531][T14406] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  509.170669][T14406] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  509.179382][T14406] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  509.211069][T14427] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.251725][T14427] 8021q: adding VLAN 0 to HW filter on device team0
[  509.268860][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.268946][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.305945][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.305991][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.374276][ T5599] Bluetooth: hci19: command tx timeout
[  509.419789][T14406] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.448066][T14406] 8021q: adding VLAN 0 to HW filter on device team0
[  509.452690][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.452741][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.495377][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.495479][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.502132][T14407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.854571][ T5599] Bluetooth: hci16: command tx timeout
[  509.948265][T14407] veth0_vlan: entered promiscuous mode
[  509.982776][T14407] veth1_vlan: entered promiscuous mode
[  509.999051][T14427] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.042529][T14407] veth0_macvtap: entered promiscuous mode
[  510.050867][T14407] veth1_macvtap: entered promiscuous mode
[  510.087800][T14407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.101114][T14407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.187934][   T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.190899][ T6028] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.221187][ T6019] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.294819][ T6024] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.332061][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.332083][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.407452][T14406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.428258][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.428280][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.493869][ T5599] Bluetooth: hci18: command tx timeout
[  510.519104][T14427] veth0_vlan: entered promiscuous mode
[  510.541612][   T31] audit: type=1400 audit(1790781241.161:973): avc:  denied  { create } for  pid=14563 comm="syz.8.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  510.542233][T14427] veth1_vlan: entered promiscuous mode
[  510.548020][   T31] audit: type=1400 audit(1790781241.171:974): avc:  denied  { write } for  pid=14563 comm="syz.8.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  510.551320][T14564] ieee802154 phy0 wpan0: encryption failed: -22
[  510.595308][ T5599] Bluetooth: hci17: command tx timeout
[  510.627691][T14427] veth0_macvtap: entered promiscuous mode
[  510.631306][T14427] veth1_macvtap: entered promiscuous mode
[  510.657169][T14427] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.660642][T14427] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.688336][ T6019] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.688401][ T6019] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.688456][ T6019] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.688484][ T6019] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.890835][   T31] audit: type=1400 audit(1790781241.511:975): avc:  denied  { connect } for  pid=14567 comm="syz.8.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  510.915629][   T31] audit: type=1400 audit(1790781241.521:976): avc:  denied  { write } for  pid=14567 comm="syz.8.2857" path="socket:[73619]" dev="sockfs" ino=73619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  510.960958][T14406] veth0_vlan: entered promiscuous mode
[  510.974162][T14406] veth1_vlan: entered promiscuous mode
[  511.009298][T14406] veth0_macvtap: entered promiscuous mode
[  511.011856][T14406] veth1_macvtap: entered promiscuous mode
[  511.031464][T14406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.043879][T14406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.068756][ T6019] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.108112][ T6019] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.125296][   T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.125339][   T59] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.454127][ T5599] Bluetooth: hci19: command tx timeout
[  511.934092][ T5599] Bluetooth: hci16: command tx timeout
[  512.044388][ T6019] net_ratelimit: 21 callbacks suppressed
[  512.044406][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  512.153685][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  512.274337][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  512.383686][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  512.496995][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  512.583744][ T5599] Bluetooth: hci18: command tx timeout
[  512.603890][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  512.658001][ T5599] Bluetooth: hci17: command tx timeout
[  512.713947][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  512.833871][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  512.943589][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  513.054809][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  513.535621][ T5608] Bluetooth: hci19: command tx timeout
[  517.073640][ T6023] net_ratelimit: 35 callbacks suppressed
[  517.073662][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  517.194363][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  517.303544][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  517.413758][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  517.533769][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  517.644342][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  517.753616][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  517.865092][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  517.973655][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  518.083581][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  519.699201][ T5690] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[  519.716441][T14302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  519.823144][ T5599] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  519.835094][ T5599] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  519.836165][ T5599] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  519.838837][ T5599] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  519.843186][ T5599] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  519.930367][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.930387][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.999378][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.999397][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.083075][  T772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.083096][  T772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.167825][   T31] audit: type=1400 audit(1790781250.791:977): avc:  denied  { create } for  pid=14583 comm="syz.8.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  520.193694][   T31] audit: type=1400 audit(1790781250.801:978): avc:  denied  { write } for  pid=14583 comm="syz.8.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  520.197949][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.197967][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.342877][T14302] batman_adv: batadv0: Interface deactivated: syz_tun
[  520.406566][T14302] batman_adv: batadv0: Removing interface: syz_tun
[  520.742024][ T6019] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.762041][T14607] tipc: Started in network mode
[  520.762061][T14607] tipc: Node identity 4, cluster identity 4711
[  520.762073][T14607] tipc: Node number set to 4
[  520.780385][T14608] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  520.797322][T14578] lo speed is unknown, defaulting to 1000
[  520.968770][ T6019] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.088684][ T6019] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.214158][T14520] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  521.251545][ T6019] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.365911][T14520] usb 10-1: unable to get BOS descriptor or descriptor too short
[  521.365950][T14520] usb 10-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice= 0.40
[  521.368445][T14520] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.368471][T14520] usb 10-1: Product: syz
[  521.368485][T14520] usb 10-1: Manufacturer: syz
[  521.368499][T14520] usb 10-1: SerialNumber: syz
[  521.443951][   T31] audit: type=1400 audit(1790781252.061:979): avc:  denied  { ioctl } for  pid=14617 comm="syz.7.2865" path="socket:[74540]" dev="sockfs" ino=74540 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  521.478840][   T31] audit: type=1400 audit(1790781252.081:980): avc:  denied  { bind } for  pid=14617 comm="syz.7.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  521.640301][T14610] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2863'.
[  521.641570][T14578] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.641713][T14578] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.641810][T14578] bridge_slave_0: entered allmulticast mode
[  521.643072][T14578] bridge_slave_0: entered promiscuous mode
[  521.648098][T14578] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.648170][T14578] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.648442][T14578] bridge_slave_1: entered allmulticast mode
[  521.658745][T14578] bridge_slave_1: entered promiscuous mode
[  521.680676][T14610] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2863'.
[  521.705691][T14610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.708305][T14610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.740178][T14520] usb 10-1: USB disconnect, device number 2
[  521.750760][ T6019] bridge_slave_1: left allmulticast mode
[  521.750819][ T6019] bridge_slave_1: left promiscuous mode
[  521.751072][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.780627][ T6019] bridge_slave_0: left allmulticast mode
[  521.780652][ T6019] bridge_slave_0: left promiscuous mode
[  521.780800][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.933605][ T5608] Bluetooth: hci20: command tx timeout
[  521.953333][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  521.968131][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  521.969035][ T6019] bond0 (unregistering): Released all slaves
[  522.016718][T14578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.019450][T14578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.081980][ T6019] tipc: Left network mode
[  522.085479][T14578] team0: Port device team_slave_0 added
[  522.087453][T14578] team0: Port device team_slave_1 added
[  522.131706][T14578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.131721][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.131738][T14578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.209148][T14578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.209165][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.209188][T14578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.238849][T14578] hsr_slave_0: entered promiscuous mode
[  522.239571][T14578] hsr_slave_1: entered promiscuous mode
[  522.240122][T14578] debugfs: 'hsr0' already exists in 'hsr'
[  522.240138][T14578] Cannot create hsr debugfs directory
[  522.676183][   T49] net_ratelimit: 24 callbacks suppressed
[  522.676204][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  522.794859][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  522.834909][   T31] audit: type=1400 audit(1790781253.461:981): avc:  denied  { write } for  pid=14630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  522.929407][T14622] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  522.943680][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  523.026988][   T31] audit: type=1400 audit(1790781253.651:982): avc:  denied  { write } for  pid=14646 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  523.134625][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  523.261164][ T6019] hsr_slave_0: left promiscuous mode
[  523.261507][ T6019] hsr_slave_1: left promiscuous mode
[  523.262026][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.262046][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.269193][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.269315][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.316993][   T31] audit: type=1804 audit(1790781253.941:983): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2868" name="/newroot/3/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0
[  523.356602][ T6019] veth1_macvtap: left promiscuous mode
[  523.356641][ T6019] veth0_macvtap: left promiscuous mode
[  523.356693][ T6019] veth1_vlan: left promiscuous mode
[  523.356738][ T6019] veth0_vlan: left promiscuous mode
[  523.711691][ T6019] team0 (unregistering): Port device team_slave_1 removed
[  523.747878][ T6019] team0 (unregistering): Port device team_slave_0 removed
[  523.930549][ T5599] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  523.945062][ T5599] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  523.946189][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  523.948057][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1
[  523.954133][ T5599] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  523.962302][ T5599] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  523.962691][ T5599] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  524.016291][ T4917] Bluetooth: hci20: command tx timeout
[  524.128364][T14667] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2873'.
[  524.189941][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  524.427453][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  524.467960][T14578] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  524.472567][   T31] audit: type=1400 audit(1790781255.091:984): avc:  denied  { write } for  pid=14668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  524.481127][T14578] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  524.485512][T14578] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  524.529482][T14578] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  524.530247][T14578] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  524.546508][T14578] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  524.546931][T14578] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  524.553150][T14578] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  524.684392][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  524.715723][   T31] audit: type=1400 audit(1790781255.341:985): avc:  denied  { write } for  pid=14693 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  524.792824][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2
[  524.805095][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  524.818370][T14578] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.850155][T14578] 8021q: adding VLAN 0 to HW filter on device team0
[  524.856003][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.856080][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.862096][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.862182][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.975520][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  524.992462][T14661] lo speed is unknown, defaulting to 1000
[  525.400830][   T31] audit: type=1400 audit(1790781256.021:986): avc:  denied  { write } for  pid=14700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  525.463123][T14578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.506700][   T31] audit: type=1400 audit(1790781256.131:987): avc:  denied  { write } for  pid=14723 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  525.581329][T14578] veth0_vlan: entered promiscuous mode
[  525.595082][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3
[  525.610819][T14578] veth1_vlan: entered promiscuous mode
[  525.712386][T14661] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.712468][T14661] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.712798][T14661] bridge_slave_0: entered allmulticast mode
[  525.738575][T14661] bridge_slave_0: entered promiscuous mode
[  525.757426][T14661] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.760360][T14661] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.760543][T14661] bridge_slave_1: entered allmulticast mode
[  525.762178][T14661] bridge_slave_1: entered promiscuous mode
[  525.817826][T14578] veth0_macvtap: entered promiscuous mode
[  525.852757][T14661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  525.865835][T14578] veth1_macvtap: entered promiscuous mode
[  525.869637][T14661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.913095][T14661] team0: Port device team_slave_0 added
[  525.923006][T14661] team0: Port device team_slave_1 added
[  525.938500][   T31] audit: type=1400 audit(1790781256.561:988): avc:  denied  { write } for  pid=14731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  525.981879][T14578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.982881][T14661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.982894][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  525.982916][T14661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.022708][   T31] audit: type=1400 audit(1790781256.631:989): avc:  denied  { write } for  pid=14742 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  526.069325][T14661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.069340][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.069358][T14661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.108741][ T5608] Bluetooth: hci11: command tx timeout
[  526.114761][ T5608] Bluetooth: hci20: command tx timeout
[  526.147294][T14578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  526.170517][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4
[  526.182520][T14661] hsr_slave_0: entered promiscuous mode
[  526.183211][T14661] hsr_slave_1: entered promiscuous mode
[  526.183784][T14661] debugfs: 'hsr0' already exists in 'hsr'
[  526.183800][T14661] Cannot create hsr debugfs directory
[  526.344398][ T6024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.345666][ T6024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.345704][ T6024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.345734][ T6024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.486519][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.486540][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.572993][T14661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.606975][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.606999][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.686139][T14661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.776530][T14661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.852811][T14661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.039228][   T31] audit: type=1400 audit(1790781257.661:990): avc:  denied  { listen } for  pid=14757 comm="syz.1.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  527.040934][   T31] audit: type=1400 audit(1790781257.661:991): avc:  denied  { connect } for  pid=14757 comm="syz.1.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  527.092353][   T31] audit: type=1400 audit(1790781257.711:992): avc:  denied  { write } for  pid=14757 comm="syz.1.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  527.122715][T14661] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  527.134893][T14661] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  527.135706][T14661] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  527.137726][T14661] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  527.138399][T14661] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  527.140117][T14661] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  527.140741][T14661] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  527.142627][T14661] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  527.241090][T14661] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.255426][T14661] 8021q: adding VLAN 0 to HW filter on device team0
[  527.260340][  T772] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.260409][  T772] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.270839][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.270963][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.556098][T14661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  527.605346][T14661] veth0_vlan: entered promiscuous mode
[  527.609278][T14661] veth1_vlan: entered promiscuous mode
[  527.637365][T14661] veth0_macvtap: entered promiscuous mode
[  527.640032][T14661] veth1_macvtap: entered promiscuous mode
[  527.661624][T14661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.673520][T14661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.714605][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.714650][   T49] net_ratelimit: 15 callbacks suppressed
[  527.714662][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  527.748793][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.748896][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.748928][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.840296][  T772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.840318][  T772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.865122][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  527.882284][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.882300][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.985278][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  528.094270][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  528.112056][T14784] bridge0: port 3(syz_tun) entered blocking state
[  528.112336][T14784] bridge0: port 3(syz_tun) entered disabled state
[  528.112824][T14784] syz_tun: entered allmulticast mode
[  528.137464][T14784] syz_tun: entered promiscuous mode
[  528.137732][T14784] bridge0: port 3(syz_tun) entered blocking state
[  528.137774][T14784] bridge0: port 3(syz_tun) entered forwarding state
[  528.152905][T14784] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2871'.
[  528.173833][ T5608] Bluetooth: hci20: command tx timeout
[  528.173854][ T5599] Bluetooth: hci11: command tx timeout
[  528.207786][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  528.213784][    T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  528.313581][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  528.364107][    T9] usb 2-1: Using ep0 maxpacket: 8
[  528.364732][    T9] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  528.365234][    T9] usb 2-1: config 0 has no interfaces?
[  528.367193][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.367212][    T9] usb 2-1: Product: syz
[  528.367220][    T9] usb 2-1: Manufacturer: syz
[  528.367228][    T9] usb 2-1: SerialNumber: syz
[  528.370626][    T9] usb 2-1: config 0 descriptor??
[  528.427870][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  528.533561][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  528.589913][T14465] usb 2-1: USB disconnect, device number 97
[  528.643996][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  528.753545][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  529.093725][ T5690] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  529.136305][ T6028] IPVS: starting estimator thread 0...
[  529.226215][T14789] IPVS: using max 45 ests per chain, 108000 per kthread
[  529.244170][ T5690] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  529.245234][ T5690] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  529.245258][ T5690] usb 1-1: config 0 has no interface number 0
[  529.246926][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.246948][ T5690] usb 1-1: Product: syz
[  529.246961][ T5690] usb 1-1: Manufacturer: syz
[  529.246974][ T5690] usb 1-1: SerialNumber: syz
[  529.249325][ T5690] usb 1-1: config 0 descriptor??
[  529.458496][ T5690] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  529.459048][ T5690] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  529.460034][   T31] audit: type=1400 audit(1790781260.081:993): avc:  denied  { firmware_load } for  pid=5690 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  529.460117][ T5690] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  529.574204][ T5765] usb 2-1: new full-speed USB device number 98 using dummy_hcd
[  529.724610][ T5765] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  529.725573][ T5765] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  529.725596][ T5765] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  529.725628][ T5765] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  529.727241][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.727261][ T5765] usb 2-1: Product: syz
[  529.727274][ T5765] usb 2-1: Manufacturer: syz
[  529.727289][ T5765] usb 2-1: SerialNumber: syz
[  529.731271][ T5765] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  529.731313][ T5765] cdc_ncm 2-1:1.0: bind() failure
[  530.195432][T14797] lo speed is unknown, defaulting to 1000
[  530.254620][ T5608] Bluetooth: hci11: command tx timeout
[  530.976806][ T5608] Bluetooth: hci12: command 0x0406 tx timeout
[  532.334566][ T5599] Bluetooth: hci11: command tx timeout
[  532.336645][T14466] usb 2-1: USB disconnect, device number 98
[  532.683622][T14466] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  532.783602][ T6019] net_ratelimit: 35 callbacks suppressed
[  532.783625][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  532.833593][T14466] usb 2-1: Using ep0 maxpacket: 32
[  532.834820][T14466] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  532.835632][T14466] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  532.835669][T14466] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  532.835693][T14466] usb 2-1: config 0 interface 0 has no altsetting 0
[  532.835713][T14466] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.837265][T14466] usb 2-1: config 0 descriptor??
[  532.893989][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  533.003585][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  533.113528][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  533.252203][T14466] wacom 0003:056A:00C5.0031: ignoring exceeding usage max
[  533.255949][T14466] hid_parser_main: 24 callbacks suppressed
[  533.255968][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.255988][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.256006][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.256025][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.256043][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.256062][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.256079][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.256097][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.256114][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.256132][T14466] wacom 0003:056A:00C5.0031: unknown main item tag 0x0
[  533.267514][T14466] wacom 0003:056A:00C5.0031: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.1-1/input0
[  533.283520][ T6019] bond1: (slave dummy0): failed to get link speed/duplex
[  533.394391][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  533.465822][   T25] usb 2-1: USB disconnect, device number 99
[  533.503510][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  533.615756][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  533.735298][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  533.844834][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  533.890944][   T31] audit: type=1400 audit(1790781264.511:994): avc:  denied  { setopt } for  pid=14815 comm="syz.0.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  536.750711][ T5608] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  536.751998][ T5608] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  536.755245][ T5608] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  536.793118][ T5608] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  536.813757][ T5608] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  537.025497][T14821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  537.217493][   T31] audit: type=1400 audit(1790781267.831:995): avc:  denied  { read write } for  pid=14841 comm="syz.1.2893" name="binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  537.217543][   T31] audit: type=1400 audit(1790781267.831:996): avc:  denied  { open } for  pid=14841 comm="syz.1.2893" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  537.248901][   T31] audit: type=1400 audit(1790781267.851:997): avc:  denied  { ioctl } for  pid=14841 comm="syz.1.2893" path="/dev/binderfs/binder0" dev="binder" ino=61 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  537.248954][   T31] audit: type=1400 audit(1790781267.851:998): avc:  denied  { map } for  pid=14841 comm="syz.1.2893" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  537.436995][T14829] lo speed is unknown, defaulting to 1000
[  537.495555][   T31] audit: type=1400 audit(1790781268.121:999): avc:  denied  { write } for  pid=14833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  537.745157][   T31] audit: type=1400 audit(1790781268.371:1000): avc:  denied  { write } for  pid=14863 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  537.843889][ T6023] net_ratelimit: 8 callbacks suppressed
[  537.843909][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  537.953501][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  538.063669][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  538.414352][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  538.430899][T14829] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.430972][T14829] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.431099][T14829] bridge_slave_0: entered allmulticast mode
[  538.457859][T14829] bridge_slave_0: entered promiscuous mode
[  538.459636][T14881] lo speed is unknown, defaulting to 1000
[  538.463501][T14829] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.463570][T14829] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.463691][T14829] bridge_slave_1: entered allmulticast mode
[  538.473353][T14829] bridge_slave_1: entered promiscuous mode
[  538.576267][ T5608] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  538.581619][ T5608] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[  538.582247][ T5608] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[  538.582808][ T5608] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[  538.591198][ T5608] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[  538.693289][T14829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  538.712085][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  538.721435][T14829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  538.811829][   T31] audit: type=1400 audit(1790781269.431:1001): avc:  denied  { write } for  pid=14869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  538.848422][T14829] team0: Port device team_slave_0 added
[  538.870095][T14829] team0: Port device team_slave_1 added
[  538.974015][ T5599] Bluetooth: hci21: command tx timeout
[  538.974932][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  538.984499][T14829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.984513][T14829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.984532][T14829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.044665][T14829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.044676][T14829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.044691][T14829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  539.247489][   T31] audit: type=1400 audit(1790781269.871:1002): avc:  denied  { write } for  pid=14894 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  539.318887][T14829] hsr_slave_0: entered promiscuous mode
[  539.323005][T14829] hsr_slave_1: entered promiscuous mode
[  539.330834][T14829] debugfs: 'hsr0' already exists in 'hsr'
[  539.330854][T14829] Cannot create hsr debugfs directory
[  539.333526][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  539.449982][   T31] audit: type=1400 audit(1790781270.071:1003): avc:  denied  { read } for  pid=14898 comm="syz.1.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  539.538201][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  539.676617][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  539.737293][T14884] lo speed is unknown, defaulting to 1000
[  539.789845][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  539.896490][   T31] audit: type=1400 audit(1790781270.511:1004): avc:  denied  { write } for  pid=14906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  540.027633][ T5608] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[  540.037980][ T5608] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[  540.043013][ T5608] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[  540.060134][ T5608] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[  540.061393][ T5608] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[  540.161207][   T31] audit: type=1400 audit(1790781270.771:1005): avc:  denied  { write } for  pid=14926 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  540.253202][T14829] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.547170][T14829] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.653991][ T5608] Bluetooth: hci22: command tx timeout
[  540.703013][T14829] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.774288][T14144] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  540.890277][   T31] audit: type=1400 audit(1790781271.521:1006): avc:  denied  { write } for  pid=14934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  540.924272][T14144] usb 2-1: Using ep0 maxpacket: 32
[  540.924977][T14144] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  540.928993][T14144] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  540.929040][T14144] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  540.929056][T14144] usb 2-1: config 0 interface 0 has no altsetting 0
[  540.929074][T14144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.930697][T14144] usb 2-1: config 0 descriptor??
[  540.939663][T14829] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.050586][   T31] audit: type=1400 audit(1790781271.671:1007): avc:  denied  { write } for  pid=14955 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  541.054937][ T5608] Bluetooth: hci21: command tx timeout
[  541.154783][T14884] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.154878][T14884] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.155155][T14884] bridge_slave_0: entered allmulticast mode
[  541.156679][T14884] bridge_slave_0: entered promiscuous mode
[  541.161404][T14884] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.162606][T14884] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.162911][T14884] bridge_slave_1: entered allmulticast mode
[  541.165159][T14884] bridge_slave_1: entered promiscuous mode
[  541.166428][T14924] lo speed is unknown, defaulting to 1000
[  541.270469][T14884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.290452][T14884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.389658][T14144] wacom 0003:056A:00C5.0032: ignoring exceeding usage max
[  541.395478][T14144] hid_parser_main: 1 callbacks suppressed
[  541.395498][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.395518][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.395535][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.395554][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.395573][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.395592][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.395610][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.395629][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.395647][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.395666][T14144] wacom 0003:056A:00C5.0032: unknown main item tag 0x0
[  541.441830][T14144] wacom 0003:056A:00C5.0032: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.1-1/input0
[  541.621911][T14884] team0: Port device team_slave_0 added
[  541.629960][T14884] team0: Port device team_slave_1 added
[  541.642402][T14520] usb 2-1: USB disconnect, device number 100
[  541.942048][T14884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.942066][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.942090][T14884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.994776][T14884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.994795][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.994819][T14884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.152466][   T31] audit: type=1400 audit(1790781272.771:1008): avc:  denied  { write } for  pid=14971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  542.190066][T14884] hsr_slave_0: entered promiscuous mode
[  542.199378][T14884] hsr_slave_1: entered promiscuous mode
[  542.199910][T14884] debugfs: 'hsr0' already exists in 'hsr'
[  542.199927][T14884] Cannot create hsr debugfs directory
[  542.253804][ T5608] Bluetooth: hci23: command tx timeout
[  542.321811][   T31] audit: type=1400 audit(1790781272.941:1009): avc:  denied  { write } for  pid=14984 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  542.352438][T14829] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  542.364655][T14829] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  542.388219][T14829] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  542.392751][T14829] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  542.446281][T14829] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  542.448484][T14829] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  542.448998][T14829] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  542.477475][T14829] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  542.750859][ T5608] Bluetooth: hci22: command tx timeout
[  543.139681][ T5608] Bluetooth: hci21: command tx timeout
[  544.344773][ T5608] Bluetooth: hci23: command tx timeout
[  544.709811][T14966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  544.825857][ T5608] Bluetooth: hci22: command tx timeout
[  545.221597][ T5608] Bluetooth: hci21: command tx timeout
[  545.545595][ T6023] net_ratelimit: 7 callbacks suppressed
[  545.545616][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  545.706210][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  545.741457][T14829] 8021q: adding VLAN 0 to HW filter on device bond0
[  545.870020][T14884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.948510][T14829] 8021q: adding VLAN 0 to HW filter on device team0
[  546.071888][T14884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.144457][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.144535][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  546.169097][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.169181][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.211589][T14884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.234012][T14924] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.234104][T14924] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.234238][T14924] bridge_slave_0: entered allmulticast mode
[  546.237569][T14924] bridge_slave_0: entered promiscuous mode
[  546.240032][T14924] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.240119][T14924] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.240381][T14924] bridge_slave_1: entered allmulticast mode
[  546.241646][T14924] bridge_slave_1: entered promiscuous mode
[  546.278599][T14924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  546.311825][T14924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.369861][T14924] team0: Port device team_slave_0 added
[  546.371678][T14924] team0: Port device team_slave_1 added
[  546.414063][ T5608] Bluetooth: hci23: command tx timeout
[  546.450651][T14884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.509753][T14924] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.509770][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.509788][T14924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.525369][T14924] batman_adv: batadv0: Adding interface: batadv_slave_1
[  546.525384][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.525404][T14924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.593655][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  546.658682][T14924] hsr_slave_0: entered promiscuous mode
[  546.659847][T14924] hsr_slave_1: entered promiscuous mode
[  546.660401][T14924] debugfs: 'hsr0' already exists in 'hsr'
[  546.660420][T14924] Cannot create hsr debugfs directory
[  546.683494][T14144] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  546.836351][T14144] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  546.837236][T14144] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  546.837260][T14144] usb 2-1: config 0 has no interface number 0
[  546.839169][T14144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.839192][T14144] usb 2-1: Product: syz
[  546.839206][T14144] usb 2-1: Manufacturer: syz
[  546.839220][T14144] usb 2-1: SerialNumber: syz
[  546.846218][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  546.852223][T14144] usb 2-1: config 0 descriptor??
[  546.873376][T14884] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  546.900277][ T5608] Bluetooth: hci22: command tx timeout
[  546.919563][T14884] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  546.924281][T14884] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  546.939193][T14884] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  546.939829][T14884] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  546.955166][T14884] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  546.956698][T14884] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  546.969146][T14884] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  547.065761][T14144] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  547.068527][T14144] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  547.068663][T14144] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  547.068687][T14144] usb 2-1: media controller created
[  547.095557][T14144] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  547.271361][T14144] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  547.349337][T14144] usb 2-1: USB disconnect, device number 101
[  547.371526][   T31] audit: type=1400 audit(1790781277.991:1010): avc:  denied  { write } for  pid=15029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  547.515286][   T31] audit: type=1400 audit(1790781278.141:1011): avc:  denied  { write } for  pid=15047 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  547.625764][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  547.737108][T14884] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.782217][T14884] 8021q: adding VLAN 0 to HW filter on device team0
[  547.795778][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  547.807913][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.807991][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  547.824783][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.824887][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  547.915760][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  547.948297][T14829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  548.135802][   T31] audit: type=1400 audit(1790781278.751:1012): avc:  denied  { write } for  pid=15052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  548.259467][   T31] audit: type=1400 audit(1790781278.881:1013): avc:  denied  { write } for  pid=15073 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  548.506523][ T5608] Bluetooth: hci23: command tx timeout
[  548.598813][   T31] audit: type=1400 audit(1790781279.221:1014): avc:  denied  { write } for  pid=15075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  548.701192][   T31] audit: type=1400 audit(1790781279.321:1015): avc:  denied  { write } for  pid=15086 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  549.082371][   T31] audit: type=1400 audit(1790781279.701:1016): avc:  denied  { write } for  pid=15091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  549.231895][   T31] audit: type=1400 audit(1790781279.851:1017): avc:  denied  { write } for  pid=15102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  551.594382][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  551.725817][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  551.746577][T14924] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  551.768183][T14924] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  551.768729][T14924] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  551.777615][T14924] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  551.791151][T14924] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  551.822787][T14924] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  551.835876][T14924] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  551.841942][T14924] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  551.874567][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  551.929007][T14829] veth0_vlan: entered promiscuous mode
[  551.963911][T14829] veth1_vlan: entered promiscuous mode
[  551.985068][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  552.055622][T14829] veth0_macvtap: entered promiscuous mode
[  552.073055][T14829] veth1_macvtap: entered promiscuous mode
[  552.111409][T14829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.161448][T14829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  552.199388][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  552.213294][   T31] audit: type=1400 audit(1790781282.831:1018): avc:  denied  { write } for  pid=15108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  552.233079][T14924] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.265490][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.265620][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  552.265722][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  552.265778][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.329427][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  552.365788][T14924] 8021q: adding VLAN 0 to HW filter on device team0
[  552.401942][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.402038][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  552.435544][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  552.528274][  T772] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.528366][  T772] bridge0: port 2(bridge_slave_1) entered forwarding state
[  552.552467][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  552.559171][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.559189][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.659436][T14884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  552.672765][   T31] audit: type=1400 audit(1790781283.291:1019): avc:  denied  { write } for  pid=15139 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  552.771671][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.771693][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.793861][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  552.933270][   T49] IPVS: starting estimator thread 0...
[  552.941208][T14884] veth0_vlan: entered promiscuous mode
[  552.946402][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  552.981028][T14884] veth1_vlan: entered promiscuous mode
[  553.023846][T15154] IPVS: using max 53 ests per chain, 127200 per kthread
[  553.153625][T14884] veth0_macvtap: entered promiscuous mode
[  553.177892][T14884] veth1_macvtap: entered promiscuous mode
[  553.200421][   T31] audit: type=1400 audit(1790781283.821:1020): avc:  denied  { write } for  pid=15143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  553.262158][T14884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  553.321018][T14884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.340018][   T31] audit: type=1400 audit(1790781283.961:1021): avc:  denied  { write } for  pid=15169 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  553.354209][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.355027][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.398055][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.406779][   T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.892721][T14924] 8021q: adding VLAN 0 to HW filter on device batadv0
[  553.981790][T14924] veth0_vlan: entered promiscuous mode
[  553.996619][T14924] veth1_vlan: entered promiscuous mode
[  554.022357][   T31] audit: type=1400 audit(1790781284.641:1022): avc:  denied  { write } for  pid=15175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  554.071664][T14924] veth0_macvtap: entered promiscuous mode
[  554.078798][T14924] veth1_macvtap: entered promiscuous mode
[  554.131066][T14924] batman_adv: batadv0: Interface activated: batadv_slave_0
[  554.147587][T14924] batman_adv: batadv0: Interface activated: batadv_slave_1
[  554.165389][   T31] audit: type=1400 audit(1790781284.791:1023): avc:  denied  { write } for  pid=15193 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  554.215468][ T6023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.217598][   T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.217639][   T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.223268][   T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.471684][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'.
[  554.471706][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'.
[  554.587656][   T31] audit: type=1400 audit(1790781285.211:1024): avc:  denied  { write } for  pid=15196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  554.646128][   T31] audit: type=1400 audit(1790781285.271:1025): avc:  denied  { write } for  pid=15210 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  554.858614][   T31] audit: type=1400 audit(1790781285.481:1026): avc:  denied  { write } for  pid=15212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  554.935757][   T31] audit: type=1400 audit(1790781285.561:1027): avc:  denied  { write } for  pid=15223 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  555.203039][   T31] audit: type=1400 audit(1790781285.821:1028): avc:  denied  { write } for  pid=15225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  555.837093][T15150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  555.842290][T15144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  557.473471][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  557.473532][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  558.434895][  T772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.434917][  T772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.511960][ T6028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.511980][ T6028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.516688][  T141] net_ratelimit: 16 callbacks suppressed
[  558.516724][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  558.605553][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.605575][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.684175][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  558.703167][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.703190][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.804355][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  558.853927][T15267] bridge0: port 3(syz_tun) entered blocking state
[  558.853974][T15267] bridge0: port 3(syz_tun) entered disabled state
[  558.854074][T15267] syz_tun: entered allmulticast mode
[  558.859216][T15267] syz_tun: entered promiscuous mode
[  558.864958][T15267] bridge0: port 3(syz_tun) entered blocking state
[  558.865045][T15267] bridge0: port 3(syz_tun) entered forwarding state
[  558.934706][   T31] kauditd_printk_skb: 1 callbacks suppressed
[  558.934723][   T31] audit: type=1400 audit(1790781289.551:1030): avc:  denied  { write } for  pid=15251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  558.935767][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  558.940232][T15267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2927'.
[  559.044065][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  559.139222][   T31] audit: type=1400 audit(1790781289.761:1031): avc:  denied  { write } for  pid=15276 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  559.174080][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  559.286291][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  559.404769][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  559.525887][ T6020] bond1: (slave dummy0): failed to get link speed/duplex
[  559.550684][  T978] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  559.564246][   T31] audit: type=1400 audit(1790781290.181:1032): avc:  denied  { write } for  pid=15283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  559.634853][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  559.645576][   T31] audit: type=1400 audit(1790781290.261:1033): avc:  denied  { write } for  pid=15296 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  559.713518][  T978] usb 5-1: Using ep0 maxpacket: 16
[  559.715831][  T978] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  559.716741][  T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  559.718556][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.718577][  T978] usb 5-1: Product: syz
[  559.718591][  T978] usb 5-1: Manufacturer: syz
[  559.718606][  T978] usb 5-1: SerialNumber: syz
[  559.722955][  T978] usb 5-1: config 0 descriptor??
[  559.786135][  T978] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  559.786170][  T978] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  559.964383][   T31] audit: type=1400 audit(1790781290.591:1034): avc:  denied  { write } for  pid=15299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  560.057732][   T31] audit: type=1400 audit(1790781290.681:1035): avc:  denied  { write } for  pid=15316 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  560.350031][  T978] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  560.956272][  T978] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  560.956301][  T978] em28xx 5-1:0.0: board has no eeprom
[  561.023495][  T978] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  561.023516][  T978] em28xx 5-1:0.0: dvb set to bulk mode.
[  561.024648][ T5765] em28xx 5-1:0.0: Binding DVB extension
[  561.030802][  T978] usb 5-1: USB disconnect, device number 104
[  561.036202][  T978] em28xx 5-1:0.0: Disconnecting em28xx
[  561.061749][ T5765] em28xx 5-1:0.0: Registering input extension
[  561.062304][  T978] em28xx 5-1:0.0: Closing input extension
[  561.114026][  T978] em28xx: Freeing device
[  562.047387][T15275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  562.211364][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'.
[  562.211385][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'.
[  564.583559][  T772] net_ratelimit: 16 callbacks suppressed
[  564.583581][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  564.713707][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  564.824916][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  564.913131][T15337] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2941'.
[  564.933632][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  565.043507][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  565.079264][T15341] bridge0: port 3(syz_tun) entered blocking state
[  565.079308][T15341] bridge0: port 3(syz_tun) entered disabled state
[  565.079403][T15341] syz_tun: entered allmulticast mode
[  565.082953][T15341] syz_tun: entered promiscuous mode
[  565.083240][T15341] bridge0: port 3(syz_tun) entered blocking state
[  565.083282][T15341] bridge0: port 3(syz_tun) entered forwarding state
[  565.130229][T15341] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2942'.
[  565.154092][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  565.263632][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  565.379899][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  565.483553][ T6020] bond1: (slave dummy0): failed to get link speed/duplex
[  565.593595][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  567.690107][T15359] lo speed is unknown, defaulting to 1000
[  567.961293][T15360] lo speed is unknown, defaulting to 1000
[  568.196484][T15343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  568.262176][T15365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=15365 comm=syz.3.2947
[  568.315374][T15369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=15369 comm=syz.3.2947
[  569.800659][T13856] Bluetooth: hci5: command 0x0406 tx timeout
[  569.800705][T13856] Bluetooth: hci6: command 0x0406 tx timeout
[  571.547745][T15379] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2951'.
[  571.565528][ T6020] net_ratelimit: 23 callbacks suppressed
[  571.565546][ T6020] bond1: (slave dummy0): failed to get link speed/duplex
[  571.673734][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  571.750901][ T6020] IPVS: starting estimator thread 0...
[  571.793792][ T6020] bond1: (slave dummy0): failed to get link speed/duplex
[  571.847846][T15385] IPVS: using max 43 ests per chain, 103200 per kthread
[  571.904109][ T6020] bond1: (slave dummy0): failed to get link speed/duplex
[  571.907731][ T5712] usb 4-1: new full-speed USB device number 123 using dummy_hcd
[  572.013894][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  572.074651][ T5712] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  572.075490][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.078889][ T5712] usb 4-1: config 0 descriptor??
[  572.082098][ T5712] pwc: Samsung MPC-C10 USB webcam detected.
[  572.123593][ T6020] bond1: (slave dummy0): failed to get link speed/duplex
[  572.233491][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  572.280780][ T5712] pwc: send_video_command error -71
[  572.280798][ T5712] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  572.280901][ T5712] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  572.282598][ T5712] usb 4-1: USB disconnect, device number 123
[  572.343912][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  572.453769][ T6020] bond1: (slave dummy0): failed to get link speed/duplex
[  572.563580][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  572.723520][ T5765] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  572.874195][ T5765] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  572.874927][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.876521][ T5765] usb 4-1: config 0 descriptor??
[  572.879914][ T5765] pwc: Samsung MPC-C10 USB webcam detected.
[  573.280640][ T5765] pwc: recv_control_msg error -71 req 02 val 2b00
[  573.281048][ T5765] pwc: recv_control_msg error -71 req 02 val 2700
[  573.281388][ T5765] pwc: recv_control_msg error -71 req 04 val 1700
[  573.281715][ T5765] pwc: recv_control_msg error -71 req 02 val 2c00
[  573.282040][ T5765] pwc: recv_control_msg error -71 req 04 val 1000
[  573.282957][ T5765] pwc: recv_control_msg error -71 req 04 val 1300
[  573.283304][ T5765] pwc: recv_control_msg error -71 req 04 val 1400
[  573.285859][ T5765] pwc: recv_control_msg error -71 req 02 val 2000
[  573.286178][ T5765] pwc: recv_control_msg error -71 req 02 val 2100
[  573.286485][ T5765] pwc: recv_control_msg error -71 req 02 val 2200
[  573.286851][ T5765] pwc: recv_control_msg error -71 req 06 val 0600
[  573.287157][ T5765] pwc: recv_control_msg error -71 req 04 val 1500
[  573.287457][ T5765] pwc: recv_control_msg error -71 req 02 val 2500
[  573.287753][ T5765] pwc: recv_control_msg error -71 req 02 val 2400
[  573.288050][ T5765] pwc: recv_control_msg error -71 req 02 val 2600
[  573.288358][ T5765] pwc: recv_control_msg error -71 req 02 val 2900
[  573.288654][ T5765] pwc: recv_control_msg error -71 req 02 val 2800
[  573.289052][ T5765] pwc: recv_control_msg error -71 req 04 val 1100
[  573.289352][ T5765] pwc: recv_control_msg error -71 req 04 val 1200
[  573.304093][ T5765] pwc: Registered as video103.
[  573.305664][ T5765] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input115
[  573.308711][ T5765] usb 4-1: USB disconnect, device number 124
[  574.200448][T13856] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1
[  574.207283][T13856] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9
[  574.212415][T13856] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9
[  574.227414][T13856] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4
[  574.227849][T13856] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2
[  574.432105][T15424] lo speed is unknown, defaulting to 1000
[  574.674145][T15424] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.674223][T15424] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.674290][T15424] bridge_slave_0: entered allmulticast mode
[  574.675046][T15424] bridge_slave_0: entered promiscuous mode
[  574.706207][T15424] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.706279][T15424] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.706356][T15424] bridge_slave_1: entered allmulticast mode
[  574.707106][T15424] bridge_slave_1: entered promiscuous mode
[  574.752332][T15424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  574.763767][T15424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  574.786605][T15424] team0: Port device team_slave_0 added
[  574.788543][T15424] team0: Port device team_slave_1 added
[  574.816779][T15424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.816797][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.816818][T15424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.817711][T15424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.817723][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.817743][T15424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  574.903228][ T5599] Bluetooth: hci7: command 0x0406 tx timeout
[  574.903239][T13856] Bluetooth: hci8: command 0x0406 tx timeout
[  574.967195][T15398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  575.052259][T15424] hsr_slave_0: entered promiscuous mode
[  575.054727][T15424] hsr_slave_1: entered promiscuous mode
[  575.055195][T15424] debugfs: 'hsr0' already exists in 'hsr'
[  575.055211][T15424] Cannot create hsr debugfs directory
[  575.260566][ T4917] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1
[  575.262134][ T4917] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9
[  575.262822][ T4917] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9
[  575.292676][ T4917] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4
[  575.301788][ T4917] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2
[  575.439959][T15424] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.457413][ T5712] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  575.605344][T15424] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.630473][ T5712] usb 5-1: Using ep0 maxpacket: 8
[  575.631020][ T5712] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  575.639396][ T5712] usb 5-1: config 0 has no interfaces?
[  575.656352][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.656378][ T5712] usb 5-1: Product: syz
[  575.656392][ T5712] usb 5-1: Manufacturer: syz
[  575.656407][ T5712] usb 5-1: SerialNumber: syz
[  575.658778][ T5712] usb 5-1: config 0 descriptor??
[  575.726974][T15424] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.803033][T15462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2968'.
[  575.803056][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2968'.
[  575.803067][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2968'.
[  575.835929][T15424] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.869836][ T5712] usb 5-1: USB disconnect, device number 105
[  575.891191][T15446] lo speed is unknown, defaulting to 1000
[  575.995082][T15465] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2969'.
[  576.168449][T15424] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  576.171577][T15424] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  576.188385][T15424] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  576.201292][T15424] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  576.215711][T15424] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  576.224760][T15424] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  576.225409][T15424] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  576.251190][T15424] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  576.255331][ T4917] Bluetooth: hci24: command tx timeout
[  576.427926][T15424] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.493358][T15424] 8021q: adding VLAN 0 to HW filter on device team0
[  576.526938][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.526990][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.528909][T15484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2972'.
[  576.592865][ T6020] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.592927][ T6020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.620542][T15446] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.620667][T15446] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.620782][T15446] bridge_slave_0: entered allmulticast mode
[  576.623065][T15446] bridge_slave_0: entered promiscuous mode
[  576.668811][T15446] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.668872][T15446] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.669065][T15446] bridge_slave_1: entered allmulticast mode
[  576.669879][T15446] bridge_slave_1: entered promiscuous mode
[  576.683543][ T6024] net_ratelimit: 27 callbacks suppressed
[  576.683562][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  576.731575][T15446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  576.750849][T15446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  576.801495][T15446] team0: Port device team_slave_0 added
[  576.803182][T15446] team0: Port device team_slave_1 added
[  576.853883][T15446] batman_adv: batadv0: Adding interface: batadv_slave_0
[  576.853900][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.853922][T15446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  576.861636][T15446] batman_adv: batadv0: Adding interface: batadv_slave_1
[  576.861650][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.861669][T15446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  577.014497][T15446] hsr_slave_0: entered promiscuous mode
[  577.015299][T15446] hsr_slave_1: entered promiscuous mode
[  577.015891][T15446] debugfs: 'hsr0' already exists in 'hsr'
[  577.016818][T15446] Cannot create hsr debugfs directory
[  577.223724][ T6020] bond1: (slave dummy0): failed to get link speed/duplex
[  577.328425][T15446] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.373779][ T6020] bond1: (slave dummy0): failed to get link speed/duplex
[  577.384283][ T4917] Bluetooth: hci25: command tx timeout
[  577.465324][T15446] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.505348][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  577.618333][T15446] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.624171][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  577.701127][T15446] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.736738][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  577.842298][T15424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.854022][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  578.003678][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  578.034910][T15446] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  578.048180][T15446] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  578.060415][T15446] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  578.089859][T15446] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  578.090789][T15446] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  578.113973][T15446] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  578.115636][T15446] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  578.120076][T15446] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  578.255710][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  578.266869][T15446] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.297371][T15446] 8021q: adding VLAN 0 to HW filter on device team0
[  578.314657][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.314745][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.334252][ T4917] Bluetooth: hci24: command tx timeout
[  578.349994][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.350040][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  578.404736][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  578.450861][T15424] veth0_vlan: entered promiscuous mode
[  578.470321][T15424] veth1_vlan: entered promiscuous mode
[  578.537762][T15424] veth0_macvtap: entered promiscuous mode
[  578.561380][T15424] veth1_macvtap: entered promiscuous mode
[  578.624414][T15424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.636345][T15424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  578.666981][ T6020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.667019][ T6020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.667047][ T6020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.748047][ T6020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.910708][ T6028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.910728][ T6028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.992928][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.992950][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.078290][T15446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.154412][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'.
[  579.154434][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'.
[  579.361479][T15446] veth0_vlan: entered promiscuous mode
[  579.368201][T15446] veth1_vlan: entered promiscuous mode
[  579.392349][T15446] veth0_macvtap: entered promiscuous mode
[  579.395139][T15446] veth1_macvtap: entered promiscuous mode
[  579.417052][T15446] batman_adv: batadv0: Interface activated: batadv_slave_0
[  579.421246][T15446] batman_adv: batadv0: Interface activated: batadv_slave_1
[  579.454306][ T4917] Bluetooth: hci25: command tx timeout
[  579.455598][   T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.455961][   T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.456499][   T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.516269][ T6023] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.545310][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  579.592547][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.592569][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.645607][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.645628][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.715800][    T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  579.718599][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  579.718625][    T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  579.718655][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.721806][    T9] usb 6-1: config 0 descriptor??
[  579.928620][T15552] bridge0: port 3(syz_tun) entered blocking state
[  579.928801][T15552] bridge0: port 3(syz_tun) entered disabled state
[  579.931076][T15552] syz_tun: entered allmulticast mode
[  579.931929][T15552] syz_tun: entered promiscuous mode
[  579.932368][T15552] bridge0: port 3(syz_tun) entered blocking state
[  579.932410][T15552] bridge0: port 3(syz_tun) entered forwarding state
[  579.947560][T15552] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2963'.
[  579.957251][    T9] usb 6-1: USB disconnect, device number 2
[  580.013774][ T4917] Bluetooth: hci9: command 0x0406 tx timeout
[  580.124263][T14466] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  580.283682][T14466] usb 5-1: Using ep0 maxpacket: 8
[  580.285323][T14466] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  580.285804][T14466] usb 5-1: config 0 has no interfaces?
[  580.292922][T14466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.292940][T14466] usb 5-1: Product: syz
[  580.292948][T14466] usb 5-1: Manufacturer: syz
[  580.292957][T14466] usb 5-1: SerialNumber: syz
[  580.308595][T14466] usb 5-1: config 0 descriptor??
[  580.418730][ T5608] Bluetooth: hci24: command tx timeout
[  580.521412][T14466] usb 5-1: USB disconnect, device number 106
[  581.084318][T15571] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2984'.
[  581.534672][ T5608] Bluetooth: hci25: command tx timeout
[  581.698687][  T141] net_ratelimit: 27 callbacks suppressed
[  581.698702][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  581.804311][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  581.924007][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  582.033565][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  582.143883][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  582.254012][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  582.363726][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  582.483635][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  582.503982][ T5608] Bluetooth: hci24: command tx timeout
[  582.593544][   T59] bond1: (slave dummy0): failed to get link speed/duplex
[  582.706876][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  583.043533][T14383] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  583.198964][T14383] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  583.199701][T14383] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  583.199715][T14383] usb 5-1: config 0 has no interface number 0
[  583.201664][T14383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.201679][T14383] usb 5-1: Product: syz
[  583.201687][T14383] usb 5-1: Manufacturer: syz
[  583.201696][T14383] usb 5-1: SerialNumber: syz
[  583.203331][T14383] usb 5-1: config 0 descriptor??
[  583.409441][T14383] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  583.411821][T14383] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  583.412048][T14383] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  583.412071][T14383] usb 5-1: media controller created
[  583.449581][T14383] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  583.497565][T15553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  583.608766][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2990'.
[  583.608790][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2990'.
[  583.610772][T14383] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  583.625673][ T5608] Bluetooth: hci25: command tx timeout
[  583.663105][T14383] usb 5-1: USB disconnect, device number 107
[  583.976008][T15565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  584.302183][T15594] bridge0: port 3(syz_tun) entered blocking state
[  584.302484][T15594] bridge0: port 3(syz_tun) entered disabled state
[  584.303110][T15594] syz_tun: entered allmulticast mode
[  584.304692][T14520] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  584.360343][T15594] syz_tun: entered promiscuous mode
[  584.360788][T15594] bridge0: port 3(syz_tun) entered blocking state
[  584.360888][T15594] bridge0: port 3(syz_tun) entered forwarding state
[  584.393476][T15594] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2993'.
[  584.433547][T14466] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  584.475075][T14520] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  584.477114][T14520] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.478470][T14520] usb 7-1: config 0 descriptor??
[  584.482382][T14520] pwc: Samsung MPC-C10 USB webcam detected.
[  584.604902][T14466] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  584.605673][T14466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.608075][T14466] usb 5-1: config 0 descriptor??
[  584.682321][T14520] pwc: send_video_command error -71
[  584.682334][T14520] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  584.682420][T14520] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  584.688969][T14520] usb 7-1: USB disconnect, device number 2
[  584.812398][ T5712] usb 5-1: USB disconnect, device number 108
[  585.134344][T14520] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  585.294697][T14383] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  585.314394][T14520] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  585.315137][T14520] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.316736][T14520] usb 7-1: config 0 descriptor??
[  585.320126][T14520] pwc: Samsung MPC-C10 USB webcam detected.
[  585.443471][T14383] usb 6-1: Using ep0 maxpacket: 8
[  585.443937][T14383] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  585.448867][T14383] usb 6-1: config 0 has no interfaces?
[  585.452153][T14383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.452178][T14383] usb 6-1: Product: syz
[  585.452192][T14383] usb 6-1: Manufacturer: syz
[  585.452205][T14383] usb 6-1: SerialNumber: syz
[  585.469409][T14383] usb 6-1: config 0 descriptor??
[  585.690273][T14466] usb 6-1: USB disconnect, device number 3
[  585.720936][T14520] pwc: recv_control_msg error -71 req 02 val 2b00
[  585.721343][T14520] pwc: recv_control_msg error -71 req 02 val 2700
[  585.721698][T14520] pwc: recv_control_msg error -71 req 04 val 1700
[  585.722028][T14520] pwc: recv_control_msg error -71 req 02 val 2c00
[  585.722373][T14520] pwc: recv_control_msg error -71 req 04 val 1000
[  585.722718][T14520] pwc: recv_control_msg error -71 req 04 val 1300
[  585.723056][T14520] pwc: recv_control_msg error -71 req 04 val 1400
[  585.725103][T14520] pwc: recv_control_msg error -71 req 02 val 2000
[  585.725421][T14520] pwc: recv_control_msg error -71 req 02 val 2100
[  585.725931][T14520] pwc: recv_control_msg error -71 req 02 val 2200
[  585.726303][T14520] pwc: recv_control_msg error -71 req 06 val 0600
[  585.726618][T14520] pwc: recv_control_msg error -71 req 04 val 1500
[  585.726927][T14520] pwc: recv_control_msg error -71 req 02 val 2500
[  585.727227][T14520] pwc: recv_control_msg error -71 req 02 val 2400
[  585.727528][T14520] pwc: recv_control_msg error -71 req 02 val 2600
[  585.727837][T14520] pwc: recv_control_msg error -71 req 02 val 2900
[  585.728167][T14520] pwc: recv_control_msg error -71 req 02 val 2800
[  585.728572][T14520] pwc: recv_control_msg error -71 req 04 val 1100
[  585.728880][T14520] pwc: recv_control_msg error -71 req 04 val 1200
[  585.732083][T14520] pwc: Registered as video103.
[  585.734052][T14520] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input116
[  585.739497][T14520] usb 7-1: USB disconnect, device number 3
[  586.046355][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'.
[  586.315287][T15612] FAULT_INJECTION: forcing a failure.
[  586.315287][T15612] name failslab, interval 1, probability 0, space 0, times 0
[  586.315311][T15612] CPU: 1 UID: 0 PID: 15612 Comm: syz.5.2999 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  586.315328][T15612] Tainted: [L]=SOFTLOCKUP
[  586.315333][T15612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  586.315339][T15612] Call Trace:
[  586.315344][T15612]  <TASK>
[  586.315349][T15612]  dump_stack_lvl+0x100/0x190
[  586.315370][T15612]  should_fail_ex.cold+0x5/0xa
[  586.315386][T15612]  should_failslab+0xc2/0x120
[  586.315402][T15612]  __kmalloc_noprof+0xfc/0x840
[  586.315418][T15612]  ? __netlink_kernel_create+0x181/0x750
[  586.315436][T15612]  __netlink_kernel_create+0x181/0x750
[  586.315450][T15612]  ? find_held_lock+0x2b/0x80
[  586.315467][T15612]  ? __pfx___netlink_kernel_create+0x10/0x10
[  586.315481][T15612]  ? net_generic+0xea/0x2a0
[  586.315501][T15612]  nfnetlink_net_init+0xda/0x160
[  586.315511][T15612]  ? rcu_is_watching+0x13/0xc0
[  586.315529][T15612]  ? __pfx_nfnetlink_net_init+0x10/0x10
[  586.315540][T15612]  ? __kasan_kmalloc+0xaa/0xb0
[  586.315554][T15612]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  586.315570][T15612]  ? __pfx_nfnetlink_bind+0x10/0x10
[  586.315580][T15612]  ? __pfx_nfnetlink_unbind+0x10/0x10
[  586.315594][T15612]  ? __pfx_nfnetlink_net_init+0x10/0x10
[  586.315604][T15612]  ops_init+0x1e2/0x5f0
[  586.315621][T15612]  setup_net+0x118/0x3a0
[  586.315638][T15612]  ? __pfx_setup_net+0x10/0x10
[  586.315658][T15612]  copy_net_ns+0x345/0x7a0
[  586.315670][T15612]  create_new_namespaces+0x3ea/0xac0
[  586.315687][T15612]  unshare_nsproxy_namespaces+0xf2/0x220
[  586.315702][T15612]  ksys_unshare+0x4a2/0xa70
[  586.315716][T15612]  ? __pfx_ksys_unshare+0x10/0x10
[  586.315734][T15612]  __x64_sys_unshare+0x31/0x40
[  586.315748][T15612]  do_syscall_64+0x123/0x790
[  586.315763][T15612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.315775][T15612] RIP: 0033:0x7ff4d9f9e159
[  586.315785][T15612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.315796][T15612] RSP: 002b:00007ff4daeb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  586.315807][T15612] RAX: ffffffffffffffda RBX: 00007ff4da225fa0 RCX: 00007ff4d9f9e159
[  586.315816][T15612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  586.315824][T15612] RBP: 00007ff4da03506b R08: 0000000000000000 R09: 0000000000000000
[  586.315832][T15612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  586.315839][T15612] R13: 00007ff4da226038 R14: 00007ff4da225fa0 R15: 00007ffd12473568
[  586.315854][T15612]  </TASK>
[  586.725846][ T6023] net_ratelimit: 34 callbacks suppressed
[  586.725866][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  586.835269][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  586.945247][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  586.965886][T15628] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3003'.
[  587.003507][T14458] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  587.055073][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  587.154151][T14458] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  587.156687][T14458] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  587.156710][T14458] usb 7-1: config 0 has no interface number 0
[  587.159838][T14458] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.159861][T14458] usb 7-1: Product: syz
[  587.159876][T14458] usb 7-1: Manufacturer: syz
[  587.159891][T14458] usb 7-1: SerialNumber: syz
[  587.163253][T14458] usb 7-1: config 0 descriptor??
[  587.200756][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  587.305649][  T141] bond1: (slave dummy0): failed to get link speed/duplex
[  587.415457][   T49] bond1: (slave dummy0): failed to get link speed/duplex
[  587.435564][T14458] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  587.454783][T14458] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  587.455024][T14458] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  587.455060][T14458] usb 7-1: media controller created
[  587.497243][T14458] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  587.525034][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  587.638445][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  587.640830][T14458] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  587.724276][T14458] usb 7-1: USB disconnect, device number 4
[  587.750416][  T772] bond1: (slave dummy0): failed to get link speed/duplex
[  588.425905][T15636] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3005'.
[  589.015609][T13856] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1
[  589.024432][T13856] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9
[  589.036242][T13856] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9
[  589.055985][T13856] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4
[  589.057122][T13856] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2
[  589.282322][T15613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  589.441742][T15640] lo speed is unknown, defaulting to 1000
[  589.465962][T13856] Bluetooth: hci25: unexpected subevent 0x06 length: 9 < 10
[  589.647220][ T5765] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  589.803452][ T5765] usb 5-1: Using ep0 maxpacket: 8
[  589.803958][ T5765] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  589.804433][ T5765] usb 5-1: config 0 has no interfaces?
[  589.808124][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.808147][ T5765] usb 5-1: Product: syz
[  589.808161][ T5765] usb 5-1: Manufacturer: syz
[  589.808174][ T5765] usb 5-1: SerialNumber: syz
[  589.838333][ T5765] usb 5-1: config 0 descriptor??
[  589.841067][T15640] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.841213][T15640] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.841436][T15640] bridge_slave_0: entered allmulticast mode
[  589.842641][T15640] bridge_slave_0: entered promiscuous mode
[  589.844726][T15640] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.844828][T15640] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.844918][T15640] bridge_slave_1: entered allmulticast mode
[  589.846199][T15640] bridge_slave_1: entered promiscuous mode
[  589.888425][T15640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.907241][T15640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.981157][T15640] team0: Port device team_slave_0 added
[  589.987803][T15640] team0: Port device team_slave_1 added
[  590.068634][T15640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.068651][T15640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  590.068672][T15640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  590.133619][   T31] audit: type=1400 audit(1790781320.701:1036): avc:  denied  { setopt } for  pid=15667 comm="syz.6.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  590.169640][   T30] usb 5-1: USB disconnect, device number 109
[  590.187437][T15640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.187453][T15640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  590.187475][T15640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  590.266213][T13856] Bluetooth: hci10: command 0x0406 tx timeout
[  590.370056][T15640] hsr_slave_0: entered promiscuous mode
[  590.370919][T15640] hsr_slave_1: entered promiscuous mode
[  590.371507][T15640] debugfs: 'hsr0' already exists in 'hsr'
[  590.371523][T15640] Cannot create hsr debugfs directory
[  590.534108][ T5765] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  590.542123][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3016'.
[  590.627121][T15640] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.696076][ T5765] usb 7-1: Using ep0 maxpacket: 16
[  590.699425][ T5765] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  590.726243][ T5765] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  590.731440][ T5765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.731464][ T5765] usb 7-1: Product: syz
[  590.731478][ T5765] usb 7-1: Manufacturer: syz
[  590.731490][ T5765] usb 7-1: SerialNumber: syz
[  590.778035][ T5765] usb 7-1: config 0 descriptor??
[  590.793243][ T5765] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  590.793276][ T5765] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  590.893357][T15640] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.000937][T15640] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.106316][T15640] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.133974][ T5608] Bluetooth: hci26: command tx timeout
[  591.401392][ T5765] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  591.461680][T15685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3018'.
[  591.625557][T15640] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  591.629321][T15640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  591.629924][T15640] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  591.635604][T15640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  591.639192][T15640] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  591.649294][T15640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  591.652953][T15640] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  591.662153][T15640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  591.816168][ T5765] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  591.816197][ T5765] em28xx 7-1:0.0: board has no eeprom
[  591.957271][T15640] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.982002][T15640] 8021q: adding VLAN 0 to HW filter on device team0
[  592.020609][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.020673][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  592.022435][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.022511][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  592.113648][ T5765] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  592.113678][ T5765] em28xx 7-1:0.0: dvb set to bulk mode.
[  592.114476][T14458] em28xx 7-1:0.0: Binding DVB extension
[  592.141982][ T6023] net_ratelimit: 25 callbacks suppressed
[  592.142001][ T6023] bond1: (slave dummy0): failed to get link speed/duplex
[  592.159102][ T5765] usb 7-1: USB disconnect, device number 5
[  592.160304][ T5765] em28xx 7-1:0.0: Disconnecting em28xx
[  592.244646][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  592.281143][T14458] em28xx 7-1:0.0: Registering input extension
[  592.281354][ T5765] em28xx 7-1:0.0: Closing input extension
[  592.322983][ T5765] em28xx: Freeing device
[  592.356453][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  592.463906][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  592.573940][ T6024] bond1: (slave dummy0): failed to get link speed/duplex
[  592.631175][T15710] fuse: Unknown parameter 'group_i00000000000000000000'
[  592.661918][   T32] INFO: task syz.1.2673:13439 blocked for more than 143 seconds.
[  592.661947][   T32]       Tainted: G             L      syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  592.661958][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.661966][   T32] task:syz.1.2673      state:D stack:27504 pid:13439 tgid:13437 ppid:5600   task_flags:0x400040 flags:0x00080002
[  592.662028][   T32] Call Trace:
[  592.662034][   T32]  <TASK>
[  592.662047][   T32]  __schedule+0x1259/0x6920
[  592.662080][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.662109][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.662139][   T32]  ? lock_acquire+0x1d1/0x380
[  592.662161][   T32]  ? __pfx___schedule+0x10/0x10
[  592.662187][   T32]  ? find_held_lock+0x2b/0x80
[  592.662214][   T32]  ? schedule+0x225/0x2c0
[  592.662246][   T32]  schedule+0xdd/0x2c0
[  592.662273][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.662301][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.662321][   T32]  ? write_ports+0xa5/0xcc0
[  592.662347][   T32]  ? nfsctl_transaction_write+0xcd/0x1a0
[  592.662372][   T32]  ? vfs_read+0x1e4/0xb40
[  592.662391][   T32]  ? ksys_read+0x12a/0x250
[  592.662413][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.662444][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.662470][   T32]  ? write_ports+0xa5/0xcc0
[  592.662507][   T32]  write_ports+0xa5/0xcc0
[  592.662534][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.662561][   T32]  ? lock_acquire+0x1d1/0x380
[  592.662581][   T32]  ? __might_fault+0xc5/0x140
[  592.662600][   T32]  ? find_held_lock+0x2b/0x80
[  592.662627][   T32]  ? __might_fault+0xc5/0x140
[  592.662644][   T32]  ? __might_fault+0xc5/0x140
[  592.662665][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.662691][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.662723][   T32]  ? _copy_from_user+0x59/0xd0
[  592.662749][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.662773][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.662798][   T32]  ? __pfx_nfsctl_transaction_read+0x10/0x10
[  592.662825][   T32]  nfsctl_transaction_read+0x82/0xa0
[  592.662849][   T32]  ? __pfx_nfsctl_transaction_read+0x10/0x10
[  592.662875][   T32]  vfs_read+0x1e4/0xb40
[  592.662897][   T32]  ? lock_acquire+0x1d1/0x380
[  592.662918][   T32]  ? __fget_files+0x34/0x3d0
[  592.662943][   T32]  ? __pfx_vfs_read+0x10/0x10
[  592.662962][   T32]  ? find_held_lock+0x2b/0x80
[  592.662990][   T32]  ? __fget_files+0x215/0x3d0
[  592.663019][   T32]  ? __fget_files+0x21f/0x3d0
[  592.663051][   T32]  ksys_read+0x12a/0x250
[  592.663071][   T32]  ? __pfx_ksys_read+0x10/0x10
[  592.663100][   T32]  do_syscall_64+0x123/0x790
[  592.663123][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.663143][   T32] RIP: 0033:0x7fb35ff9e159
[  592.663159][   T32] RSP: 002b:00007fb360dc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  592.663177][   T32] RAX: ffffffffffffffda RBX: 00007fb360226090 RCX: 00007fb35ff9e159
[  592.663189][   T32] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003
[  592.663201][   T32] RBP: 00007fb36003506b R08: 0000000000000000 R09: 0000000000000000
[  592.663213][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.663225][   T32] R13: 00007fb360226128 R14: 00007fb360226090 R15: 00007ffd6f439c68
[  592.663336][   T32]  </TASK>
[  592.663346][   T32] INFO: task syz.3.2684:13476 blocked for more than 143 seconds.
[  592.683470][   T32]       Tainted: G         
** replaying previous printk message **
[  592.683470][   T32]       Tainted: G             L      syzkaller #0
[  592.683484][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.683491][   T32] task:syz.3.2684      state:D stack:27944 pid:13476 tgid:13472 ppid:5596   task_flags:0x400140 flags:0x00080002
[  592.683561][   T32] Call Trace:
[  592.683567][   T32]  <TASK>
[  592.683577][   T32]  __schedule+0x1259/0x6920
[  592.683605][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.683629][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.683655][   T32]  ? lock_acquire+0x1d1/0x380
[  592.683674][   T32]  ? __pfx___schedule+0x10/0x10
[  592.683697][   T32]  ? find_held_lock+0x2b/0x80
[  592.683721][   T32]  ? schedule+0x225/0x2c0
[  592.683747][   T32]  schedule+0xdd/0x2c0
[  592.683771][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.683795][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.683812][   T32]  ? write_versions+0x9d/0xba0
[  592.683839][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.683861][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.683882][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.683906][   T32]  ? write_versions+0x9d/0xba0
[  592.683927][   T32]  write_versions+0x9d/0xba0
[  592.683950][   T32]  ? find_held_lock+0x2b/0x80
[  592.683974][   T32]  ? __pfx_write_versions+0x10/0x10
[  592.683998][   T32]  ? __pfx_write_versions+0x10/0x10
[  592.684022][   T32]  ? _copy_from_user+0x59/0xd0
[  592.684044][   T32]  ? __pfx_write_versions+0x10/0x10
[  592.684066][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.684090][   T32]  vfs_write+0x2aa/0x1050
[  592.684110][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.684131][   T32]  ? lock_acquire+0x1d1/0x380
[  592.684149][   T32]  ? __fget_files+0x34/0x3d0
[  592.684171][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.684187][   T32]  ? find_held_lock+0x2b/0x80
[  592.684216][   T32]  ? __fget_files+0x215/0x3d0
[  592.684241][   T32]  ? __fget_files+0x21f/0x3d0
[  592.684269][   T32]  ksys_write+0x12a/0x250
[  592.684287][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.684312][   T32]  do_syscall_64+0x123/0x790
[  592.684331][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.684349][   T32] RIP: 0033:0x7fa0e4d9e159
[  592.684362][   T32] RSP: 002b:00007fa0e5cfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.684378][   T32] RAX: ffffffffffffffda RBX: 00007fa0e5026090 RCX: 00007fa0e4d9e159
[  592.684389][   T32] RDX: 0000000000000009 RSI: 0000200000000300 RDI: 0000000000000003
[  592.684399][   T32] RBP: 00007fa0e4e3506b R08: 0000000000000000 R09: 0000000000000000
[  592.684409][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.684419][   T32] R13: 00007fa0e5026128 R14: 00007fa0e5026090 R15: 00007ffdbd7b8458
[  592.684442][   T32]  </TASK>
[  592.684450][   T32] INFO: task syz.3.2684:13477 blocked for more than 143 seconds.
[  592.684463][   T32]       Tainted: G             L      syzkaller #0
[  592.684472][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.684479][   T32] task:syz.3.2684      state:D stack:27944 pid:13477 tgid:13472 ppid:5596   task_flags:0x400040 flags:0x00080002
[  592.684526][   T32] Call Trace:
[  592.684531][   T32]  <TASK>
[  592.684540][   T32]  __schedule+0x1259/0x6920
[  592.684563][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.684586][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.684611][   T32]  ? lock_acquire+0x1d1/0x380
[  592.684630][   T32]  ? __pfx___schedule+0x10/0x10
[  592.684652][   T32]  ? find_held_lock+0x2b/0x80
[  592.684675][   T32]  ? schedule+0x225/0x2c0
[  592.684702][   T32]  schedule+0xdd/0x2c0
[  592.684726][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.684749][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.684766][   T32]  ? write_ports+0xa5/0xcc0
[  592.684787][   T32]  ? nfsctl_transaction_write+0xcd/0x1a0
[  592.684807][   T32]  ? ksys_write+0x12a/0x250
[  592.684824][   T32]  ? do_syscall_64+0x123/0x790
[  592.684842][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.684870][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.684891][   T32]  ? write_ports+0xa5/0xcc0
[  592.684912][   T32]  write_ports+0xa5/0xcc0
[  592.684934][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.684956][   T32]  ? lock_acquire+0x1d1/0x380
[  592.684974][   T32]  ? __might_fault+0xc5/0x140
[  592.684990][   T32]  ? find_held_lock+0x2b/0x80
[  592.695578][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  592.697690][   T32]  ? __might_fault+0xc5/0x140
[  592.697712][   T32]  ? __might_fault+0xc5/0x140
[  592.697731][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.697756][   T32]  ? _copy_from_user+0x59/0xd0
[  592.697778][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.697800][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.697824][   T32]  vfs_write+0x2aa/0x1050
[  592.697844][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.697877][   T32]  ? lock_acquire+0x1d1/0x380
[  592.697895][   T32]  ? __fget_files+0x34/0x3d0
[  592.697917][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.697934][   T32]  ? find_held_lock+0x2b/0x80
[  592.697958][   T32]  ? __fget_files+0x215/0x3d0
[  592.697983][   T32]  ? __fget_files+0x21f/0x3d0
[  592.698010][   T32]  ksys_write+0x12a/0x250
[  592.698028][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.698054][   T32]  do_syscall_64+0x123/0x790
[  592.698073][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.698091][   T32] RIP: 0033:0x7fa0e4d9e159
[  592.698105][   T32] RSP: 002b:00007fa0e5cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.698123][   T32] RAX: ffffffffffffffda RBX: 00007fa0e5026180 RCX: 00007fa0e4d9e159
[  592.698135][   T32] RDX: 000000000000000a RSI: 0000200000000500 RDI: 0000000000000004
[  592.698145][   T32] RBP: 00007fa0e4e3506b R08: 0000000000000000 R09: 0000000000000000
[  592.698156][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.698166][   T32] R13: 00007fa0e5026218 R14: 00007fa0e5026180 R15: 00007ffdbd7b8458
[  592.698188][   T32]  </TASK>
[  592.698197][   T32] INFO: task syz.3.2684:13480 blocked for more than 143 seconds.
[  592.698216][   T32]       Tainted: G             L      syzkaller #0
[  592.698225][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.698232][   T32] task:syz.3.2684      state:D stack:27944 pid:13480 tgid:13472 ppid:5596   task_flags:0x400040 flags:0x00080002
[  592.698282][   T32] Call Trace:
[  592.698287][   T32]  <TASK>
[  592.698296][   T32]  __schedule+0x1259/0x6920
[  592.698320][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.698343][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.698371][   T32]  ? __pfx___schedule+0x10/0x10
[  592.698393][   T32]  ? find_held_lock+0x2b/0x80
[  592.698416][   T32]  ? schedule+0x225/0x2c0
[  592.698443][   T32]  schedule+0xdd/0x2c0
[  592.698466][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.698489][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.698507][   T32]  ? write_threads+0x288/0x600
[  592.698534][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.698553][   T32]  ? simple_strntoull+0xdf/0x170
[  592.698576][   T32]  ? net_generic+0x25/0x2a0
[  592.698598][   T32]  ? net_generic+0xea/0x2a0
[  592.698618][   T32]  ? net_generic+0xea/0x2a0
[  592.698645][   T32]  ? write_threads+0x288/0x600
[  592.698667][   T32]  write_threads+0x288/0x600
[  592.698692][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.698716][   T32]  ? __might_fault+0xc5/0x140
[  592.698733][   T32]  ? __might_fault+0xc5/0x140
[  592.698756][   T32]  ? _copy_from_user+0x59/0xd0
[  592.698778][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.698803][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.698827][   T32]  vfs_write+0x2aa/0x1050
[  592.698846][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.706596][   T32]  ? lock_acquire+0x1d1/0x380
[  592.706624][   T32]  ? __fget_files+0x34/0x3d0
[  592.706647][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.706664][   T32]  ? find_held_lock+0x2b/0x80
[  592.706688][   T32]  ? __fget_files+0x215/0x3d0
[  592.706714][   T32]  ? __fget_files+0x21f/0x3d0
[  592.706741][   T32]  ksys_write+0x12a/0x250
[  592.706759][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.706784][   T32]  do_syscall_64+0x123/0x790
[  592.706804][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.706821][   T32] RIP: 0033:0x7fa0e4d9e159
[  592.706835][   T32] RSP: 002b:00007fa0e5cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.706852][   T32] RAX: ffffffffffffffda RBX: 00007fa0e5026270 RCX: 00007fa0e4d9e159
[  592.706863][   T32] RDX: 0000000000000002 RSI: 0000200000000700 RDI: 0000000000000005
[  592.706874][   T32] RBP: 00007fa0e4e3506b R08: 0000000000000000 R09: 0000000000000000
[  592.706884][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.706894][   T32] R13: 00007fa0e5026308 R14: 00007fa0e5026270 R15: 00007ffdbd7b8458
[  592.706917][   T32]  </TASK>
[  592.706926][   T32] INFO: task syz.2.2689:13487 blocked for more than 143 seconds.
[  592.706941][   T32]       Tainted: G             L      syzkaller #0
[  592.706950][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.706958][   T32] task:syz.2.2689      state:D stack:28376 pid:13487 tgid:13486 ppid:5597   task_flags:0x400140 flags:0x00080002
[  592.707007][   T32] Call Trace:
[  592.707012][   T32]  <TASK>
[  592.707022][   T32]  __schedule+0x1259/0x6920
[  592.707045][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.707068][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.707093][   T32]  ? lock_acquire+0x1d1/0x380
[  592.707112][   T32]  ? __pfx___schedule+0x10/0x10
[  592.707134][   T32]  ? find_held_lock+0x2b/0x80
[  592.707157][   T32]  ? schedule+0x225/0x2c0
[  592.707184][   T32]  schedule+0xdd/0x2c0
[  592.707212][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.707236][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.707253][   T32]  ? write_ports+0xa5/0xcc0
[  592.707276][   T32]  ? nfsctl_transaction_write+0xcd/0x1a0
[  592.707297][   T32]  ? ksys_write+0x12a/0x250
[  592.707314][   T32]  ? do_syscall_64+0x123/0x790
[  592.707332][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.707360][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.707382][   T32]  ? write_ports+0xa5/0xcc0
[  592.707403][   T32]  write_ports+0xa5/0xcc0
[  592.707426][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.707448][   T32]  ? lock_acquire+0x1d1/0x380
[  592.707466][   T32]  ? __might_fault+0xc5/0x140
[  592.707483][   T32]  ? find_held_lock+0x2b/0x80
[  592.707505][   T32]  ? __might_fault+0xc5/0x140
[  592.707520][   T32]  ? __might_fault+0xc5/0x140
[  592.707538][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.707562][   T32]  ? _copy_from_user+0x59/0xd0
[  592.707584][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.707605][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.707628][   T32]  vfs_write+0x2aa/0x1050
[  592.707647][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.707669][   T32]  ? lock_acquire+0x1d1/0x380
[  592.707686][   T32]  ? __fget_files+0x34/0x3d0
[  592.707707][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.707723][   T32]  ? find_held_lock+0x2b/0x80
[  592.707747][   T32]  ? __fget_files+0x215/0x3d0
[  592.707772][   T32]  ? __fget_files+0x21f/0x3d0
[  592.707799][   T32]  ksys_write+0x12a/0x250
[  592.707818][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.707843][   T32]  do_syscall_64+0x123/0x790
[  592.707862][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.707889][   T32] RIP: 0033:0x7f575ad9e159
[  592.707902][   T32] RSP: 002b:00007f575bb89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.707917][   T32] RAX: ffffffffffffffda RBX: 00007f575b025fa0 RCX: 00007f575ad9e159
[  592.707929][   T32] RDX: 000000000000000a RSI: 0000200000000100 RDI: 0000000000000003
[  592.707939][   T32] RBP: 00007f575ae3506b R08: 0000000000000000 R09: 0000000000000000
[  592.707950][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.707960][   T32] R13: 00007f575b026038 R14: 00007f575b025fa0 R15: 00007ffe6a1aec38
[  592.707983][   T32]  </TASK>
[  592.707990][   T32] INFO: task syz.2.2689:13488 blocked for more than 143 seconds.
[  592.708003][   T32]       Tainted: G             L      syzkaller #0
[  592.708012][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.708018][   T32] task:syz.2.2689      state:D stack:28728 pid:13488 tgid:13486 ppid:5597   task_flags:0x400040 flags:0x00080002
[  592.708067][   T32] Call Trace:
[  592.708072][   T32]  <TASK>
[  592.708081][   T32]  __schedule+0x1259/0x6920
[  592.708104][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.708127][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.708152][   T32]  ? lock_acquire+0x1d1/0x380
[  592.729507][   T32]  ? __pfx___schedule+0x10/0x10
[  592.729541][   T32]  ? find_held_lock+0x2b/0x80
[  592.729566][   T32]  ? schedule+0x225/0x2c0
[  592.729593][   T32]  schedule+0xdd/0x2c0
[  592.729618][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.729643][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.729661][   T32]  ? write_threads+0x288/0x600
[  592.729689][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.729709][   T32]  ? simple_strntoull+0xdf/0x170
[  592.729732][   T32]  ? net_generic+0x25/0x2a0
[  592.729754][   T32]  ? net_generic+0xea/0x2a0
[  592.729775][   T32]  ? net_generic+0xea/0x2a0
[  592.729802][   T32]  ? write_threads+0x288/0x600
[  592.729823][   T32]  write_threads+0x288/0x600
[  592.729848][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.729870][   T32]  ? __might_fault+0xc5/0x140
[  592.729888][   T32]  ? __might_fault+0xc5/0x140
[  592.729912][   T32]  ? _copy_from_user+0x59/0xd0
[  592.729934][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.729956][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.729980][   T32]  vfs_write+0x2aa/0x1050
[  592.730000][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.730022][   T32]  ? lock_acquire+0x1d1/0x380
[  592.730040][   T32]  ? __fget_files+0x34/0x3d0
[  592.730062][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.730079][   T32]  ? find_held_lock+0x2b/0x80
[  592.730102][   T32]  ? __fget_files+0x215/0x3d0
[  592.730127][   T32]  ? __fget_files+0x21f/0x3d0
[  592.730155][   T32]  ksys_write+0x12a/0x250
[  592.730173][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.730198][   T32]  do_syscall_64+0x123/0x790
[  592.730221][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.730239][   T32] RIP: 0033:0x7f575ad9e159
[  592.730253][   T32] RSP: 002b:00007f5758ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.730270][   T32] RAX: ffffffffffffffda RBX: 00007f575b026090 RCX: 00007f575ad9e159
[  592.730281][   T32] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003
[  592.730292][   T32] RBP: 00007f575ae3506b R08: 0000000000000000 R09: 0000000000000000
[  592.730302][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.730312][   T32] R13: 00007f575b026128 R14: 00007f575b026090 R15: 00007ffe6a1aec38
[  592.730336][   T32]  </TASK>
[  592.730345][   T32] INFO: task syz.4.2699:13519 blocked for more than 143 seconds.
[  592.730359][   T32]       Tainted: G             L      syzkaller #0
[  592.730368][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.730375][   T32] task:syz.4.2699      state:D stack:27944 pid:13519 tgid:13518 ppid:5606   task_flags:0x400140 flags:0x00080002
[  592.730424][   T32] Call Trace:
[  592.730430][   T32]  <TASK>
[  592.730439][   T32]  __schedule+0x1259/0x6920
[  592.730463][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.730486][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.730511][   T32]  ? lock_acquire+0x1d1/0x380
[  592.730530][   T32]  ? __pfx___schedule+0x10/0x10
[  592.730552][   T32]  ? find_held_lock+0x2b/0x80
[  592.730575][   T32]  ? schedule+0x225/0x2c0
[  592.730602][   T32]  schedule+0xdd/0x2c0
[  592.730625][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.730649][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.730669][   T32]  ? write_versions+0x9d/0xba0
[  592.730696][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.730717][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.730738][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.730763][   T32]  ? write_versions+0x9d/0xba0
[  592.730783][   T32]  write_versions+0x9d/0xba0
[  592.730806][   T32]  ? find_held_lock+0x2b/0x80
[  592.730830][   T32]  ? __pfx_write_versions+0x10/0x10
[  592.730854][   T32]  ? __pfx_write_versions+0x10/0x10
[  592.730878][   T32]  ? _copy_from_user+0x59/0xd0
[  592.730899][   T32]  ? __pfx_write_versions+0x10/0x10
[  592.730920][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.730943][   T32]  vfs_write+0x2aa/0x1050
[  592.730962][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.730983][   T32]  ? lock_acquire+0x1d1/0x380
[  592.731001][   T32]  ? __fget_files+0x34/0x3d0
[  592.731021][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.731038][   T32]  ? find_held_lock+0x2b/0x80
[  592.731062][   T32]  ? __fget_files+0x215/0x3d0
[  592.731087][   T32]  ? __fget_files+0x21f/0x3d0
[  592.731115][   T32]  ksys_write+0x12a/0x250
[  592.744812][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.744848][   T32]  do_syscall_64+0x123/0x790
[  592.744868][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.744886][   T32] RIP: 0033:0x7f807399e159
[  592.744900][   T32] RSP: 002b:00007f8074911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.744917][   T32] RAX: ffffffffffffffda RBX: 00007f8073c25fa0 RCX: 00007f807399e159
[  592.744929][   T32] RDX: 0000000000000009 RSI: 0000200000000120 RDI: 0000000000000003
[  592.744940][   T32] RBP: 00007f8073a3506b R08: 0000000000000000 R09: 0000000000000000
[  592.744951][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.744961][   T32] R13: 00007f8073c26038 R14: 00007f8073c25fa0 R15: 00007ffc285b5638
[  592.744985][   T32]  </TASK>
[  592.744993][   T32] INFO: task syz.4.2699:13520 blocked for more than 143 seconds.
[  592.745007][   T32]       Tainted: G             L      syzkaller #0
[  592.745017][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.745024][   T32] task:syz.4.2699      state:D stack:27944 pid:13520 tgid:13518 ppid:5606   task_flags:0x400040 flags:0x00080002
[  592.745073][   T32] Call Trace:
[  592.745079][   T32]  <TASK>
[  592.745088][   T32]  __schedule+0x1259/0x6920
[  592.745112][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.745136][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.745162][   T32]  ? lock_acquire+0x1d1/0x380
[  592.745181][   T32]  ? __pfx___schedule+0x10/0x10
[  592.745209][   T32]  ? find_held_lock+0x2b/0x80
[  592.745233][   T32]  ? schedule+0x225/0x2c0
[  592.745260][   T32]  schedule+0xdd/0x2c0
[  592.745283][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.745306][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.745324][   T32]  ? write_ports+0xa5/0xcc0
[  592.745346][   T32]  ? nfsctl_transaction_write+0xcd/0x1a0
[  592.745367][   T32]  ? ksys_write+0x12a/0x250
[  592.745384][   T32]  ? do_syscall_64+0x123/0x790
[  592.745402][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.745430][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.745452][   T32]  ? write_ports+0xa5/0xcc0
[  592.745473][   T32]  write_ports+0xa5/0xcc0
[  592.745498][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.745521][   T32]  ? lock_acquire+0x1d1/0x380
[  592.745541][   T32]  ? __might_fault+0xc5/0x140
[  592.745559][   T32]  ? find_held_lock+0x2b/0x80
[  592.745585][   T32]  ? __might_fault+0xc5/0x140
[  592.745602][   T32]  ? __might_fault+0xc5/0x140
[  592.745622][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.747537][   T32]  ? _copy_from_user+0x59/0xd0
[  592.747564][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.747587][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.747611][   T32]  vfs_write+0x2aa/0x1050
[  592.747630][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.747652][   T32]  ? lock_acquire+0x1d1/0x380
[  592.747670][   T32]  ? __fget_files+0x34/0x3d0
[  592.747692][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.747709][   T32]  ? find_held_lock+0x2b/0x80
[  592.747732][   T32]  ? __fget_files+0x215/0x3d0
[  592.747757][   T32]  ? __fget_files+0x21f/0x3d0
[  592.747785][   T32]  ksys_write+0x12a/0x250
[  592.747803][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.747828][   T32]  do_syscall_64+0x123/0x790
[  592.747848][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.747866][   T32] RIP: 0033:0x7f807399e159
[  592.747879][   T32] RSP: 002b:00007f80748f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.747896][   T32] RAX: ffffffffffffffda RBX: 00007f8073c26090 RCX: 00007f807399e159
[  592.747907][   T32] RDX: 0000000000000009 RSI: 0000200000000160 RDI: 0000000000000003
[  592.747917][   T32] RBP: 00007f8073a3506b R08: 0000000000000000 R09: 0000000000000000
[  592.747928][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.747938][   T32] R13: 00007f8073c26128 R14: 00007f8073c26090 R15: 00007ffc285b5638
[  592.747962][   T32]  </TASK>
[  592.747970][   T32] INFO: task syz.4.2699:13521 blocked for more than 143 seconds.
[  592.747984][   T32]       Tainted: G             L      syzkaller #0
[  592.747993][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.748000][   T32] task:syz.4.2699      state:D stack:27944 pid:13521 tgid:13518 ppid:5606   task_flags:0x400040 flags:0x00080002
[  592.748048][   T32] Call Trace:
[  592.748054][   T32]  <TASK>
[  592.748063][   T32]  __schedule+0x1259/0x6920
[  592.748086][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.748108][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.748133][   T32]  ? lock_acquire+0x1d1/0x380
[  592.748152][   T32]  ? __pfx___schedule+0x10/0x10
[  592.748176][   T32]  ? find_held_lock+0x2b/0x80
[  592.757814][   T32]  ? schedule+0x225/0x2c0
[  592.757851][   T32]  schedule+0xdd/0x2c0
[  592.757890][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.757914][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.757931][   T32]  ? nfsd_nrthreads+0x57/0xd0
[  592.757956][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.757977][   T32]  ? lock_acquire+0x1d1/0x380
[  592.757999][   T32]  ? net_generic+0xea/0x2a0
[  592.758016][   T32]  ? net_generic+0xea/0x2a0
[  592.758039][   T32]  ? nfsd_nrthreads+0x57/0xd0
[  592.758058][   T32]  nfsd_nrthreads+0x57/0xd0
[  592.758077][   T32]  write_threads+0x34a/0x600
[  592.758102][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.758124][   T32]  ? __might_fault+0xc5/0x140
[  592.758142][   T32]  ? __might_fault+0xc5/0x140
[  592.758157][   T32]  ? __might_fault+0xc5/0x140
[  592.758175][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.758204][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.758227][   T32]  ? _copy_from_user+0x59/0xd0
[  592.758249][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.758271][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.758292][   T32]  ? __pfx_nfsctl_transaction_read+0x10/0x10
[  592.758314][   T32]  nfsctl_transaction_read+0x82/0xa0
[  592.758335][   T32]  ? __pfx_nfsctl_transaction_read+0x10/0x10
[  592.758357][   T32]  vfs_read+0x1e4/0xb40
[  592.758376][   T32]  ? lock_acquire+0x1d1/0x380
[  592.758394][   T32]  ? __fget_files+0x34/0x3d0
[  592.758415][   T32]  ? __pfx_vfs_read+0x10/0x10
[  592.758432][   T32]  ? find_held_lock+0x2b/0x80
[  592.758455][   T32]  ? __fget_files+0x215/0x3d0
[  592.758481][   T32]  ? __fget_files+0x21f/0x3d0
[  592.758508][   T32]  ksys_read+0x12a/0x250
[  592.758526][   T32]  ? __pfx_ksys_read+0x10/0x10
[  592.758551][   T32]  do_syscall_64+0x123/0x790
[  592.758571][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.758588][   T32] RIP: 0033:0x7f807399e159
[  592.758601][   T32] RSP: 002b:00007f80748cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  592.758618][   T32] RAX: ffffffffffffffda RBX: 00007f8073c26180 RCX: 00007f807399e159
[  592.758630][   T32] RDX: 0000000000000080 RSI: 00002000000001a0 RDI: 0000000000000003
[  592.758640][   T32] RBP: 00007f8073a3506b R08: 0000000000000000 R09: 0000000000000000
[  592.758651][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.758661][   T32] R13: 00007f8073c26218 R14: 00007f8073c26180 R15: 00007ffc285b5638
[  592.758684][   T32]  </TASK>
[  592.758692][   T32] INFO: task syz.0.2704:13533 blocked for more than 143 seconds.
[  592.758708][   T32]       Tainted: G             L      syzkaller #0
[  592.758716][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.758723][   T32] task:syz.0.2704      state:D stack:28728 pid:13533 tgid:13532 ppid:5603   task_flags:0x400140 flags:0x00080002
[  592.758773][   T32] Call Trace:
[  592.758778][   T32]  <TASK>
[  592.758788][   T32]  __schedule+0x1259/0x6920
[  592.758811][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.758833][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.758858][   T32]  ? lock_acquire+0x1d1/0x380
[  592.758877][   T32]  ? __pfx___schedule+0x10/0x10
[  592.758899][   T32]  ? find_held_lock+0x2b/0x80
[  592.758923][   T32]  ? schedule+0x225/0x2c0
[  592.758949][   T32]  schedule+0xdd/0x2c0
[  592.758972][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.758996][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.759013][   T32]  ? write_ports+0xa5/0xcc0
[  592.759034][   T32]  ? nfsctl_transaction_write+0xcd/0x1a0
[  592.759055][   T32]  ? ksys_write+0x12a/0x250
[  592.759072][   T32]  ? do_syscall_64+0x123/0x790
[  592.759090][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.759117][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.759140][   T32]  ? write_ports+0xa5/0xcc0
[  592.759160][   T32]  write_ports+0xa5/0xcc0
[  592.759183][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.759210][   T32]  ? lock_acquire+0x1d1/0x380
[  592.759228][   T32]  ? __might_fault+0xc5/0x140
[  592.759244][   T32]  ? find_held_lock+0x2b/0x80
[  592.759266][   T32]  ? __might_fault+0xc5/0x140
[  592.759281][   T32]  ? __might_fault+0xc5/0x140
[  592.759299][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.759323][   T32]  ? _copy_from_user+0x59/0xd0
[  592.770629][   T32]  ? __pfx_write_ports+0x10/0x10
[  592.770667][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.770694][   T32]  vfs_write+0x2aa/0x1050
[  592.770715][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.770740][   T32]  ? lock_acquire+0x1d1/0x380
[  592.770760][   T32]  ? __fget_files+0x34/0x3d0
[  592.770785][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.770804][   T32]  ? find_held_lock+0x2b/0x80
[  592.770832][   T32]  ? __fget_files+0x215/0x3d0
[  592.770860][   T32]  ? __fget_files+0x21f/0x3d0
[  592.770892][   T32]  ksys_write+0x12a/0x250
[  592.770911][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.770940][   T32]  do_syscall_64+0x123/0x790
[  592.770961][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.770981][   T32] RIP: 0033:0x7efcae59e159
[  592.770996][   T32] RSP: 002b:00007efcaf40d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.771014][   T32] RAX: ffffffffffffffda RBX: 00007efcae825fa0 RCX: 00007efcae59e159
[  592.771026][   T32] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000003
[  592.771038][   T32] RBP: 00007efcae63506b R08: 0000000000000000 R09: 0000000000000000
[  592.771049][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.771061][   T32] R13: 00007efcae826038 R14: 00007efcae825fa0 R15: 00007fffa4425938
[  592.771087][   T32]  </TASK>
[  592.771094][   T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  592.771105][   T32] INFO: task syz.0.2704:13534 blocked for more than 143 seconds.
[  592.771121][   T32]       Tainted: G             L      syzkaller #0
[  592.771131][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.771139][   T32] task:syz.0.2704      state:D stack:28728 pid:13534 tgid:13532 ppid:5603   task_flags:0x400040 flags:0x00080002
[  592.771196][   T32] Call Trace:
[  592.771209][   T32]  <TASK>
[  592.771220][   T32]  __schedule+0x1259/0x6920
[  592.771247][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.771273][   T32]  ? do_raw_spin_lock+0x128/0x260
[  592.771302][   T32]  ? lock_acquire+0x1d1/0x380
[  592.771324][   T32]  ? __pfx___schedule+0x10/0x10
[  592.771350][   T32]  ? find_held_lock+0x2b/0x80
[  592.771378][   T32]  ? schedule+0x225/0x2c0
[  592.771409][   T32]  schedule+0xdd/0x2c0
[  592.771436][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.771464][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.771484][   T32]  ? write_versions+0x9d/0xba0
[  592.771515][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.771540][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.771564][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.771592][   T32]  ? write_versions+0x9d/0xba0
[  592.771616][   T32]  write_versions+0x9d/0xba0
[  592.771642][   T32]  ? find_held_lock+0x2b/0x80
[  592.771668][   T32]  ? __pfx_write_versions+0x10/0x10
[  592.771693][   T32]  ? __pfx_write_versions+0x10/0x10
[  592.771717][   T32]  ? _copy_from_user+0x59/0xd0
[  592.771739][   T32]  ? __pfx_write_versions+0x10/0x10
[  592.771761][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.771785][   T32]  vfs_write+0x2aa/0x1050
[  592.771804][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.771825][   T32]  ? lock_acquire+0x1d1/0x380
[  592.771843][   T32]  ? __fget_files+0x34/0x3d0
[  592.771863][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.771880][   T32]  ? find_held_lock+0x2b/0x80
[  592.771903][   T32]  ? __fget_files+0x215/0x3d0
[  592.771928][   T32]  ? __fget_files+0x21f/0x3d0
[  592.771956][   T32]  ksys_write+0x12a/0x250
[  592.771974][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.771999][   T32]  do_syscall_64+0x123/0x790
[  592.772018][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.772035][   T32] RIP: 0033:0x7efcae59e159
[  592.772048][   T32] RSP: 002b:00007efcaf3ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.772064][   T32] RAX: ffffffffffffffda RBX: 00007efcae826090 RCX: 00007efcae59e159
[  592.772075][   T32] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000003
[  592.772086][   T32] RBP: 00007efcae63506b R08: 0000000000000000 R09: 0000000000000000
[  592.772096][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.772106][   T32] R13: 00007efcae826128 R14: 00007efcae826090 R15: 00007fffa4425938
[  592.806599][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  592.812835][   T32]  </TASK>
[  592.812847][   T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  592.812855][   T32] INFO: task syz.0.2704:13535 blocked for more than 143 seconds.
[  592.812870][   T32]       Tainted: G             L      syzkaller #0
[  592.812880][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.812887][   T32] task:syz.0.2704      state:D stack:28728 pid:13535 tgid:13532 ppid:5603   task_flags:0x400040 flags:0x00080002
[  592.812939][   T32] Call Trace:
[  592.812945][   T32]  <TASK>
[  592.812954][   T32]  __schedule+0x1259/0x6920
[  592.812983][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  592.813008][   T32]  ? irqentry_exit+0x24d/0xa10
[  592.813027][   T32]  ? lock_acquire+0x1d1/0x380
[  592.813046][   T32]  ? __pfx___schedule+0x10/0x10
[  592.813069][   T32]  ? find_held_lock+0x2b/0x80
[  592.813093][   T32]  ? schedule+0x225/0x2c0
[  592.813119][   T32]  schedule+0xdd/0x2c0
[  592.813143][   T32]  schedule_preempt_disabled+0x13/0x30
[  592.813167][   T32]  __mutex_lock+0xccb/0x1bd0
[  592.813184][   T32]  ? write_threads+0x288/0x600
[  592.813219][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  592.813238][   T32]  ? simple_strntoull+0xdf/0x170
[  592.813260][   T32]  ? net_generic+0x25/0x2a0
[  592.813283][   T32]  ? net_generic+0xea/0x2a0
[  592.813303][   T32]  ? net_generic+0xea/0x2a0
[  592.813330][   T32]  ? write_threads+0x288/0x600
[  592.813351][   T32]  write_threads+0x288/0x600
[  592.829440][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.829478][   T32]  ? __might_fault+0xc5/0x140
[  592.829507][   T32]  ? __might_fault+0xc5/0x140
[  592.829530][   T32]  ? _copy_from_user+0x59/0xd0
[  592.829552][   T32]  ? __pfx_write_threads+0x10/0x10
[  592.829575][   T32]  nfsctl_transaction_write+0x106/0x1a0
[  592.829599][   T32]  vfs_write+0x2aa/0x1050
[  592.829620][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  592.829641][   T32]  ? lock_acquire+0x1d1/0x380
[  592.829660][   T32]  ? __fget_files+0x34/0x3d0
[  592.829681][   T32]  ? __pfx_vfs_write+0x10/0x10
[  592.829698][   T32]  ? find_held_lock+0x2b/0x80
[  592.829722][   T32]  ? __fget_files+0x215/0x3d0
[  592.829748][   T32]  ? __fget_files+0x21f/0x3d0
[  592.829775][   T32]  ksys_write+0x12a/0x250
[  592.829793][   T32]  ? __pfx_ksys_write+0x10/0x10
[  592.829819][   T32]  do_syscall_64+0x123/0x790
[  592.829839][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.829857][   T32] RIP: 0033:0x7efcae59e159
[  592.829871][   T32] RSP: 002b:00007efcaf3cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  592.829889][   T32] RAX: ffffffffffffffda RBX: 00007efcae826180 RCX: 00007efcae59e159
[  592.829901][   T32] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003
[  592.829911][   T32] RBP: 00007efcae63506b R08: 0000000000000000 R09: 0000000000000000
[  592.829922][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.829932][   T32] R13: 00007efcae826218 R14: 00007efcae826180 R15: 00007fffa4425938
[  592.829955][   T32]  </TASK>
[  592.829962][   T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  592.830114][   T32] 
[  592.830114][   T32] Showing all locks held in the system:
[  592.830129][   T32] locks held by pr/ttyS0/16: 2, last CPU#0:
[  592.830142][   T32]  #0: ffffffff8edd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[  592.844374][   T32]  #1: ffffffff9bc75f38 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0
[  592.844419][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  592.844431][   T32]  #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  592.844486][   T32] locks held by kworker/u8:7/772: 2, on CPU#1:
[  592.844498][   T32]  #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  592.844544][   T32]  #1: ffffc900042b7d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  592.844617][   T32] locks held by getty/5355: 2, on CPU#0:
[  592.844640][   T32]  #0: ffff8880380540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  592.844679][   T32]  #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  592.844722][   T32] locks held by kworker/0:4/5690: 6, on CPU#0:
[  592.844733][   T32]  #0: ffff8880242dd140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  592.844780][   T32]  #1: ffffc900042e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  592.844825][   T32]  #2: ffff88802aee81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[  592.844869][   T32]  #3: ffff888047c8e1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[  592.844910][   T32]  #4: ffff888041a2c1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[  592.844950][   T32]  #5: ffffffff8ec8fde8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250
[  592.844993][   T32] locks held by kworker/u8:12/6020: 3, last CPU#1:
[  592.845004][   T32]  #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  592.845049][   T32]  #1: ffffc900046b7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  592.845094][   T32]  #2: ffff8880909b3258 (&devlink->lock_key#29){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  592.845143][   T32] locks held by kworker/u8:18/6028: 3, last CPU#1:
[  592.845155][   T32]  #0: ffff888034230940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  592.845204][   T32]  #1: ffffc90002e47d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  592.845249][   T32]  #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360
[  592.845294][   T32] locks held by syz.1.2673/13438: 3, on CPU#0:
[  592.845306][   T32]  #0: ffff88807e24a7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.845349][   T32]  #1: ffff88807ac36460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.845392][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.845436][   T32] locks held by syz.1.2673/13439: 2, on CPU#1:
[  592.845446][   T32]  #0: ffff888079d4a630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.845489][   T32]  #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.845529][   T32] locks held by syz.3.2684/13476: 3, on CPU#1:
[  592.845540][   T32]  #0: ffff888075fa5430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.845582][   T32]  #1: ffff88802b01a460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.845624][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.845665][   T32] locks held by syz.3.2684/13477: 3, on CPU#0:
[  592.845677][   T32]  #0: ffff88807d0107f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.845718][   T32]  #1: ffff88802b01a460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.845759][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.845800][   T32] locks held by syz.3.2684/13480: 3, on CPU#0:
[  592.845812][   T32]  #0: ffff888079eab7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.845854][   T32]  #1: ffff88802b01a460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.845895][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.845937][   T32] locks held by syz.2.2689/13487: 3, on CPU#0:
[  592.845948][   T32]  #0: ffff88803551a9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.880890][   T32]  #1: ffff888038f40460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.880937][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.880980][   T32] locks held by syz.2.2689/13488: 3, on CPU#1:
[  592.880992][   T32]  #0: ffff888079d390b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.881035][   T32]  #1: ffff888038f40460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.881076][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.881119][   T32] locks held by syz.4.2699/13519: 3, on CPU#1:
[  592.881131][   T32]  #0: ffff88807d0062b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.881173][   T32]  #1: ffff88802d68c460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.881220][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.881262][   T32] locks held by syz.4.2699/13520: 3, on CPU#1:
[  592.881273][   T32]  #0: ffff88807d006ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.881315][   T32]  #1: ffff88802d68c460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.881356][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.881398][   T32] locks held by syz.4.2699/13521: 2, on CPU#1:
[  592.881410][   T32]  #0: ffff88807d0075f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.881452][   T32]  #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x57/0xd0
[  592.881491][   T32] locks held by syz.0.2704/13533: 3, on CPU#0:
[  592.881502][   T32]  #0: ffff88807dba1eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.881544][   T32]  #1: ffff888041472460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.881586][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.881627][   T32] locks held by syz.0.2704/13534: 3, on CPU#0:
[  592.881639][   T32]  #0: ffff88807afe42b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.881681][   T32]  #1: ffff888041472460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.881724][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.881766][   T32] locks held by syz.0.2704/13535: 3, on CPU#0:
[  592.881778][   T32]  #0: ffff88802bc997b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.881820][   T32]  #1: ffff888041472460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.881861][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.881912][   T32] locks held by syz.6.2707/13682: 3, on CPU#1:
[  592.881923][   T32]  #0: ffff888079d4cef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.881975][   T32]  #1: ffff888041ac4460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.882017][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.882073][   T32] locks held by syz.6.2707/13686: 3, on CPU#0:
[  592.882085][   T32]  #0: ffff888079d9deb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.882127][   T32]  #1: ffff888041ac4460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.882168][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.882215][   T32] locks held by syz.5.2715/13689: 3, on CPU#0:
[  592.882227][   T32]  #0: ffff88807a10b970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.882268][   T32]  #1: ffff888077a80460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.882309][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.882350][   T32] locks held by syz.5.2715/13691: 3, on CPU#1:
[  592.902898][   T32]  #0: ffff88807da88b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.902955][   T32]  #1: ffff888077a80460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.902999][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.903050][   T32] locks held by syz.8.2724/13781: 3, on CPU#1:
[  592.903063][   T32]  #0: ffff88807e3069b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.903105][   T32]  #1: ffff88807e8a8460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.903147][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.903188][   T32] locks held by syz.8.2724/13783: 3, on CPU#1:
[  592.903205][   T32]  #0: ffff88802aab9430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.903247][   T32]  #1: ffff88807e8a8460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.903288][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.903330][   T32] locks held by syz.8.2724/13787: 3, on CPU#1:
[  592.903341][   T32]  #0: ffff88802a3a4b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.904142][   T32]  #1: ffff88807e8a8460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.904189][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.904240][   T32] locks held by syz.9.2731/13819: 3, on CPU#0:
[  592.904251][   T32]  #0: ffff88802f4507f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.904293][   T32]  #1: ffff8880353b8460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.904335][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.904387][   T32] locks held by syz.9.2731/13823: 3, on CPU#0:
[  592.904398][   T32]  #0: ffff888075928ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.904440][   T32]  #1: ffff8880353b8460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.904483][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.904529][   T32] locks held by syz.7.2740/13846: 3, on CPU#1:
[  592.904541][   T32]  #0: ffff88807a3409b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.904584][   T32]  #1: ffff888041362460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.904627][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.904669][   T32] locks held by syz.7.2740/13847: 3, on CPU#1:
[  592.904680][   T32]  #0: ffff88807a3415f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.904722][   T32]  #1: ffff888041362460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.916493][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.916540][   T32] locks held by syz.7.2740/13848: 3, on CPU#1:
[  592.916552][   T32]  #0: ffff88807a340b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.916596][   T32]  #1: ffff888041362460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.916637][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.916687][   T32] locks held by syz-executor/14058: 2, on CPU#1:
[  592.916698][   T32]  #0: ffff88802275c0e8 (&type->s_umount_key#86){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  592.916741][   T32]  #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  592.916783][   T32] locks held by syz.1.2783/14117: 3, on CPU#0:
[  592.916794][   T32]  #0: ffff88807cbe7430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.916837][   T32]  #1: ffff888026bf6460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.916879][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.916920][   T32] locks held by syz.1.2783/14118: 3, on CPU#0:
[  592.916932][   T32]  #0: ffff88807c74eb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.916973][   T32]  #1: ffff888026bf6460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.917014][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.917056][   T32] locks held by syz.1.2783/14120: 3, on CPU#1:
[  592.917067][   T32]  #0: ffff88807c74e630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.917109][   T32]  #1: ffff888026bf6460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.917150][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.917193][   T32] locks held by syz.2.2831/14287: 3, on CPU#0:
[  592.917209][   T32]  #0: ffff88802c2915f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.917251][   T32]  #1: ffff888040986460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.917292][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.917333][   T32] locks held by syz.2.2831/14290: 3, on CPU#0:
[  592.917344][   T32]  #0: ffff8880576275f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.917387][   T32]  #1: ffff888040986460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.917429][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.917471][   T32] locks held by syz.4.2832/14289: 3, on CPU#0:
[  592.917483][   T32]  #0: ffff88807c5002b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.917524][   T32]  #1: ffff88804b862460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.917565][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.917610][   T32] locks held by syz.5.2850/14380: 3, on CPU#0:
[  592.917621][   T32]  #0: ffff8880340b4d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.917663][   T32]  #1: ffff88807e7b0460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.917704][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.917745][   T32] locks held by syz.5.2850/14381: 3, on CPU#0:
[  592.917757][   T32]  #0: ffff8880340b49b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.917799][   T32]  #1: ffff88807e7b0460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.917840][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.917898][   T32] locks held by kworker/1:7/14383: 3, on CPU#1:
[  592.917909][   T32]  #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}
[  592.927571][ T6028] bond1: (slave dummy0): failed to get link speed/duplex
[  592.945723][   T32] , at: process_one_work+0x1466/0x1b10
[  592.945759][   T32]  #1: ffffc9000479fd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  592.945809][   T32]  #2: ffff888022ec2250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330
[  592.945858][   T32] locks held by syz.6.2856/14495: 3, on CPU#0:
[  592.945871][   T32]  #0: ffff88802dae9970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.945914][   T32]  #1: ffff888039902460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.945957][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.946001][   T32] locks held by syz.6.2856/14496: 3, on CPU#0:
[  592.946013][   T32]  #0: ffff88807dff0630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.946055][   T32]  #1: ffff888039902460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.946096][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.946138][   T32] locks held by syz.6.2856/14499: 3, on CPU#0:
[  592.946149][   T32]  #0: ffff88803410beb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.946191][   T32]  #1: ffff888039902460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.946237][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.946283][   T32] locks held by kworker/0:14/14520: 2, last CPU#0:
[  592.946294][   T32]  #0: ffff888046f4e940 ((wq_completion)wg-crypt-wg0#23){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  592.946343][   T32]  #1: ffffc9000699fd08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  592.946390][   T32] locks held by udevd/14579: 4, on CPU#1:
[  592.946401][   T32]  #0: ffff88805789b638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[  592.946441][   T32]  #1: ffff888039238080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0
[  592.946484][   T32]  #2: ffff88808eee2968 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0
[  592.946526][   T32]  #3: ffff888047c8e1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  592.946568][   T32] locks held by syz.8.2864/14615: 3, on CPU#1:
[  592.946579][   T32]  #0: ffff888055e64d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.946621][   T32]  #1: ffff88808f48c460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.946662][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.946704][   T32] locks held by syz.7.2868/14649: 2, on CPU#1:
[  592.946715][   T32]  #0: ffff88807d5070b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.946756][   T32]  #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.946798][   T32] locks held by syz.7.2868/14650: 1, on CPU#0:
[  592.946810][   T32]  #0: ffff88807d5070b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.946854][   T32] locks held by syz.7.2868/14651: 2, on CPU#1:
[  592.946866][   T32]  #0: ffff88807d506ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.946912][   T32]  #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.946954][   T32] locks held by syz-executor/14657: 2, last CPU#1:
[  592.946965][   T32]  #0: ffff8880217e4080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  592.947004][   T32]  #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  592.947042][   T32] locks held by syz-executor/14661: 1, last CPU#1:
[  592.947052][   T32]  #0: ffff88807d13e540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  592.947091][   T32] locks held by syz.9.2875/14691: 3, on CPU#1:
[  592.947102][   T32]  #0: ffff88807c18f970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.947141][   T32]  #1: ffff8880407f8460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.947180][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.965505][   T32] locks held by syz.9.2875/14694: 3, on CPU#0:
[  592.965526][   T32]  #0: ffff88807da8ad30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.965579][   T32]  #1: ffff8880407f8460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.965623][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.965669][   T32] locks held by syz-executor/14828: 2, last CPU#1:
[  592.965681][   T32]  #0: ffff88807d2ee540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  592.965724][   T32]  #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  592.965764][   T32] locks held by syz-executor/14829: 2, last CPU#1:
[  592.965776][   T32]  #0: ffff88807d2e9bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  592.965816][   T32]  #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  592.965857][   T32] locks held by syz-executor/14884: 2, on CPU#0:
[  592.965869][   T32]  #0: ffff88803b2ae0e8 (&type->s_umount_key#86){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  592.965912][   T32]  #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  592.965959][   T32] locks held by syz.1.2931/15300: 2, on CPU#0:
[  592.965970][   T32]  #0: ffff8880763dbeb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.966013][   T32]  #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x57/0xd0
[  592.966052][   T32] locks held by syz.3.2961/15419: 3, on CPU#1:
[  592.966064][   T32]  #0: ffff888075dc97b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.966106][   T32]  #1: ffff88807caac460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.966147][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0
[  592.966189][   T32] locks held by syz.3.2961/15420: 3, on CPU#1:
[  592.966206][   T32]  #0: ffff888075dc95f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.966247][   T32]  #1: ffff88807caac460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.966289][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  592.966330][   T32] locks held by syz.3.2961/15421: 3, on CPU#1:
[  592.966341][   T32]  #0: ffff888075dc9270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  592.966383][   T32]  #1: ffff88807caac460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  592.966424][   T32]  #2: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600
[  592.966468][   T32] locks held by syz-executor/15423: 2, last CPU#1:
[  592.966479][   T32]  #0: ffff88807c395900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  592.966520][   T32]  #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  592.966560][   T32] locks held by syz-executor/15441: 2, last CPU#1:
[  592.966572][   T32]  #0: ffff88807d13ccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  592.966612][   T32]  #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  592.966654][   T32] locks held by syz-executor/15639: 2, last CPU#1:
[  592.966665][   T32]  #0: ffff88801c083440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  592.966706][   T32]  #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  592.966747][   T32] locks held by syz.5.3016/15676: 2, last CPU#1:
[  592.966758][   T32]  #0: ffff888034d89bc0 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x254/0xdd0
[  592.966794][   T32]  #1: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0
[  592.966836][   T32] locks held by modprobe/15711: 2, last CPU#1:
[  592.966847][   T32]  #0: ffff888034d88f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  592.966888][   T32]  #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  592.989801][   T32] 
[  592.989812][   T32] =============================================
[  592.989812][   T32] 
[  592.989820][   T32] NMI backtrace for cpu 1
[  592.989835][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  592.989857][   T32] Tainted: [L]=SOFTLOCKUP
[  592.989864][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  592.989873][   T32] Call Trace:
[  592.989879][   T32]  <TASK>
[  592.989885][   T32]  dump_stack_lvl+0x100/0x190
[  592.989914][   T32]  nmi_cpu_backtrace.cold+0x12d/0x151
[  592.989939][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  592.989959][   T32]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[  592.989985][   T32]  sys_info+0x141/0x190
[  592.990003][   T32]  watchdog+0xcb1/0x1030
[  592.990029][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  592.990053][   T32]  ? __pfx_watchdog+0x10/0x10
[  592.990073][   T32]  ? __kthread_parkme+0x18f/0x230
[  592.990095][   T32]  ? kthread+0x13a/0x450
[  592.990115][   T32]  ? __pfx_watchdog+0x10/0x10
[  592.990132][   T32]  kthread+0x373/0x450
[  592.990153][   T32]  ? __pfx_kthread+0x10/0x10
[  592.990176][   T32]  ret_from_fork+0x730/0xd60
[  592.990196][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  592.990220][   T32]  ? __switch_to+0x800/0x10f0
[  592.990243][   T32]  ? __pfx_kthread+0x10/0x10
[  592.990265][   T32]  ret_from_fork_asm+0x1a/0x30
[  592.990292][   T32]  </TASK>
[  592.990299][   T32] Sending NMI from CPU 1 to CPUs 0:
[  592.990323][    C0] NMI backtrace for cpu 0
[  592.990334][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  592.990353][    C0] Tainted: [L]=SOFTLOCKUP
[  592.990359][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  592.990366][    C0] RIP: 0010:io_serial_in+0x87/0xb0
[  592.990385][    C0] Code: a3 5a fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 bd 15 24 06 e8 88 0d ce fc eb a2 e8 11 0e
[  592.990398][    C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002
[  592.990411][    C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
[  592.990420][    C0] RDX: 00000000000003fd RSI: ffffffff85b1a170 RDI: ffffffff9bc75f60
[  592.990429][    C0] RBP: ffffffff9bc75f20 R08: 0000000000000001 R09: 000000000000001f
[  592.990438][    C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000
[  592.990447][    C0] R13: 0000000000000020 R14: fffffbfff378ec41 R15: dffffc0000000000
[  592.990456][    C0] FS:  0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000
[  592.990472][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  592.990481][    C0] CR2: 00005555767ca9d8 CR3: 0000000047f5b000 CR4: 00000000003526f0
[  592.990491][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  592.990499][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  592.990508][    C0] Call Trace:
[  592.990513][    C0]  <TASK>
[  592.990519][    C0]  wait_for_lsr+0x13a/0x210
[  592.990538][    C0]  serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0
[  592.990558][    C0]  __serial8250_console_fifo_write+0xa5/0x290
[  592.990576][    C0]  ? __pfx_io_serial_out+0x10/0x10
[  592.990594][    C0]  serial8250_console_write+0xf46/0x1330
[  592.990609][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  592.990622][    C0]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[  592.990639][    C0]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[  592.990657][    C0]  nbcon_emit_next_record+0x8f7/0xa70
[  592.990673][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  592.990688][    C0]  ? nbcon_context_try_acquire+0x3a6/0xc60
[  592.990708][    C0]  ? do_raw_spin_lock+0xb0/0x260
[  592.990729][    C0]  ? __pfx___cant_migrate+0x10/0x10
[  592.990747][    C0]  ? _raw_spin_lock_irqsave+0x42/0x60
[  592.990766][    C0]  nbcon_emit_one+0x1a8/0x2b0
[  592.990780][    C0]  ? __pfx_nbcon_emit_one+0x10/0x10
[  592.990796][    C0]  nbcon_kthread_func+0x613/0x7d0
[  592.990812][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  592.990829][    C0]  ? __kthread_parkme+0x18f/0x230
[  592.990846][    C0]  ? kthread+0x13a/0x450
[  592.990862][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  592.990876][    C0]  kthread+0x373/0x450
[  592.990893][    C0]  ? __pfx_kthread+0x10/0x10
[  592.990912][    C0]  ret_from_fork+0x730/0xd60
[  592.990926][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  592.990941][    C0]  ? __switch_to+0x800/0x10f0
[  592.990959][    C0]  ? __pfx_kthread+0x10/0x10
[  592.990977][    C0]  ret_from_fork_asm+0x1a/0x30
[  592.990996][    C0]  </TASK>
[  593.017060][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  598.608235][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  598.618910][   T32] Tainted: [L]=SOFTLOCKUP
[  598.623235][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  598.633299][   T32] Call Trace:
[  598.636585][   T32]  <TASK>
[  598.639521][   T32]  dump_stack_lvl+0x100/0x190
[  598.644220][   T32]  vpanic+0x553/0x970
[  598.648228][   T32]  ? __pfx_vpanic+0x10/0x10
[  598.652747][   T32]  panic+0xd1/0xe0
[  598.656505][   T32]  ? __pfx_panic+0x10/0x10
[  598.660942][   T32]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[  598.667145][   T32]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[  598.673323][   T32]  ? watchdog.cold+0x1ec/0x234
[  598.678104][   T32]  watchdog.cold+0x1fd/0x234
[  598.682719][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  598.688535][   T32]  ? __pfx_watchdog+0x10/0x10
[  598.693194][   T32]  ? __kthread_parkme+0x18f/0x230
[  598.698200][   T32]  ? kthread+0x13a/0x450
[  598.702423][   T32]  ? __pfx_watchdog+0x10/0x10
[  598.707087][   T32]  kthread+0x373/0x450
[  598.711181][   T32]  ? __pfx_kthread+0x10/0x10
[  598.715781][   T32]  ret_from_fork+0x730/0xd60
[  598.720368][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  598.725471][   T32]  ? __switch_to+0x800/0x10f0
[  598.730137][   T32]  ? __pfx_kthread+0x10/0x10
[  598.734711][   T32]  ret_from_fork_asm+0x1a/0x30
[  598.739460][   T32]  </TASK>
[  598.742702][   T32] Kernel Offset: disabled
[  598.747016][   T32] Rebooting in 86400 seconds..