last executing test programs: 11.368431747s ago: executing program 0 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x34}}, 0x0) 11.118156103s ago: executing program 0 (id=12): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @loopback}}, 0x1e) 10.959190454s ago: executing program 0 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x3c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000700)=@in={0x2, 0x1f90, @private=0xa010101}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000720)=@in={0x2, 0x0, @private=0xa010102}, 0x10) connect$inet(r3, &(0x7f0000000740)={0x2, 0x1f90, @private=0xa010101}, 0x10) accept(r2, 0x0, 0x0) 10.302838268s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001800010000000000000000002d0000000000000001000000050001000a0000000c0005000100000014000000"], 0x34}}, 0x0) 9.9848117s ago: executing program 1 (id=2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="62010000100001000000000000000000020000000000000000000000000000007f000001000000000000000000000000020000000000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000007f00000100000000000000000000000000001234320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000020000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0004000100111122227f000001000000000000000000000000080022000a000000"], 0x162}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 9.894288267s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/syz_tun/accept_dad\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/all/accept_dad\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/ipv6/conf/syz_tun/dad_transmits\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/dad_transmits\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1', 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000004c0)={'syz_tun\x00', @ifru_ivalue=0x1}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000500)={@remote, 0x40, r7}) nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, &(0x7f0000000580)) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @remote, @mcast1, {[], @ndisc_na={0x88, 0x0, 0x0, 0x40, '\x00', @remote, [{0x2, 0x1, "aaaaaaaaaaaa"}]}}}}}}, 0x0) nanosleep(&(0x7f0000000640)={0x0, 0x1dcd6500}, &(0x7f0000000680)) 9.364852116s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 8.49569406s ago: executing program 2 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000018000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000019000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000020000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000021000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000030000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7.814313763s ago: executing program 3 (id=23): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) (async) recvfrom$inet(r0, &(0x7f0000000500)=""/100, 0x64, 0x0, &(0x7f0000000600)={0x2, 0x0, @empty}, 0x10) 7.646349465s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 7.061737508s ago: executing program 1 (id=27): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x18) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcdef"}, {0x10, 0x110, 0x3}], 0x28}, 0x0) 6.642883151s ago: executing program 3 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x0, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'bridge0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @bridge={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x0, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'veth0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @veth={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, @void}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x0, 0x0, r1}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000005400010600000000000000000700000002000000200001000300000001000000ef01010100000000000000000000000000080800020005000300010000001c000200180001000800010001020304080001000a0b0c0d"], 0x54}}, 0x0) 6.531584795s ago: executing program 5 (id=33): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e25, @loopback}}, 0x24) listen(r0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e25, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000700)="0000000100000001000000010000000100000001010400000001", 0x1c, 0x0, &(0x7f0000000800)={0x2, 0x4e25, @loopback}, 0x10) nanosleep(&(0x7f0000000900)={0x0, 0xbebc200}, 0x0) 6.381751304s ago: executing program 3 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f00000000c0)=@in={0x2, 0x270f, @empty}, 0x10) listen(r3, 0x5) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000008004500005c0000000040847c1c7f0000017f00000104d2270f0000000065d78a870100003c000030390001a000000a000a000000018002000c010203040506070880040008000100008008000680020000"], 0x60) 6.145050005s ago: executing program 3 (id=36): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000}) r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581}) mq_notify(r1, 0x0) syz_open_dev$mtd(0x0, 0x260c, 0xa02) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.038223511s ago: executing program 5 (id=37): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x2, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r2, r3, 0x24, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0) 5.146516328s ago: executing program 5 (id=38): r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x108, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) 5.113711409s ago: executing program 3 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='udp 2049\x00', 0x9) write(r1, &(0x7f00000001c0)='tcp 2049\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000280)="0000000100"/32, 0x20, 0x0, &(0x7f00000002c0)={0x2, 0x801, @loopback}, 0x10) 4.183780746s ago: executing program 4 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x0, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x64}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}}}, 0x0) write(r1, &(0x7f0000000400)="00008847000640014500001400000000400100007f0000017f000001", 0x1c) 3.922502438s ago: executing program 4 (id=41): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r1, &(0x7f0000000040)=@in={0x2, 0x1f91, @loopback}, 0x10) connect(r1, &(0x7f0000000080)=@in={0x2, 0x1f90, @loopback}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000080045000028000100004084389b7f0000017f0000011f911f9012345678000000000600000800000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 3.72840337s ago: executing program 4 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c000100", 0x52) 3.633913942s ago: executing program 4 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="240000001400050000000000000000002d000000020000000500000008000000", 0x24}], 0x1}, 0x0) r2 = socket(0x2d, 0x2, 0x0) setsockopt(r2, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4) ioctl(r2, 0x89e2, &(0x7f0000000600)='\x00\x00\b\x00') sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "0000000000000800000019000200"}, 0x34, &(0x7f0000000900)=[{&(0x7f0000000a00)="01020304", 0x4}], 0x1}, 0x0) 3.402370135s ago: executing program 4 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040950b901700010102030109022700010100a0320904000003ffff0000070581031000080705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000200)={0x2}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) 2.398137777s ago: executing program 0 (id=45): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x80) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000200)='2\x00', 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) accept$inet(r0, 0x0, 0x0) 2.291169175s ago: executing program 0 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/ports\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n\x00', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x8008, @loopback}, 0x10) sendto(r2, &(0x7f0000000200)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.036370959s ago: executing program 1 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="123456780000000000000002000186a30000000300000001000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='nfsd 127.0.0.1 9999999 domain\n', 0x1d) close(r3) 2.036130707s ago: executing program 2 (id=48): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x0, 0x2, 'syz0\x00'}, {0x0, 0x41, 'rxe\x00'}, {0x0, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000000)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r2, &(0x7f0000000040)=@in={0x2, 0x1f90, @loopback}, 0x10) 1.949540229s ago: executing program 5 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000480), 0xc, &(0x7f00000004c0)={&(0x7f0000000500)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000580), 0xc, &(0x7f00000005c0)={&(0x7f0000000600)=@bridge_newvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}]}, 0x30}}, 0x0) 582.352658ms ago: executing program 3 (id=50): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x7) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x10}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x11, &(0x7f0000000100)={@local, @remote, @void, {@generic={0x3, "10106f"}}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @remote, @void, {@generic={0x4, "10100101"}}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0) 351.514146ms ago: executing program 0 (id=51): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000}) r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581}) mq_notify(r1, 0x0) syz_open_dev$mtd(0x0, 0x260c, 0xa02) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 224.422676ms ago: executing program 2 (id=52): r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/addfd\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='3\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='8\n\x00', 0x2) 114.983073ms ago: executing program 5 (id=53): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0x60, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 107.744482ms ago: executing program 4 (id=54): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)='ceph v2\n\x00'/20, 0x1c) shutdown(r2, 0x2) close(r2) close(r0) nanosleep(&(0x7f0000000800)={0x2}, 0x0) 0s ago: executing program 5 (id=55): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000040)=@newlink={0x0, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000520)={&(0x7f0000000540)=@setlink={0x0, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}]}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000640)={'syz_tun\x00', 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x40, 0x2, 0x0, @local, @multicast1}, {0x22, 0x0, 0x0, @multicast1, "0000000101000001e000000112345678"}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 91.383743][ T10] cfg80211: failed to load regulatory.db [ 93.673196][ T5612] cgroup: Unknown subsys name 'net' [ 93.791261][ T5612] cgroup: Unknown subsys name 'cpuset' [ 93.801085][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.603236][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.279934][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.292915][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.303354][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.311111][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.319739][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.323371][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.329325][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.338732][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.341994][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.348180][ T5650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.358781][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.363104][ T5650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.378868][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.388001][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.388717][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.396329][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.403753][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.411307][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.421946][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.427505][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.431584][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.446709][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.457105][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.466276][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.477646][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.509739][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.519633][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.533183][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.546029][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.557047][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.502630][ T5639] Bluetooth: hci4: command tx timeout [ 100.502633][ T5650] Bluetooth: hci0: command tx timeout [ 100.515730][ T4941] Bluetooth: hci1: command tx timeout [ 100.577113][ T4941] Bluetooth: hci3: command tx timeout [ 100.583080][ T5650] Bluetooth: hci2: command tx timeout [ 100.656408][ T5650] Bluetooth: hci5: command tx timeout [ 101.188393][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.195713][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.203484][ T5633] bridge_slave_0: entered allmulticast mode [ 101.211557][ T5633] bridge_slave_0: entered promiscuous mode [ 101.253073][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.260516][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.267900][ T5645] bridge_slave_0: entered allmulticast mode [ 101.276479][ T5645] bridge_slave_0: entered promiscuous mode [ 101.313310][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.320770][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.328360][ T5633] bridge_slave_1: entered allmulticast mode [ 101.339642][ T5633] bridge_slave_1: entered promiscuous mode [ 101.360790][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.368184][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.375438][ T5645] bridge_slave_1: entered allmulticast mode [ 101.383695][ T5645] bridge_slave_1: entered promiscuous mode [ 101.544396][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.567291][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.574614][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.582810][ T5648] bridge_slave_0: entered allmulticast mode [ 101.590651][ T5648] bridge_slave_0: entered promiscuous mode [ 101.602033][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.643027][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.652734][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.661679][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.669531][ T5632] bridge_slave_0: entered allmulticast mode [ 101.677539][ T5632] bridge_slave_0: entered promiscuous mode [ 101.685744][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.693738][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.701520][ T5648] bridge_slave_1: entered allmulticast mode [ 101.709310][ T5648] bridge_slave_1: entered promiscuous mode [ 101.720274][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.763031][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.770535][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.778821][ T5632] bridge_slave_1: entered allmulticast mode [ 101.786912][ T5632] bridge_slave_1: entered promiscuous mode [ 101.821273][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.828605][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.835847][ T5640] bridge_slave_0: entered allmulticast mode [ 101.843868][ T5640] bridge_slave_0: entered promiscuous mode [ 101.913895][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.921202][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.928527][ T5640] bridge_slave_1: entered allmulticast mode [ 101.936593][ T5640] bridge_slave_1: entered promiscuous mode [ 101.960769][ T5645] team0: Port device team_slave_0 added [ 101.983014][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.994986][ T5633] team0: Port device team_slave_0 added [ 102.032425][ T5645] team0: Port device team_slave_1 added [ 102.041057][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.053214][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.064882][ T5633] team0: Port device team_slave_1 added [ 102.083277][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.090657][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.098058][ T5634] bridge_slave_0: entered allmulticast mode [ 102.106075][ T5634] bridge_slave_0: entered promiscuous mode [ 102.130357][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.168545][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.178388][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.185630][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.193346][ T5634] bridge_slave_1: entered allmulticast mode [ 102.201391][ T5634] bridge_slave_1: entered promiscuous mode [ 102.264888][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.289370][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.296739][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.323371][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.352089][ T5648] team0: Port device team_slave_0 added [ 102.359281][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.366634][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.393118][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.432111][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.439282][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.465732][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.479416][ T5632] team0: Port device team_slave_0 added [ 102.488276][ T5648] team0: Port device team_slave_1 added [ 102.494668][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.502459][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.528812][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.556777][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.577205][ T5650] Bluetooth: hci4: command tx timeout [ 102.580989][ T5632] team0: Port device team_slave_1 added [ 102.583158][ T4941] Bluetooth: hci0: command tx timeout [ 102.588626][ T5639] Bluetooth: hci1: command tx timeout [ 102.637283][ T5640] team0: Port device team_slave_0 added [ 102.646234][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.657094][ T5639] Bluetooth: hci2: command tx timeout [ 102.657595][ T4941] Bluetooth: hci3: command tx timeout [ 102.710290][ T5640] team0: Port device team_slave_1 added [ 102.730793][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.737843][ T4941] Bluetooth: hci5: command tx timeout [ 102.744027][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.770141][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.782835][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.789908][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.815908][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.869857][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.876982][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.903363][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.915599][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.923049][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.949748][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.991905][ T5634] team0: Port device team_slave_0 added [ 103.044744][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.052259][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.079228][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.092997][ T5634] team0: Port device team_slave_1 added [ 103.105273][ T5645] hsr_slave_0: entered promiscuous mode [ 103.112464][ T5645] hsr_slave_1: entered promiscuous mode [ 103.129953][ T5633] hsr_slave_0: entered promiscuous mode [ 103.136685][ T5633] hsr_slave_1: entered promiscuous mode [ 103.142975][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 103.149354][ T5633] Cannot create hsr debugfs directory [ 103.156774][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.163724][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.190158][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.309113][ T5632] hsr_slave_0: entered promiscuous mode [ 103.315845][ T5632] hsr_slave_1: entered promiscuous mode [ 103.322611][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 103.328821][ T5632] Cannot create hsr debugfs directory [ 103.371262][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.380632][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.406908][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.453256][ T5648] hsr_slave_0: entered promiscuous mode [ 103.460082][ T5648] hsr_slave_1: entered promiscuous mode [ 103.467053][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 103.472799][ T5648] Cannot create hsr debugfs directory [ 103.488551][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.495628][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.523227][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.670093][ T5640] hsr_slave_0: entered promiscuous mode [ 103.677118][ T5640] hsr_slave_1: entered promiscuous mode [ 103.683676][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 103.689844][ T5640] Cannot create hsr debugfs directory [ 103.841242][ T5634] hsr_slave_0: entered promiscuous mode [ 103.847943][ T5634] hsr_slave_1: entered promiscuous mode [ 103.854277][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 103.860823][ T5634] Cannot create hsr debugfs directory [ 104.401389][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.417839][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.450312][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.460761][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.470224][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.480808][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.501037][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.512290][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.600867][ T5633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.615212][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.624219][ T5633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.638167][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.648024][ T5633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.656653][ T4941] Bluetooth: hci1: command tx timeout [ 104.659937][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.670854][ T4941] Bluetooth: hci0: command tx timeout [ 104.670902][ T4941] Bluetooth: hci4: command tx timeout [ 104.690264][ T5633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.703374][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.736296][ T4941] Bluetooth: hci2: command tx timeout [ 104.737364][ T5650] Bluetooth: hci3: command tx timeout [ 104.816846][ T5650] Bluetooth: hci5: command tx timeout [ 104.837558][ T5648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.848443][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.866928][ T5648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.878583][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.887061][ T5648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.899069][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.907481][ T5648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.920196][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.028154][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.039614][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.048701][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.064865][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.090242][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.102713][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.125229][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.139292][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.190684][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.314837][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.322596][ T5640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.333724][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.354020][ T5640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.365277][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.386722][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.394996][ T5640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.408154][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.436006][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.443363][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.456831][ T5640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.468421][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.532830][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.540042][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.611276][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.635339][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.648765][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.658596][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.669040][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.691629][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.704803][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.714426][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.726905][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.754588][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.773080][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.780287][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.841164][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.848477][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.932322][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.984728][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.999526][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.006726][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.072609][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.079910][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.208000][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.254529][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.261777][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.280597][ T5633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.313830][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.329465][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.336852][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.504113][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.569087][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.576342][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.658694][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.681735][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.689146][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.745704][ T5650] Bluetooth: hci4: command tx timeout [ 106.747422][ T5639] Bluetooth: hci1: command tx timeout [ 106.760369][ T4941] Bluetooth: hci0: command tx timeout [ 106.817628][ T4941] Bluetooth: hci3: command tx timeout [ 106.823201][ T5639] Bluetooth: hci2: command tx timeout [ 106.897259][ T4941] Bluetooth: hci5: command tx timeout [ 106.932674][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.988699][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.996127][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.049726][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.056943][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.085379][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.516617][ T5645] veth0_vlan: entered promiscuous mode [ 107.622822][ T5645] veth1_vlan: entered promiscuous mode [ 107.835085][ T5645] veth0_macvtap: entered promiscuous mode [ 107.899502][ T5645] veth1_macvtap: entered promiscuous mode [ 107.964802][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.109813][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.192144][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.307565][ T1171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.360350][ T1171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.389147][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.424461][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.449085][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.610742][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.983188][ T3284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.023173][ T5648] veth0_vlan: entered promiscuous mode [ 109.025497][ T3284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.125366][ T5633] veth0_vlan: entered promiscuous mode [ 109.143794][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.197107][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.214903][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.229956][ T5648] veth1_vlan: entered promiscuous mode [ 109.230779][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.281247][ T5633] veth1_vlan: entered promiscuous mode [ 109.393290][ T5645] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.432924][ T5648] veth0_macvtap: entered promiscuous mode [ 109.487682][ T5648] veth1_macvtap: entered promiscuous mode [ 109.511145][ T5632] veth0_vlan: entered promiscuous mode [ 109.604699][ T5634] veth0_vlan: entered promiscuous mode [ 109.613146][ T5633] veth0_macvtap: entered promiscuous mode [ 109.633198][ T5632] veth1_vlan: entered promiscuous mode [ 109.674586][ T5633] veth1_macvtap: entered promiscuous mode [ 109.686401][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.759596][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.784368][ T5634] veth1_vlan: entered promiscuous mode [ 109.795721][ T5640] veth0_vlan: entered promiscuous mode [ 109.836419][ T3350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.875201][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.882768][ T3350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.893313][ T3350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.950571][ T5640] veth1_vlan: entered promiscuous mode [ 109.971519][ T3350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.991794][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.063918][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.084845][ T5632] veth0_macvtap: entered promiscuous mode [ 110.101298][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.111774][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.141487][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.173568][ T5632] veth1_macvtap: entered promiscuous mode [ 110.199161][ T5634] veth0_macvtap: entered promiscuous mode [ 110.220686][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.229399][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.290457][ T5634] veth1_macvtap: entered promiscuous mode [ 110.335018][ T5640] veth0_macvtap: entered promiscuous mode [ 110.363322][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.377274][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.400190][ T5640] veth1_macvtap: entered promiscuous mode [ 110.409680][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.450417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.454901][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.472539][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.502256][ T3265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.513242][ T3265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.527846][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.545296][ T3265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.556321][ T3350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.581171][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.627782][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.666958][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.717729][ T3265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.728104][ T3265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.763030][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.781072][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.790334][ T3265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.830225][ T3265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.888574][ T3265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.919184][ T3265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.981535][ T3265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.007333][ T3265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.328771][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.351143][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.384511][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 111.428911][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 111.483230][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.488193][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 111.492899][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.572789][ T3326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.594087][ T3326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.785004][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.814982][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.885014][ T3284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.901462][ T3284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.041276][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.071259][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.128275][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 112.551491][ T5902] netlink: 114 bytes leftover after parsing attributes in process `syz.1.2'. [ 112.832710][ T5908] rdma_rxe: rxe_newlink: failed to add lo [ 112.915039][ T5908] smc: net device lo applied user defined pnetid SYZ0 [ 113.050910][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 113.084636][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17'. [ 113.238379][ T5893] NFSD: Unable to initialize client recovery tracking! (-110) [ 113.324481][ T5893] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 113.445388][ T5893] NFSD: starting 90-second grace period (net f00003cb) [ 114.163121][ T5918] tipc: Started in network mode [ 114.186089][ T5918] tipc: Node identity ac14140f, cluster identity 4711 [ 114.221128][ T5918] tipc: New replicast peer: 172.30.0.4 [ 114.228281][ T5924] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21'. [ 114.238308][ T5918] tipc: Enabled bearer , priority 10 [ 114.288718][ T5923] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 114.332176][ T5923] netlink: 'syz.2.21': attribute type 2 has an invalid length. [ 114.359921][ T5924] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 114.411689][ T5885] infiniband syz1: set active [ 114.454555][ T5885] infiniband syz1: added veth1 [ 114.611237][ T5926] smc: net device dummy0 applied user defined pnetid SYZ0 [ 114.636024][ T5885] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 114.684891][ T5885] infiniband syz1: Couldn't open port 1 [ 114.756722][ T5915] NFSD: Failed to start, no listeners configured. [ 114.767324][ T5885] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 114.830362][ T5885] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 114.886041][ T5885] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 114.971894][ T5885] RDS/IB: syz1: added [ 114.981589][ T5885] smc: adding ib device syz1 with port count 1 [ 114.989113][ T5885] smc: ib device syz1 port 1 has no pnetid [ 115.248966][ T10] tipc: Node number set to 2886997007 [ 115.323439][ T5948] Zero length message leads to an empty skb [ 115.961640][ T5966] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 116.160132][ T5762] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.297592][ T5937] NFSD: Unable to initialize client recovery tracking! (-110) [ 116.417881][ T5937] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 116.475201][ T5762] usb 5-1: Using ep0 maxpacket: 32 [ 116.493515][ T5937] NFSD: starting 90-second grace period (net f00004da) [ 116.504662][ T5762] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 116.517598][ T5762] usb 5-1: config 0 has no interface number 0 [ 116.539525][ T5762] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.658799][ T5969] tipc: Enabling of bearer rejected, already enabled [ 116.676798][ T5762] usb 5-1: config 0 interface 85 has no altsetting 0 [ 116.889229][ T5762] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 116.921994][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.938885][ T5762] usb 5-1: Product: syz [ 116.949177][ T5762] usb 5-1: Manufacturer: syz [ 116.964181][ T5762] usb 5-1: SerialNumber: syz [ 117.032203][ T5762] usb 5-1: config 0 descriptor?? [ 117.266379][ T5762] appletouch 5-1:0.85: Failed to read mode from device. [ 117.286221][ T5762] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 117.501173][ T5762] usb 5-1: USB disconnect, device number 2 [ 118.109352][ T5883] infiniband syz0: set active [ 118.117575][ T5883] infiniband syz0: added veth0 [ 118.125715][ T5883] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 118.129791][ T5883] infiniband syz0: Couldn't open port 1 [ 118.145017][ T5883] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 118.160957][ T5883] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 118.179373][ T5883] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 118.241127][ T5883] RDS/IB: syz0: added [ 118.246136][ T5883] smc: adding ib device syz0 with port count 1 [ 118.252874][ T5883] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 119.116073][ T5791] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.283462][ T5791] usb 5-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 119.292867][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.302548][ T5791] usb 5-1: Product: syz [ 119.308503][ T5791] usb 5-1: Manufacturer: syz [ 119.313198][ T5791] usb 5-1: SerialNumber: syz [ 121.386208][ T5982] NFSD: Unable to initialize client recovery tracking! (-110) [ 121.393834][ T5982] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 121.403357][ T5982] NFSD: starting 90-second grace period (net f00004db) [ 121.544220][ T5791] ax88179_178a 5-1:1.0: probe with driver ax88179_178a failed with error -71 [ 121.564807][ T5791] usb 5-1: USB disconnect, device number 3 [ 121.667701][ T5999] NFSD: Failed to start, no listeners configured. [ 121.983521][ T6013] bridge0: port 3(dummy0) entered blocking state [ 121.993999][ T6013] bridge0: port 3(dummy0) entered disabled state [ 122.001749][ T6013] dummy0: entered allmulticast mode [ 122.011291][ T6013] dummy0: entered promiscuous mode [ 122.019979][ T6013] bridge0: port 3(dummy0) entered blocking state [ 122.027216][ T6013] bridge0: port 3(dummy0) entered forwarding state [ 122.228743][ T5762] ------------[ cut here ]------------ [ 122.234644][ T5762] !iov_iter_count(&con->v2.in_iter) [ 122.234666][ T5762] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x1727/0x4780, CPU#0: kworker/0:5/5762 [ 122.251172][ T5762] Modules linked in: [ 122.255206][ T5762] CPU: 0 UID: 0 PID: 5762 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 122.264722][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.274865][ T5762] Workqueue: ceph-msgr ceph_con_workfn [ 122.280450][ T5762] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 122.286698][ T5762] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff 13 90 f5 4c 8b 64 24 28 e8 0a 12 8a f6 90 <0f> 0b 90 bb c3 ff ff ff e8 fc 11 8a f6 49 8d 7f 30 48 b8 00 00 00 [ 122.307242][ T5762] RSP: 0018:ffffc90004ae7978 EFLAGS: 00010293 [ 122.313965][ T5762] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b802501 [ 122.322147][ T5762] RDX: ffff8880283edd00 RSI: ffffffff8b802d16 RDI: ffff8880283edd00 [ 122.330200][ T5762] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 122.338724][ T5762] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200095cf3e [ 122.348119][ T5762] R13: ffffc90004ae7ab0 R14: ffff888023f1c698 R15: ffff888023f1c418 [ 122.356245][ T5762] FS: 0000000000000000(0000) GS:ffff888123dde000(0000) knlGS:0000000000000000 [ 122.365254][ T5762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.371968][ T5762] CR2: 00007f2749c26d58 CR3: 0000000075960000 CR4: 0000000000350ef0 [ 122.380029][ T5762] Call Trace: [ 122.383366][ T5762] [ 122.386390][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.392070][ T5762] ? lock_acquire+0x1b9/0x370 [ 122.397693][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.403411][ T5762] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 122.409895][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.415583][ T5762] ? rcu_is_watching+0x12/0xc0 [ 122.420720][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.426504][ T5762] ? trace_contention_end+0x126/0x160 [ 122.432118][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.437974][ T5762] ? __mutex_lock+0x26d/0x1bd0 [ 122.442778][ T5762] ? ceph_con_workfn+0x48/0x13e0 [ 122.447842][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.453522][ T5762] ? register_lock_class+0x40/0x560 [ 122.458848][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.464524][ T5762] ? do_raw_spin_lock+0x128/0x260 [ 122.469724][ T5762] ? do_raw_spin_unlock+0x145/0x1e0 [ 122.475161][ T5762] ? debug_object_deactivate+0x2e4/0x3b0 [ 122.480941][ T5762] ceph_con_workfn+0x360/0x13e0 [ 122.485847][ T5762] process_one_work+0xa23/0x1940 [ 122.490952][ T5762] ? __pfx_process_one_work+0x10/0x10 [ 122.497276][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.503010][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.509384][ T5762] worker_thread+0x5ef/0xe50 [ 122.514032][ T5762] ? __pfx_worker_thread+0x10/0x10 [ 122.519295][ T5762] ? kthread+0x13a/0x450 [ 122.523617][ T5762] ? __pfx_worker_thread+0x10/0x10 [ 122.528858][ T5762] kthread+0x370/0x450 [ 122.532979][ T5762] ? __pfx_kthread+0x10/0x10 [ 122.537693][ T5762] ret_from_fork+0x72b/0xd50 [ 122.542321][ T5762] ? __pfx_ret_from_fork+0x10/0x10 [ 122.547530][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.553198][ T5762] ? __switch_to+0x800/0x10f0 [ 122.557987][ T5762] ? __switch_to_asm+0x39/0x70 [ 122.562832][ T5762] ? __pfx_kthread+0x10/0x10 [ 122.567558][ T5762] ret_from_fork_asm+0x1a/0x30 [ 122.572394][ T5762] [ 122.575443][ T5762] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.582737][ T5762] CPU: 0 UID: 0 PID: 5762 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 122.592131][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.602192][ T5762] Workqueue: ceph-msgr ceph_con_workfn [ 122.607687][ T5762] Call Trace: [ 122.610960][ T5762] [ 122.613886][ T5762] dump_stack_lvl+0x100/0x190 [ 122.618600][ T5762] vpanic+0x552/0x970 [ 122.622650][ T5762] ? __pfx_vpanic+0x10/0x10 [ 122.627225][ T5762] panic+0xd1/0xe0 [ 122.631002][ T5762] ? __pfx_panic+0x10/0x10 [ 122.635815][ T5762] ? check_panic_on_warn+0x1f/0x90 [ 122.640982][ T5762] check_panic_on_warn.cold+0x19/0x34 [ 122.646383][ T5762] ? ceph_con_v2_try_read+0x1727/0x4780 [ 122.652231][ T5762] __warn.cold+0x191/0x318 [ 122.656675][ T5762] __report_bug+0x30f/0x440 [ 122.661299][ T5762] ? ceph_con_v2_try_read+0x1727/0x4780 [ 122.666958][ T5762] ? __pfx___report_bug+0x10/0x10 [ 122.672181][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.678016][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.683791][ T5762] ? __local_bh_enable_ip+0x9e/0x120 [ 122.689107][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.694783][ T5762] ? lockdep_hardirqs_on+0x78/0x100 [ 122.700011][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.705673][ T5762] ? __local_bh_enable_ip+0x9e/0x120 [ 122.710992][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.716680][ T5762] ? tcp_recvmsg+0x1f8/0x630 [ 122.721310][ T5762] ? ceph_con_v2_try_read+0x1727/0x4780 [ 122.726880][ T5762] report_bug+0xb2/0x220 [ 122.731167][ T5762] ? ceph_con_v2_try_read+0x1727/0x4780 [ 122.736734][ T5762] handle_bug+0x16a/0x2a0 [ 122.741132][ T5762] exc_invalid_op+0x17/0x50 [ 122.745671][ T5762] asm_exc_invalid_op+0x1a/0x20 [ 122.750556][ T5762] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 122.756728][ T5762] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff 13 90 f5 4c 8b 64 24 28 e8 0a 12 8a f6 90 <0f> 0b 90 bb c3 ff ff ff e8 fc 11 8a f6 49 8d 7f 30 48 b8 00 00 00 [ 122.776413][ T5762] RSP: 0018:ffffc90004ae7978 EFLAGS: 00010293 [ 122.782531][ T5762] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b802501 [ 122.790517][ T5762] RDX: ffff8880283edd00 RSI: ffffffff8b802d16 RDI: ffff8880283edd00 [ 122.798495][ T5762] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 122.806502][ T5762] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200095cf3e [ 122.814519][ T5762] R13: ffffc90004ae7ab0 R14: ffff888023f1c698 R15: ffff888023f1c418 [ 122.822514][ T5762] ? ceph_con_v2_try_read+0xf11/0x4780 [ 122.828033][ T5762] ? ceph_con_v2_try_read+0x1726/0x4780 [ 122.833607][ T5762] ? ceph_con_v2_try_read+0x1726/0x4780 [ 122.839217][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.844876][ T5762] ? lock_acquire+0x1b9/0x370 [ 122.849617][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.855273][ T5762] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 122.861026][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.866678][ T5762] ? rcu_is_watching+0x12/0xc0 [ 122.871471][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.877125][ T5762] ? trace_contention_end+0x126/0x160 [ 122.882519][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.888166][ T5762] ? __mutex_lock+0x26d/0x1bd0 [ 122.892959][ T5762] ? ceph_con_workfn+0x48/0x13e0 [ 122.897964][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.903635][ T5762] ? register_lock_class+0x40/0x560 [ 122.908854][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.914521][ T5762] ? do_raw_spin_lock+0x128/0x260 [ 122.919610][ T5762] ? do_raw_spin_unlock+0x145/0x1e0 [ 122.924841][ T5762] ? debug_object_deactivate+0x2e4/0x3b0 [ 122.930532][ T5762] ceph_con_workfn+0x360/0x13e0 [ 122.935412][ T5762] process_one_work+0xa23/0x1940 [ 122.940379][ T5762] ? __pfx_process_one_work+0x10/0x10 [ 122.945758][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.951422][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.957079][ T5762] worker_thread+0x5ef/0xe50 [ 122.961693][ T5762] ? __pfx_worker_thread+0x10/0x10 [ 122.966839][ T5762] ? kthread+0x13a/0x450 [ 122.971112][ T5762] ? __pfx_worker_thread+0x10/0x10 [ 122.976232][ T5762] kthread+0x370/0x450 [ 122.980356][ T5762] ? __pfx_kthread+0x10/0x10 [ 122.984983][ T5762] ret_from_fork+0x72b/0xd50 [ 122.989602][ T5762] ? __pfx_ret_from_fork+0x10/0x10 [ 122.994743][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.000403][ T5762] ? __switch_to+0x800/0x10f0 [ 123.005140][ T5762] ? __switch_to_asm+0x39/0x70 [ 123.009935][ T5762] ? __pfx_kthread+0x10/0x10 [ 123.014563][ T5762] ret_from_fork_asm+0x1a/0x30 [ 123.019380][ T5762] [ 123.022618][ T5762] Kernel Offset: disabled [ 123.026967][ T5762] Rebooting in 86400 seconds..