last executing test programs: 25m34.257766348s ago: executing program 32 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000090)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000d0)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000190)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001d0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000210)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000250)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r2, &(0x7f0000000290)='1', 0x1) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) listen(r3, 0x5) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) accept(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000750)=[{&(0x7f0000000780)='data', 0x4}], 0x1}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 25m31.298916478s ago: executing program 33 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="94000000000105060100000000000000020000003200018014000180080001007f000001080002007f0000011a0002800500010006000000060002003039000006000300001500003200028014000180080001007f000001080002007f0000011a0002800500010006000000060002000015000006000300303900000c0005800800010066747000080008000000012c"], 0x94}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000400)={0x2, 0x3930, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x1500, @loopback}, 0x10) 25m28.878404049s ago: executing program 34 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) 25m24.71866998s ago: executing program 35 (id=54): syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff66778899aabb86dd6000000000180040fe800000000000000000000000000001ff02000000000000000000000000000100020100310e00"], 0x0) 25m20.815451435s ago: executing program 36 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) (async) 21m26.157163102s ago: executing program 37 (id=346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xfff3}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xfff3}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xe}, {0x54, 0x2, [@TCA_CGROUP_ACT={0x50, 0x1, [@m_sample={0x4c, 0x1, 0x0, 0x0, {{0xe}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x1, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x3, 0x20000000, 0x1, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x5}}}]}]}}]}, 0x90}}, 0x0) write(r0, &(0x7f0000000400)="0000000008004500001c00000000401176cc0a0000010a0000021234123400080000", 0x22) 21m25.20331826s ago: executing program 38 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x48, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000280)={'bridge0\x00', @ifru_ivalue}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f00000002c0)={'bridge0\x00', @ifru_ivalue=0x1}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 21m24.626309371s ago: executing program 39 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x0, 0x0}, {0x0, 0x0, {0x0, 0x10000}}}]}, 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000040)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c0000000040110000010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x0, 0x0}, {0x0, 0x0, {0x1, 0x10000}}}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 21m24.192924321s ago: executing program 40 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newneigh={0x30, 0x1c, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x80}, [@NDA_DST_IPV4={0x8, 0x1, @private=0xa010101}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000000101040000000000000000020000003800018014000180080001000a000002080002000a0000011c0002800500010011000000060002003930000006000300393000003800028014000180080001000a000001080002000a0000021c0002800500010011000000060002003930000006000300393000000800030008000000"], 0x80}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0x2, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWCHAIN={0x54, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0x2, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00112233445508004500001c00000000401166cf0a0000020a0000013930393000080000"], 0x0) 21m22.969506286s ago: executing program 41 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'bridge_slave_0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000280)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r4, &(0x7f0000000400)="0180c20000000011223344550026424203000000000000000000000001000000000000000000000180010000140002000f00", 0x34, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) 18m58.524757895s ago: executing program 42 (id=474): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 18m55.0230279s ago: executing program 43 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 15m40.644320659s ago: executing program 44 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001d0)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000001e0)=@filename='rpc_pipefs\x00', &(0x7f00000001f0)='./rpc_pipefs\x00', &(0x7f00000001f8)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000500)="00000050123456780000000000000002000186a30000000400000001000000010000001400000000000000000000000000000000000000000000000000000000000000000000000000000001", 0x54, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000800)='nfsd 127.0.0.1 9999999 domain\n', 0x1e) close(r4) 15m38.627647981s ago: executing program 45 (id=998): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10) 15m37.518017101s ago: executing program 46 (id=1000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) close(r5) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4}]}}, "2200334f0000000106000001e1010203c0a80101"}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4}]}}, "220035540000000104000001e1010203c0a80101"}}}}, 0x0) 14m35.687655864s ago: executing program 47 (id=1164): unshare(0x40000000) socket$rds(0x15, 0x5, 0x0) 12m40.172218497s ago: executing program 48 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x3c, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x3c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000700)=@in={0x2, 0x1f90, @private=0xa010101}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000720)=@in={0x2, 0x0, @private=0xa010102}, 0x10) connect$inet(r3, &(0x7f0000000740)={0x2, 0x1f90, @private=0xa010101}, 0x10) accept(r2, 0x0, 0x0) 10m51.673070465s ago: executing program 8 (id=1402): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='\\x01\\x00\\x00\\x00 2000000000 0 0 0 krb5 \\x01\\x00\\x00\\x00\\xff\\xff\\xff\\x7f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x11\\x00\\x00\\x00\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\n\x00', 0x7d) close(r2) r3 = socket(0x2, 0x1, 0x6) connect(r3, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10) write(r3, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff0000000000000000000000000100"/117, 0x74) read(r3, &(0x7f0000000800)=""/100, 0x100) close(r3) 10m46.773806664s ago: executing program 7 (id=1410): socket$inet(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x1ff) r1 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000600)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='nfsvers\x00', &(0x7f0000000a00)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000f00)='mountport\x00', &(0x7f0000001000)='2049\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000500)='127.0.0.1:/export\x00', &(0x7f0000001400)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,nfsvers=3,proto=tcp,port=2049,mountport=2049,nolock\x00']) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000100)=""/8, 0x8, 0x0, 0x0, 0x0) 10m45.460788722s ago: executing program 7 (id=1412): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12, @random="aabbccddeeff"}, 0x10) 10m43.596181423s ago: executing program 7 (id=1413): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0x0}}}}, 0x430) sendto$inet6(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 10m42.821125867s ago: executing program 7 (id=1414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x174, 0x10, 0x5, 0x1, 0x0, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@remote, 0x1234, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x80}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x24, 0x17, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40, [0x0, 0x0]}}]}, 0x174}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x5, 0x2, 0x0, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x1234, 0x32}, 0x2, @in=@remote, 0x1}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000500)="12345678", 0x8, 0x0, &(0x7f0000000400)={0x2, 0x1234, @remote}, 0x10) 10m41.713016849s ago: executing program 8 (id=1415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0xa0, '01234567890123456789'}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100), 0x8) sendto$inet6(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10m41.686319816s ago: executing program 7 (id=1416): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="123456780000000000000002000186a30000000300000001000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='nfsd 127.0.0.1 9999999 domain\n', 0x1d) close(r3) 10m35.382329598s ago: executing program 49 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1\x00') r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 10m31.986052911s ago: executing program 8 (id=1424): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="1801000010000100000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000007f00000100000000000000000000000078563412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000018000400010094119411000000000000000000000000000000000000080022000a00000008002a0001000000"], 0x118}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 10m31.439460672s ago: executing program 8 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) close(r0) unshare(0x40000000) 10m25.847288205s ago: executing program 50 (id=1416): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="123456780000000000000002000186a30000000300000001000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='nfsd 127.0.0.1 9999999 domain\n', 0x1d) close(r3) 10m15.582639447s ago: executing program 51 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) close(r0) unshare(0x40000000) 8m38.458238635s ago: executing program 52 (id=1470): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x14c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x14c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2m55.210568275s ago: executing program 2 (id=1693): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x2}, 0x1c) (async) 2m54.8989485s ago: executing program 1 (id=1695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c) 2m54.093486887s ago: executing program 2 (id=1698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r1, 0x0, 0x0, 0x0, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xaa}]}, 0x3c}}, 0x0) 2m53.795695746s ago: executing program 2 (id=1699): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140), 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, 0x0, 0x0) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) shutdown(r4, 0x2) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 2m53.712791585s ago: executing program 1 (id=1700): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00000000000000000000000100000001000000010002000001000000000000000000000100000000000000000100", 0x2a, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 2m53.386086376s ago: executing program 1 (id=1701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000080004400000000414000000110001"], 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a01040000000000000000020000000900010073797a30000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c0002801800018008000140fffffffd0900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000070a01020000000000000000020000000900010073797a30000000000900020073797a3100000000140000001100010000000000000000000000000a"], 0x54}}, 0x0) 2m52.885311592s ago: executing program 1 (id=1705): write(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x1) close(0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="000000000100", 0x6) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000700), 0x4) 2m52.563463295s ago: executing program 2 (id=1707): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) 2m52.550428083s ago: executing program 1 (id=1708): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x2f8) 2m52.313734266s ago: executing program 1 (id=1709): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x100, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3e8, 0x64, 0x1f4, 0xa, 0xa, 0xa}}, @TCA_RED_STAB={0x104}]}}]}, 0x100}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@getqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x0) 2m51.491358318s ago: executing program 53 (id=1616): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000100)="3c0000001000010001000000000000003801000025001c0044454641554c54554549443030303030303030303030303030303000", 0x3c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000500)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) close(r3) close(r2) 2m50.238006143s ago: executing program 2 (id=1713): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x28}], 0x1}, 0x0) 2m49.908988865s ago: executing program 2 (id=1714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) 2m46.452997553s ago: executing program 4 (id=1717): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140), 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) shutdown(r4, 0x2) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 2m45.42014204s ago: executing program 4 (id=1718): write(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x1) close(0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="00000000010000", 0x7) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000700), 0x4) 2m44.374597534s ago: executing program 4 (id=1719): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 2m43.462799049s ago: executing program 4 (id=1720): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="000000020104", 0x6) read(r2, &(0x7f0000000310), 0x6) write(r3, &(0x7f0000000600)='reply\x00', 0x6) read(r2, &(0x7f000000031c), 0x6) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 2m42.334109218s ago: executing program 4 (id=1721): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x8000) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "0100000000000000"}], 0x30}, 0x0) shutdown(r0, 0x2) close(r0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 2m42.048038777s ago: executing program 4 (id=1722): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000010000000000000002000186a30000000300000001000000010000001c00"/64, 0x40) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 2m38.971469596s ago: executing program 54 (id=1696): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/use_tempaddr\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='2\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/default/use_tempaddr\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='2\n', 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='2\n', 0x2) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, r4}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 2m36.885557564s ago: executing program 55 (id=1709): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x100, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3e8, 0x64, 0x1f4, 0xa, 0xa, 0xa}}, @TCA_RED_STAB={0x104}]}}]}, 0x100}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@getqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x0) 2m34.80050625s ago: executing program 56 (id=1714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) 2m26.379184088s ago: executing program 57 (id=1722): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000010000000000000002000186a30000000300000001000000010000001c00"/64, 0x40) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 1m42.55452269s ago: executing program 8 (id=1725): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x3210, @loopback}, 0x10) listen(r0, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="000008004500003c00000000408400007f0000017f00000104d2321000000000567b5bca0100001c11223344000080000005000500000001c001000811223344"], 0x40) 1m41.971082001s ago: executing program 8 (id=1727): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m26.903184768s ago: executing program 58 (id=1727): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 40.115131176s ago: executing program 7 (id=1724): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000800)=""/256, 0x100) 31.721282694s ago: executing program 3 (id=1777): write(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x1) close(0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="00000000010000", 0x7) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000700), 0x4) 31.521498258s ago: executing program 3 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\x00', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000), 0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x2, 0x3]}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x1, 0x4, 'test'}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000), 0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x2, 0x3]}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x1, 0x4, 'test'}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, 0x8) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) 31.148008994s ago: executing program 3 (id=1783): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) 30.873208196s ago: executing program 3 (id=1784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x160, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x130, 0x2, [@TCA_GRED_PARMS={0x2c, 0x1, {0x1000, 0xa, 0x64}}, @TCA_GRED_STAB={0x104}, @TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x160}}, 0x0) 29.662837231s ago: executing program 3 (id=1788): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 29.297044811s ago: executing program 3 (id=1790): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) r4 = syz_io_uring_setup(0x100, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) r9 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) r10 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) r11 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) r12 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) io_uring_enter(r4, 0x5, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 26.074613882s ago: executing program 6 (id=1810): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1\x00', 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x5) syz_emit_ethernet(0x50, &(0x7f0000000a00)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x84, 0x40, @remote, @local, {[], "4e234e2300000000c100002000000001c001000c0000000100000000"}}}}}, 0x0) 25.841630616s ago: executing program 6 (id=1812): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/syz_tun/accept_dad\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/ipv6/conf/syz_tun/dad_transmits\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/dad_transmits\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1', 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000004c0)={'syz_tun\x00', @ifru_ivalue=0x1}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={@local, 0x40, r5}) syz_emit_ethernet(0x56, &(0x7f0000000540)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x40, '\x00', @local, [{0x2, 0x1, "aaaaaaaaaaaa"}]}}}}}}, 0x0) nanosleep(&(0x7f00000005c0)={0x1}, 0x0) 24.816376602s ago: executing program 59 (id=1724): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000800)=""/256, 0x100) 24.67104952s ago: executing program 6 (id=1817): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x24, 0x12, 0xa, 0x601, 0x0, 0x0, {0x2}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x10, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_NAME={0x9, 0x1, 'syz0\x00'}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}}}, 0x0) 24.535205087s ago: executing program 6 (id=1818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x1002}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x0, @rand_addr=0xa000002}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaa55aa55aa5508004500003c00012000400100000a0000010a0000020800f7c50001000100"/72], 0x4a) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaa55aa55aa5508004500003c00022000400100000a0000030a0000020800f7c50001000100"/72], 0x4a) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaa55aa55aa5508004500003c00032000400100000a0000040a0000020800f7c50001000100"/72], 0x4a) 24.270392635s ago: executing program 6 (id=1820): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async) close(r3) 23.574077091s ago: executing program 6 (id=1822): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000010)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @broadcast}, 0x10) 22.152951129s ago: executing program 9 (id=1828): write(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x1) close(0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r0, 0x0, 0x0) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000700), 0x4) 21.909980095s ago: executing program 9 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x0, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'bridge0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @bridge={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x0, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'veth0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @veth={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, @void}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x0, 0x0, r1}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000005400010600000000000000000700000002000000200001000300000001000000ef010101000000000000000000000000080000001c0002000500030001000000100002000c0001000800010001020304"], 0x54}}, 0x0) 21.621221771s ago: executing program 9 (id=1830): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000300)=[@sndrcv={0x20, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x20}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) recvfrom(r2, &(0x7f0000000500), 0x100, 0x0, 0x0, 0x0) 20.535729185s ago: executing program 9 (id=1834): r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20.298059948s ago: executing program 9 (id=1835): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0), 0x3a0) 20.083163185s ago: executing program 9 (id=1836): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) r5 = syz_io_uring_setup(0x80, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 14.079397496s ago: executing program 60 (id=1790): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) r4 = syz_io_uring_setup(0x100, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) r9 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) r10 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) r11 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) r12 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) io_uring_enter(r4, 0x5, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 8.655056104s ago: executing program 5 (id=1847): r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4886) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 7.869551353s ago: executing program 61 (id=1822): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000010)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @broadcast}, 0x10) 5.429757062s ago: executing program 5 (id=1851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000340001000000000000"], 0x28}], 0x1}, 0x0) 5.255693455s ago: executing program 5 (id=1852): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r1, 0x84, 0x7a, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xf}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000280)=0x2, 0x4) setsockopt(r2, 0x84, 0x7a, &(0x7f00000002c0)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={0x0, 0xf}, 0x8) bind(r1, &(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000380)=@in={0x2, 0x4e20, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000003c0), 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000400), 0x4) 5.091231672s ago: executing program 5 (id=1853): socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x708f6d38]}, 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x800c4, 0x334e53aded47c559) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@access_client}, {@access_client}]}}) write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYBLOB="56d4f7a3e4a013bd58651a298534c2fcad760b1915a16a7edaf0659c32851b926596cd7f2530383bb79ed2361acad33d43747f4c8a9e9884b108e66d6b92"], 0x15) 4.879652098s ago: executing program 62 (id=1836): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) r5 = syz_io_uring_setup(0x80, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 4.663998548s ago: executing program 5 (id=1856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000400)="0123456789", 0xa) read(r5, &(0x7f0000000500), 0xa) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 4.252339577s ago: executing program 0 (id=1857): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x181002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xb, r1, 0x0}]) 3.51216529s ago: executing program 5 (id=1858): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66, 0x0, 0x30}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xffe) 3.26177476s ago: executing program 0 (id=1859): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) 1.940050794s ago: executing program 0 (id=1860): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000340001000000000000"], 0x28}], 0x1}, 0x0) 1.683275204s ago: executing program 0 (id=1861): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r1, 0x84, 0x7a, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xf}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000280)=0x2, 0x4) setsockopt(r2, 0x84, 0x7a, &(0x7f00000002c0)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={0x0, 0xf}, 0x8) bind(r1, &(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000380)=@in={0x2, 0x4e20, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000003c0), 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000400), 0x4) 1.378815091s ago: executing program 0 (id=1862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, &(0x7f0000000280)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xfffffffffffffff7, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private1, @in=@empty}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000040)=0xfffffffffffffeaa) lgetxattr(0x0, &(0x7f00000001c0)=ANY=[], &(0x7f0000000400)=""/203, 0xcb) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) 0s ago: executing program 0 (id=1863): syz_emit_ethernet(0x6c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB="280000000406010800000000000000020100000005000100070000000900020073797a31000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xf22) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@deltfilter={0x5c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff000000}]}}]}, 0x5c}}, 0x20044800) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCXONC(r3, 0x540a, 0x0) write$char_usb(r4, &(0x7f0000000000)="ef", 0x1) kernel console output (not intermixed with test programs): T16876] bridge_slave_1: entered promiscuous mode [ 1439.405616][T16848] hsr_slave_0: entered promiscuous mode [ 1439.406781][T16848] hsr_slave_1: entered promiscuous mode [ 1439.407696][T16848] debugfs: 'hsr0' already exists in 'hsr' [ 1439.407724][T16848] Cannot create hsr debugfs directory [ 1439.469440][T16876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.494478][T16876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.822996][ T67] hsr_slave_0: left promiscuous mode [ 1439.833404][ T5602] Bluetooth: hci0: command tx timeout [ 1439.863106][ T67] hsr_slave_1: left promiscuous mode [ 1439.864024][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1439.864045][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.891972][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1439.892187][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.967071][ T67] veth1_macvtap: left promiscuous mode [ 1439.967160][ T67] veth0_macvtap: left promiscuous mode [ 1439.967357][ T67] veth1_vlan: left promiscuous mode [ 1439.967479][ T67] veth0_vlan: left promiscuous mode [ 1441.202735][ T5602] Bluetooth: hci1: command tx timeout [ 1442.395268][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1442.455426][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1443.116553][T16876] team0: Port device team_slave_0 added [ 1443.244437][T16876] team0: Port device team_slave_1 added [ 1443.272622][ T5602] Bluetooth: hci1: command tx timeout [ 1443.546113][ T8264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1443.582170][ T8264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1443.584528][ T8264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1443.665389][ T8264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1443.667586][ T8264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1444.166414][T16876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.166433][T16876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.166464][T16876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.238588][T16876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.238626][T16876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.238659][T16876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.169736][T16876] hsr_slave_0: entered promiscuous mode [ 1445.170837][T16876] hsr_slave_1: entered promiscuous mode [ 1445.171610][T16876] debugfs: 'hsr0' already exists in 'hsr' [ 1445.171631][T16876] Cannot create hsr debugfs directory [ 1445.363061][ T8264] Bluetooth: hci1: command tx timeout [ 1445.912667][ T8264] Bluetooth: hci2: command tx timeout [ 1446.686387][T16899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.686512][T16899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.686669][T16899] bridge_slave_0: entered allmulticast mode [ 1446.688692][T16899] bridge_slave_0: entered promiscuous mode [ 1446.768438][T16899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.768588][T16899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.769049][T16899] bridge_slave_1: entered allmulticast mode [ 1446.771179][T16899] bridge_slave_1: entered promiscuous mode [ 1446.920976][T16899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.949247][T16899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.022724][T16899] team0: Port device team_slave_0 added [ 1447.075309][T16899] team0: Port device team_slave_1 added [ 1447.360869][T16899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.360889][T16899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.360922][T16899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.467472][T16899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.467489][T16899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.467514][T16899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.978896][T16899] hsr_slave_0: entered promiscuous mode [ 1447.980104][T16899] hsr_slave_1: entered promiscuous mode [ 1447.980856][T16899] debugfs: 'hsr0' already exists in 'hsr' [ 1447.980876][T16899] Cannot create hsr debugfs directory [ 1448.061877][ T8264] Bluetooth: hci2: command tx timeout [ 1448.931868][T16916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.932019][T16916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.932308][T16916] bridge_slave_0: entered allmulticast mode [ 1448.961900][T16916] bridge_slave_0: entered promiscuous mode [ 1448.974076][T16916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.974762][T16916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.975356][T16916] bridge_slave_1: entered allmulticast mode [ 1448.978121][T16916] bridge_slave_1: entered promiscuous mode [ 1449.654857][T16916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.107655][T16916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.162983][ T8264] Bluetooth: hci2: command tx timeout [ 1450.718014][T16916] team0: Port device team_slave_0 added [ 1450.746420][T16916] team0: Port device team_slave_1 added [ 1451.286662][T16916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.286683][T16916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.286718][T16916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.289840][T16916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.289859][T16916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.289890][T16916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1451.770379][T16916] hsr_slave_0: entered promiscuous mode [ 1451.771528][T16916] hsr_slave_1: entered promiscuous mode [ 1451.772310][T16916] debugfs: 'hsr0' already exists in 'hsr' [ 1451.791000][T16916] Cannot create hsr debugfs directory [ 1452.232850][ T8264] Bluetooth: hci2: command tx timeout [ 1453.320652][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1453.414901][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1453.475525][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1453.490309][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1453.492757][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1455.753109][ T8264] Bluetooth: hci3: command tx timeout [ 1456.047327][T16947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.047652][T16947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.047972][T16947] bridge_slave_0: entered allmulticast mode [ 1456.076961][T16947] bridge_slave_0: entered promiscuous mode [ 1456.342671][T16947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.342805][T16947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.343106][T16947] bridge_slave_1: entered allmulticast mode [ 1456.345920][T16947] bridge_slave_1: entered promiscuous mode [ 1456.716859][T16947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.721662][T16947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.950759][T16947] team0: Port device team_slave_0 added [ 1456.961199][T16947] team0: Port device team_slave_1 added [ 1457.023943][T16947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.023961][T16947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.023984][T16947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.025987][T16947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.026004][T16947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.026034][T16947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.262098][T16947] hsr_slave_0: entered promiscuous mode [ 1457.266359][T16947] hsr_slave_1: entered promiscuous mode [ 1457.267514][T16947] debugfs: 'hsr0' already exists in 'hsr' [ 1457.267545][T16947] Cannot create hsr debugfs directory [ 1457.838528][ T8264] Bluetooth: hci3: command tx timeout [ 1459.914636][ T8264] Bluetooth: hci3: command tx timeout [ 1460.236954][T16848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1460.287405][T16848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1460.293751][T16848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1460.339277][T16848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1460.364765][T16848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1460.426451][T16848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1460.442963][T16848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1460.468671][T16848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1461.059781][T16876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1461.092769][T16876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1461.115078][T16876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1461.149213][T16876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1461.190821][T16876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1461.230365][T16876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1461.334836][T16876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1461.367599][T16876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1461.448488][T16848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.695191][T16848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.776391][ T9946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.776488][ T9946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.799757][T16899] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1461.829144][T16899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1461.847482][T16899] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1461.910453][T16899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1461.936123][T16899] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1461.977723][T16899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1461.981874][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.982109][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.010496][ T8264] Bluetooth: hci3: command tx timeout [ 1462.059211][T16899] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1462.091918][T16899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1462.764596][T16876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.972558][T16876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.106261][ T3196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.106419][ T3196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.501028][ T9946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.503579][ T9946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.746789][T16899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.857266][T16899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.926057][T12954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.926322][T12954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.982020][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.991218][T12954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.557029][ T67] bridge_slave_1: left allmulticast mode [ 1464.557068][ T67] bridge_slave_1: left promiscuous mode [ 1464.557328][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.715054][ T67] bridge_slave_0: left allmulticast mode [ 1464.715100][ T67] bridge_slave_0: left promiscuous mode [ 1464.715463][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.012856][ T67] bridge_slave_1: left allmulticast mode [ 1465.012889][ T67] bridge_slave_1: left promiscuous mode [ 1465.013147][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.124158][ T67] bridge_slave_0: left allmulticast mode [ 1465.124192][ T67] bridge_slave_0: left promiscuous mode [ 1465.124410][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.372705][ T67] bridge_slave_1: left allmulticast mode [ 1465.372741][ T67] bridge_slave_1: left promiscuous mode [ 1465.372927][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.516074][ T67] bridge_slave_0: left allmulticast mode [ 1465.516117][ T67] bridge_slave_0: left promiscuous mode [ 1465.516394][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.754548][ T67] bridge_slave_1: left allmulticast mode [ 1465.754588][ T67] bridge_slave_1: left promiscuous mode [ 1465.754873][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.834926][ T67] bridge_slave_0: left allmulticast mode [ 1465.834972][ T67] bridge_slave_0: left promiscuous mode [ 1465.835273][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.052849][ T67] bridge_slave_1: left allmulticast mode [ 1466.052989][ T67] bridge_slave_1: left promiscuous mode [ 1466.053343][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.154940][ T67] bridge_slave_0: left allmulticast mode [ 1466.154974][ T67] bridge_slave_0: left promiscuous mode [ 1466.155215][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.352928][ T67] bridge_slave_1: left allmulticast mode [ 1466.352973][ T67] bridge_slave_1: left promiscuous mode [ 1466.353309][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.454218][ T67] bridge_slave_0: left allmulticast mode [ 1466.454248][ T67] bridge_slave_0: left promiscuous mode [ 1466.454439][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.692729][ T67] bridge_slave_1: left allmulticast mode [ 1466.692769][ T67] bridge_slave_1: left promiscuous mode [ 1466.693061][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.794779][ T67] bridge_slave_0: left allmulticast mode [ 1466.794825][ T67] bridge_slave_0: left promiscuous mode [ 1466.795120][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.234702][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1467.363547][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.441966][ T67] bond0 (unregistering): Released all slaves [ 1467.743619][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1467.823757][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.905143][ T67] bond0 (unregistering): Released all slaves [ 1468.173878][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.253539][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.317703][ T67] bond0 (unregistering): Released all slaves [ 1468.593350][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.684054][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.745438][ T67] bond0 (unregistering): Released all slaves [ 1469.003464][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.083698][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.144818][ T67] bond0 (unregistering): Released all slaves [ 1469.403766][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.483603][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.545159][ T67] bond0 (unregistering): Released all slaves [ 1469.803638][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.883494][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.945234][ T67] bond0 (unregistering): Released all slaves [ 1470.093306][T16848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.803465][T16848] veth0_vlan: entered promiscuous mode [ 1472.012957][T16848] veth1_vlan: entered promiscuous mode [ 1472.169281][T16916] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1472.258454][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1472.278841][T16916] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1472.398843][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1472.601727][T16916] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1472.688289][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1472.719867][T16916] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1472.857688][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1473.201801][T16899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.218083][T16876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.223797][T16848] veth0_macvtap: entered promiscuous mode [ 1473.267671][T16848] veth1_macvtap: entered promiscuous mode [ 1473.687685][T16947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1473.750774][T16947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1473.837819][T16947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1473.940070][T16947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1474.020190][T16947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1474.110170][T16947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1474.129568][T16947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1474.158107][T16947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1474.340758][T16848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.422806][T16848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1474.499714][T16899] veth0_vlan: entered promiscuous mode [ 1474.502237][ T24] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.742851][ T67] hsr_slave_0: left promiscuous mode [ 1474.782683][ T67] hsr_slave_1: left promiscuous mode [ 1474.783557][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.817994][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.972900][ T67] hsr_slave_0: left promiscuous mode [ 1474.992623][ T67] hsr_slave_1: left promiscuous mode [ 1474.993493][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.054384][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.232707][ T67] hsr_slave_0: left promiscuous mode [ 1475.273003][ T67] hsr_slave_1: left promiscuous mode [ 1475.274013][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.323464][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.422793][ T67] hsr_slave_0: left promiscuous mode [ 1475.462886][ T67] hsr_slave_1: left promiscuous mode [ 1475.464122][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.503814][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.562726][ T67] hsr_slave_0: left promiscuous mode [ 1475.602662][ T67] hsr_slave_1: left promiscuous mode [ 1475.603945][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.643901][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.663454][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.703650][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.174208][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1476.223406][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1476.745396][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1476.796425][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1477.323259][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1477.375974][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1477.743225][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1477.793903][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1478.025357][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1478.083578][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1478.393969][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1478.455766][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1478.705115][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1478.743303][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1478.936625][ T24] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.958393][ T24] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.001944][ T24] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.054551][T16876] veth0_vlan: entered promiscuous mode [ 1479.186677][T16899] veth1_vlan: entered promiscuous mode [ 1479.379214][T16876] veth1_vlan: entered promiscuous mode [ 1480.166215][T16899] veth0_macvtap: entered promiscuous mode [ 1480.255623][T12954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.255647][T12954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.426209][T16899] veth1_macvtap: entered promiscuous mode [ 1480.456999][T16916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.550397][T16876] veth0_macvtap: entered promiscuous mode [ 1480.737912][T16876] veth1_macvtap: entered promiscuous mode [ 1480.740316][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.740340][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.915013][T16947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.948710][T16899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.033055][T16916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.159788][T16899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.164471][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.164699][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.213762][T16876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.241775][T16876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.250925][ T194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.268884][ T194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.286100][ T194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.306407][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.306651][T12954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.332314][T16947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.334515][ T194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.511359][ T194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.529591][ T194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.545221][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.545588][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.550329][ T194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.663471][ T194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.109866][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.109983][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.023679][T17261] svc: failed to register lockdv1 RPC service (errno 111). [ 1483.738045][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.738070][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.892174][ T3196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.892203][ T3196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.082738][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.082760][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.464266][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.464289][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.270380][T17261] svc: failed to register nfsdv3 RPC service (errno 512). [ 1485.270639][T17261] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1485.270657][T17261] failed to unregister udp with rpcbind [ 1485.270876][T17261] svc: failed to register nfsdv3 RPC service (errno 97). [ 1485.270895][T17261] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1485.270911][T17261] failed to unregister udp with rpcbind [ 1485.930554][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 1485.931127][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 1486.488327][T16848] svc: failed to register nfsdv3 RPC service (errno 111). [ 1486.490794][T16848] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1486.490817][T16848] failed to unregister tcp with rpcbind [ 1486.491079][T16848] svc: failed to register nfsdv3 RPC service (errno 97). [ 1486.491099][T16848] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1486.491114][T16848] failed to unregister tcp with rpcbind [ 1486.964873][T17334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1475'. [ 1487.021015][T17323] svc: failed to register lockdv1 RPC service (errno 111). [ 1487.463543][T16916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.546402][T16947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.077607][T16947] veth0_vlan: entered promiscuous mode [ 1488.274317][T16947] veth1_vlan: entered promiscuous mode [ 1488.638842][T16947] veth0_macvtap: entered promiscuous mode [ 1488.675236][T16947] veth1_macvtap: entered promiscuous mode [ 1489.062753][T16947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.098918][T16947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.129284][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.129548][ T1142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.129588][ T1142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.129624][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.341805][T17323] svc: failed to register nfsdv3 RPC service (errno 512). [ 1489.342016][T17323] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1489.342033][T17323] failed to unregister udp with rpcbind [ 1489.342237][T17323] svc: failed to register nfsdv3 RPC service (errno 97). [ 1489.342255][T17323] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1489.342271][T17323] failed to unregister udp with rpcbind [ 1490.378477][T17388] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1484'. [ 1490.479379][T16916] veth0_vlan: entered promiscuous mode [ 1490.499503][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.499540][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1490.652145][T16916] veth1_vlan: entered promiscuous mode [ 1491.161409][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.161434][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.371947][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.392768][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.595294][T16916] veth0_macvtap: entered promiscuous mode [ 1491.705554][T16916] veth1_macvtap: entered promiscuous mode [ 1491.909828][T17403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1430'. [ 1492.022515][T16916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1492.155325][T17406] tipc: Enabling of bearer rejected, failed to enable media [ 1492.159407][T16916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1492.607484][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.610062][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.610430][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.610824][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.962233][T17426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 1492.978366][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 1494.527636][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.527659][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.598606][T17445] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1494.598734][T17445] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1494.598956][T17445] veth1_to_bridge: entered allmulticast mode [ 1494.711457][T17445] veth1_to_bridge: entered promiscuous mode [ 1494.791058][T17445] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1494.815559][T17445] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1494.815688][T17445] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1494.916312][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.916336][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.457931][T17463] net_ratelimit: 10134 callbacks suppressed [ 1495.457959][T17463] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 1495.532976][T17466] atomic_op ffff88804d213a18 conn xmit_atomic 0000000000000000 [ 1496.251442][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1496.329953][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1496.345666][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1496.346098][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1496.348116][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1496.448970][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1496.473567][T17482] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1496.950248][T17503] __nla_validate_parse: 6 callbacks suppressed [ 1496.950272][T17503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1504'. [ 1496.952294][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'. [ 1497.224447][T17508] tipc: Started in network mode [ 1497.224482][T17508] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 1497.257846][T17508] tipc: New replicast peer: 127.0.0.1 [ 1497.258418][T17508] tipc: Enabled bearer , priority 10 [ 1497.679873][T17521] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 1497.862512][ T5607] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1497.951308][T17533] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1513'. [ 1497.951745][T17533] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1513'. [ 1498.179696][ T5607] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1498.189476][ T5607] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1498.189511][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1498.189534][ T5607] usb 1-1: Product: syz [ 1498.189551][ T5607] usb 1-1: Manufacturer: syz [ 1498.252727][T10680] tipc: Node number set to 3210880763 [ 1498.352181][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1515'. [ 1498.357486][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1515'. [ 1498.394884][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1515'. [ 1498.395215][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1515'. [ 1498.395447][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1515'. [ 1498.395779][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1515'. [ 1498.993297][ T5607] speedtch 1-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1498.993385][ T5607] usb 1-1: selecting invalid altsetting 0 [ 1498.993421][ T5607] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1498.993484][ T5607] speedtch 1-1:1.0: probe with driver speedtch failed with error -71 [ 1499.056876][ T5607] usb 1-1: selecting invalid altsetting 0 [ 1499.056920][ T5607] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 1499.057450][ T5607] usb 1-1: selecting invalid altsetting 0 [ 1499.057486][ T5607] speedtch 1-1:1.1: probe with driver speedtch failed with error -22 [ 1499.142540][ T5607] usb 1-1: USB disconnect, device number 2 [ 1499.509862][T17373] NFSD: Failed to start, no listeners configured. [ 1500.019324][T17586] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 1501.094195][ T5708] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1501.294084][ T5708] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1501.381862][ T5708] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1501.381897][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1501.381919][ T5708] usb 1-1: Product: syz [ 1501.381942][ T5708] usb 1-1: Manufacturer: syz [ 1501.970861][T17647] __nla_validate_parse: 11 callbacks suppressed [ 1501.970891][T17647] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1545'. [ 1502.529101][ T5708] speedtch 1-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1502.529161][ T5708] usb 1-1: selecting invalid altsetting 0 [ 1502.529187][ T5708] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1502.529231][ T5708] speedtch 1-1:1.0: probe with driver speedtch failed with error -71 [ 1502.585877][ T5708] usb 1-1: selecting invalid altsetting 0 [ 1502.585918][ T5708] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 1502.586394][ T5708] usb 1-1: selecting invalid altsetting 0 [ 1502.586429][ T5708] speedtch 1-1:1.1: probe with driver speedtch failed with error -22 [ 1502.630352][T17638] ceph: No mds server is up or the cluster is laggy [ 1502.636885][ T5708] usb 1-1: USB disconnect, device number 3 [ 1503.305828][T17667] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 1503.680714][T17649] NFSD: Unable to initialize client recovery tracking! (-110) [ 1503.680737][T17649] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1503.680751][T17649] NFSD: starting 90-second grace period (net f0001275) [ 1504.327156][T17697] FAULT_INJECTION: forcing a failure. [ 1504.327156][T17697] name failslab, interval 1, probability 100, space 0, times 1 [ 1504.327216][T17697] CPU: 0 UID: 0 PID: 17697 Comm: syz.9.1558 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1504.327248][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1504.327266][T17697] Call Trace: [ 1504.327277][T17697] [ 1504.327290][T17697] dump_stack_lvl+0xe8/0x150 [ 1504.327341][T17697] should_fail_ex+0x467/0x600 [ 1504.327397][T17697] should_failslab+0xa8/0x100 [ 1504.327433][T17697] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1504.327475][T17697] ? __alloc_skb+0x1d7/0x7a0 [ 1504.327505][T17697] ? __alloc_skb+0x1d7/0x7a0 [ 1504.327540][T17697] __alloc_skb+0x1d7/0x7a0 [ 1504.327574][T17697] alloc_skb_with_frags+0xc6/0x760 [ 1504.327609][T17697] ? __lock_acquire+0x683/0x2ce0 [ 1504.327650][T17697] sock_alloc_send_pskb+0x884/0x9a0 [ 1504.327706][T17697] ? __lock_acquire+0x683/0x2ce0 [ 1504.327755][T17697] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1504.327789][T17697] ? __css_rstat_updated+0x235/0x540 [ 1504.327826][T17697] ? __lock_acquire+0x683/0x2ce0 [ 1504.327863][T17697] __ip_append_data+0x29ea/0x3cf0 [ 1504.327918][T17697] ? __lock_acquire+0x683/0x2ce0 [ 1504.327955][T17697] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1504.328024][T17697] ? __pfx___ip_append_data+0x10/0x10 [ 1504.328067][T17697] ? ipv4_mtu+0x23/0x670 [ 1504.328103][T17697] ? __pfx_ipv4_mtu+0x10/0x10 [ 1504.328139][T17697] ? ip_setup_cork+0x4ed/0x8f0 [ 1504.328181][T17697] ip_make_skb+0x250/0x460 [ 1504.328212][T17697] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1504.328252][T17697] ? __pfx_ip_make_skb+0x10/0x10 [ 1504.328291][T17697] ? xfrm_lookup_with_ifid+0x1833/0x1b60 [ 1504.328361][T17697] udp_sendmsg+0x1937/0x2140 [ 1504.328414][T17697] ? __pfx_udp_sendmsg+0x10/0x10 [ 1504.328436][T17697] ? tomoyo_check_inet_address+0x27f/0x930 [ 1504.328505][T17697] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1504.328550][T17697] ? __asan_memset+0x22/0x50 [ 1504.328599][T17697] ? sock_rps_record_flow+0x19/0x350 [ 1504.328644][T17697] ? inet_sendmsg+0x23e/0x320 [ 1504.328687][T17697] ? __pfx_inet_sendmsg+0x10/0x10 [ 1504.328725][T17697] sock_sendmsg_nosec+0x10e/0x180 [ 1504.328769][T17697] __sys_sendto+0x41e/0x5d0 [ 1504.328803][T17697] ? __pfx___sys_sendto+0x10/0x10 [ 1504.328807][ C1] FAULT_INJECTION: forcing a failure. [ 1504.328807][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 1504.328861][T17697] ? rcu_is_watching+0x15/0xb0 [ 1504.328899][T17697] __x64_sys_sendto+0xde/0x100 [ 1504.328926][T17697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.328951][T17697] do_syscall_64+0x174/0x580 [ 1504.328984][T17697] ? trace_irq_disable+0x3b/0x140 [ 1504.329008][T17697] ? clear_bhb_loop+0x40/0x90 [ 1504.329036][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.329059][T17697] RIP: 0033:0x7f6f1ec7de99 [ 1504.329082][T17697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.329102][T17697] RSP: 002b:00007f6f1ceb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1504.329127][T17697] RAX: ffffffffffffffda RBX: 00007f6f1ef06090 RCX: 00007f6f1ec7de99 [ 1504.329144][T17697] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 1504.329159][T17697] RBP: 00007f6f1ed13eaf R08: 0000200000000300 R09: 0000000000000010 [ 1504.329174][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.329188][T17697] R13: 00007f6f1ef06128 R14: 00007f6f1ef06090 R15: 00007ffd9f23c418 [ 1504.329222][T17697] [ 1504.329239][ C1] CPU: 1 UID: 0 PID: 17696 Comm: syz.9.1558 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1504.329271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1504.329288][ C1] Call Trace: [ 1504.329299][ C1] [ 1504.329310][ C1] dump_stack_lvl+0xe8/0x150 [ 1504.329357][ C1] should_fail_ex+0x467/0x600 [ 1504.329407][ C1] should_failslab+0xa8/0x100 [ 1504.329442][ C1] kmem_cache_alloc_noprof+0xa4/0x650 [ 1504.329473][ C1] ? skb_clone+0x212/0x3a0 [ 1504.329507][ C1] ? skb_clone+0x212/0x3a0 [ 1504.329534][ C1] ? run_filter+0x23/0x270 [ 1504.329567][ C1] skb_clone+0x212/0x3a0 [ 1504.329590][ C1] ? packet_rcv+0x563/0x16f0 [ 1504.329620][ C1] packet_rcv+0x65d/0x16f0 [ 1504.329656][ C1] __netif_receive_skb_core+0x6eb/0x30b0 [ 1504.329695][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1504.329726][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1504.329756][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1504.329782][ C1] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1504.329821][ C1] ? process_backlog+0x261/0xc50 [ 1504.329842][ C1] ? process_backlog+0x261/0xc50 [ 1504.329863][ C1] ? rt_spin_unlock+0x157/0x200 [ 1504.329901][ C1] ? process_backlog+0x261/0xc50 [ 1504.329920][ C1] process_backlog+0x351/0xc50 [ 1504.329967][ C1] __napi_poll+0xae/0x550 [ 1504.330001][ C1] net_rx_action+0x621/0xd70 [ 1504.330033][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1504.330051][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1504.330083][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1504.330204][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1504.330243][ C1] handle_softirqs+0x1d9/0x6c0 [ 1504.330281][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 1504.330305][ C1] ? __dev_queue_xmit+0x294/0x3880 [ 1504.330335][ C1] __dev_queue_xmit+0x1ee9/0x3880 [ 1504.330373][ C1] ? __dev_queue_xmit+0x294/0x3880 [ 1504.330407][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1504.330431][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1504.330467][ C1] ? nf_hook+0xa1/0x3a0 [ 1504.330506][ C1] ? ip_output+0x29f/0x450 [ 1504.330537][ C1] ? ip_output+0x29f/0x450 [ 1504.330575][ C1] ? ip_finish_output2+0xa2e/0x1100 [ 1504.330601][ C1] ip_finish_output2+0xc27/0x1100 [ 1504.330622][ C1] ? ip_finish_output2+0x3de/0x1100 [ 1504.330652][ C1] ip_output+0x29f/0x450 [ 1504.330683][ C1] ? ip_output+0x5a/0x450 [ 1504.330716][ C1] ip_send_skb+0x45/0xc0 [ 1504.330750][ C1] udp_send_skb+0x7f7/0xfb0 [ 1504.330782][ C1] udp_sendmsg+0x1971/0x2140 [ 1504.330815][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1504.330838][ C1] ? __pfx_udp_sendmsg+0x10/0x10 [ 1504.330865][ C1] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1504.330930][ C1] ? inet_sendmsg+0x23e/0x320 [ 1504.330972][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 1504.331001][ C1] sock_sendmsg_nosec+0x10e/0x180 [ 1504.331036][ C1] __sys_sendto+0x41e/0x5d0 [ 1504.331064][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1504.331112][ C1] ? rcu_is_watching+0x15/0xb0 [ 1504.331145][ C1] __x64_sys_sendto+0xde/0x100 [ 1504.331168][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.331190][ C1] do_syscall_64+0x174/0x580 [ 1504.331217][ C1] ? clear_bhb_loop+0x40/0x90 [ 1504.331242][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.331262][ C1] RIP: 0033:0x7f6f1ec7de99 [ 1504.331282][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.331300][ C1] RSP: 002b:00007f6f1ced6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1504.331322][ C1] RAX: ffffffffffffffda RBX: 00007f6f1ef05fa0 RCX: 00007f6f1ec7de99 [ 1504.331337][ C1] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 1504.331349][ C1] RBP: 00007f6f1ed13eaf R08: 0000200000000300 R09: 0000000000000010 [ 1504.331363][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.331374][ C1] R13: 00007f6f1ef06038 R14: 00007f6f1ef05fa0 R15: 00007ffd9f23c418 [ 1504.331405][ C1] [ 1505.711394][T17714] netlink: ct family unspecified [ 1505.711442][T17714] openvswitch: netlink: Actions may not be safe on all matching packets [ 1506.362471][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1506.514034][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 1506.515577][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1506.515614][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1506.555370][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 1506.555401][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.555421][ T10] usb 2-1: Product: syz [ 1506.555435][ T10] usb 2-1: Manufacturer: syz [ 1506.555449][ T10] usb 2-1: SerialNumber: syz [ 1506.617378][T16916] svc: failed to register nfsdv3 RPC service (errno 111). [ 1506.667755][T17724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1506.667887][T17724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1506.763239][T16916] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1506.763263][T16916] failed to unregister tcp with rpcbind [ 1506.763529][T16916] svc: failed to register nfsdv3 RPC service (errno 97). [ 1506.763547][T16916] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1506.763560][T16916] failed to unregister tcp with rpcbind [ 1507.372787][ T10] ax88179_178a 2-1:1.0: probe with driver ax88179_178a failed with error -71 [ 1507.455758][ T10] usb 2-1: USB disconnect, device number 3 [ 1507.992534][ C0] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated [ 1508.992572][ T5708] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1509.148048][ T5708] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1509.160075][ T5708] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1509.160109][ T5708] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1509.160132][ T5708] usb 10-1: Product: syz [ 1509.160149][ T5708] usb 10-1: Manufacturer: syz [ 1509.347426][T17811] tipc: Started in network mode [ 1509.347449][T17811] tipc: Node identity 1000001, cluster identity 4711 [ 1509.347462][T17811] tipc: Node number set to 16777217 [ 1509.348770][T17811] tipc: New replicast peer: 127.0.0.1 [ 1509.349540][T17811] tipc: Enabled bearer , priority 10 [ 1509.522522][T17815] tipc: Enabled bearer , priority 10 [ 1510.055813][T17821] svc: failed to register lockdv1 RPC service (errno 111). [ 1510.178740][ T5708] speedtch 10-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1510.178822][ T5708] usb 10-1: selecting invalid altsetting 0 [ 1510.178861][ T5708] speedtch 10-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1510.178925][ T5708] speedtch 10-1:1.0: probe with driver speedtch failed with error -71 [ 1510.407782][ T5708] usb 10-1: selecting invalid altsetting 0 [ 1510.407827][ T5708] usbtest 10-1:1.1: probe with driver usbtest failed with error -22 [ 1510.459298][ T5708] usb 10-1: selecting invalid altsetting 0 [ 1510.459328][ T5708] speedtch 10-1:1.1: probe with driver speedtch failed with error -22 [ 1510.640056][ T5708] usb 10-1: USB disconnect, device number 2 [ 1510.821342][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1595'. [ 1510.822018][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1595'. [ 1510.847186][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1595'. [ 1510.864060][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1595'. [ 1510.864371][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1595'. [ 1510.864710][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1595'. [ 1510.869374][T17843] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1595'. [ 1511.066255][T17847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1597'. [ 1511.279521][T17855] tipc: Enabling of bearer rejected, failed to enable media [ 1511.861717][ T5708] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 1511.883229][T17849] ceph: No mds server is up or the cluster is laggy [ 1512.154094][T17821] svc: failed to register nfsdv3 RPC service (errno 512). [ 1512.154356][T17821] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1512.154406][T17821] failed to unregister udp with rpcbind [ 1512.154648][T17821] svc: failed to register nfsdv3 RPC service (errno 97). [ 1512.154667][T17821] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1512.154682][T17821] failed to unregister udp with rpcbind [ 1512.793776][T17893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1608'. [ 1512.794214][T17893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1608'. [ 1512.862652][T10680] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1513.044564][T10680] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1513.046335][T10680] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1513.046368][T10680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1513.046390][T10680] usb 2-1: Product: syz [ 1513.046407][T10680] usb 2-1: Manufacturer: syz [ 1513.569757][T10680] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1513.569835][T10680] usb 2-1: selecting invalid altsetting 0 [ 1513.569877][T10680] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1513.569940][T10680] speedtch 2-1:1.0: probe with driver speedtch failed with error -71 [ 1513.586830][T10680] usb 2-1: selecting invalid altsetting 0 [ 1513.586955][T10680] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 1513.636422][T10680] usb 2-1: selecting invalid altsetting 0 [ 1513.636463][T10680] speedtch 2-1:1.1: probe with driver speedtch failed with error -22 [ 1513.750391][T10680] usb 2-1: USB disconnect, device number 4 [ 1514.217352][T17928] tipc: Enabling of bearer rejected, already enabled [ 1514.356974][T17931] lo speed is unknown, defaulting to 1000 [ 1514.367832][T17931] lo speed is unknown, defaulting to 1000 [ 1514.380468][T17931] lo speed is unknown, defaulting to 1000 [ 1517.064742][T18005] __nla_validate_parse: 13 callbacks suppressed [ 1517.064768][T18005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1517.065663][T18005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1517.067819][T18005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1517.071110][T18005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1517.072179][T18005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1517.084377][T18005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1517.093560][T18005] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1517.902816][T17989] NFSD: Unable to initialize client recovery tracking! (-110) [ 1517.902838][T17989] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1517.902850][T17989] NFSD: starting 90-second grace period (net f0000e78) [ 1517.987785][T17929] infiniband syz0: set active [ 1517.987810][T17929] infiniband syz0: added veth0 [ 1518.013320][T17929] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1518.016184][T17929] infiniband syz0: Couldn't open port 1 [ 1518.016430][T17929] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1518.016460][T17929] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1518.016495][T17929] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1518.229391][T17929] RDS/IB: syz0: added [ 1518.229464][T17929] smc: adding ib device syz0 with port count 1 [ 1518.229489][T17929] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 1519.534000][T18063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1646'. [ 1519.534383][T18063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1646'. [ 1519.535098][T18063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1646'. [ 1519.737263][T18061] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 1520.303919][T18080] svc: failed to register lockdv1 RPC service (errno 111). [ 1521.098892][T18080] svc: failed to register nfsdv3 RPC service (errno 512). [ 1521.099135][T18080] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1521.099153][T18080] failed to unregister udp with rpcbind [ 1521.099357][T18080] svc: failed to register nfsdv3 RPC service (errno 97). [ 1521.099377][T18080] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1521.099393][T18080] failed to unregister udp with rpcbind [ 1522.425910][T18119] ceph: No mds server is up or the cluster is laggy [ 1522.473159][T18138] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 1523.551620][T18164] __nla_validate_parse: 9 callbacks suppressed [ 1523.551642][T18164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1671'. [ 1523.562786][T18164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1671'. [ 1523.564222][T18164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1671'. [ 1523.564814][T18164] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1671'. [ 1525.315053][T18206] tipc: Enabling of bearer rejected, already enabled [ 1525.320960][T18206] tipc: Can't bind to reserved service type 63 [ 1525.767878][T17931] infiniband syz1: set active [ 1525.767905][T17931] infiniband syz1: added lo [ 1525.772523][T16513] lo speed is unknown, defaulting to 1000 [ 1525.865760][T17931] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1525.876387][T17931] infiniband syz1: Couldn't open port 1 [ 1525.876696][T17931] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1525.876731][T17931] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1525.876776][T17931] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1526.459055][T17931] RDS/IB: syz1: added [ 1526.459171][T17931] smc: adding ib device syz1 with port count 1 [ 1526.459210][T17931] smc: ib device syz1 port 1 has no pnetid [ 1526.459310][T10680] lo speed is unknown, defaulting to 1000 [ 1526.461463][T17931] lo speed is unknown, defaulting to 1000 [ 1526.838245][T18221] ceph: No mds server is up or the cluster is laggy [ 1529.222654][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1529.263599][T17931] lo speed is unknown, defaulting to 1000 [ 1529.506379][ T32] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1529.508105][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1529.508141][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1529.508167][ T32] usb 3-1: SerialNumber: syz [ 1530.387612][ T32] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1530.498979][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1530.632969][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1530.637803][ T32] usb 3-1: USB disconnect, device number 2 [ 1530.711804][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1530.785984][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1530.955666][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1531.066360][ T199] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1531.443396][ T199] usb 5-1: device descriptor read/64, error -71 [ 1531.802509][ T199] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1531.984360][ T199] usb 5-1: device descriptor read/64, error -71 [ 1532.102753][ T199] usb usb5-port1: attempt power cycle [ 1532.642790][ T199] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1532.666130][ T199] usb 5-1: device descriptor read/8, error -71 [ 1532.972716][ T199] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1532.993775][ T199] usb 5-1: device descriptor read/8, error -71 [ 1533.148568][ T199] usb usb5-port1: unable to enumerate USB device [ 1533.444294][ T8264] Bluetooth: hci4: command tx timeout [ 1535.513512][ T8264] Bluetooth: hci4: command tx timeout [ 1537.606404][ T8264] Bluetooth: hci4: command tx timeout [ 1539.683547][ T8264] Bluetooth: hci4: command tx timeout [ 1542.731678][T16787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1542.860084][T16787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1542.861523][T16787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1542.888380][T16787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1542.889511][T16787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1544.800494][ T8264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1544.897464][ T8264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1544.899852][ T8264] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1544.901593][ T8264] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1544.902511][ T8264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1545.114963][ T5602] Bluetooth: hci6: command tx timeout [ 1546.821423][T16787] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1546.903480][T16787] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1546.926170][T16787] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1546.995404][T16787] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1546.996216][T16787] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1547.224306][ T8264] Bluetooth: hci6: command tx timeout [ 1547.224381][ T8264] Bluetooth: hci7: command tx timeout [ 1549.272828][T16787] Bluetooth: hci8: command tx timeout [ 1549.273364][ T5602] Bluetooth: hci7: command tx timeout [ 1549.273371][T16787] Bluetooth: hci6: command tx timeout [ 1549.762107][T16787] Bluetooth: hci5: command 0x0406 tx timeout [ 1551.353068][ T8264] Bluetooth: hci7: command tx timeout [ 1551.353106][ T8264] Bluetooth: hci6: command tx timeout [ 1551.353130][ T8264] Bluetooth: hci8: command tx timeout [ 1552.817555][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.817617][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.434652][T16787] Bluetooth: hci8: command tx timeout [ 1553.434690][T16787] Bluetooth: hci7: command tx timeout [ 1553.746781][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1553.780976][T17931] lo speed is unknown, defaulting to 1000 [ 1554.879253][ T5606] Bluetooth: hci0: command 0x0406 tx timeout [ 1555.513039][ T8264] Bluetooth: hci8: command tx timeout [ 1555.938726][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1555.981651][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1555.995194][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1556.024519][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1556.025635][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1556.848644][T18382] lo speed is unknown, defaulting to 1000 [ 1557.107890][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1557.256304][T17931] lo speed is unknown, defaulting to 1000 [ 1558.015241][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.312592][ T5606] Bluetooth: hci1: command tx timeout [ 1558.729742][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.802521][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1558.804477][T18319] lo speed is unknown, defaulting to 1000 [ 1559.423979][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.502654][T18371] lo speed is unknown, defaulting to 1000 [ 1560.139706][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.235692][ T5259] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1560.236102][T18377] lo speed is unknown, defaulting to 1000 [ 1560.392965][ T5606] Bluetooth: hci1: command tx timeout [ 1561.432595][ T5259] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1561.705041][T17931] lo speed is unknown, defaulting to 1000 [ 1562.472573][ T5606] Bluetooth: hci1: command tx timeout [ 1562.546969][ T5259] 8021q: adding VLAN 0 to HW filter on device eth32 [ 1562.645154][T18382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.645416][T18382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.645681][T18382] bridge_slave_0: entered allmulticast mode [ 1562.680379][T18382] bridge_slave_0: entered promiscuous mode [ 1562.832877][ T66] veth1_to_bridge: left allmulticast mode [ 1562.832915][ T66] veth1_to_bridge: left promiscuous mode [ 1562.833155][ T66] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1562.996367][ T66] bridge_slave_1: left allmulticast mode [ 1562.996418][ T66] bridge_slave_1: left promiscuous mode [ 1562.996690][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.144339][ T66] bridge_slave_0: left allmulticast mode [ 1563.144380][ T66] bridge_slave_0: left promiscuous mode [ 1563.144630][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.326124][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1564.384393][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.405123][ T66] bond0 (unregistering): Released all slaves [ 1564.451216][T18382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.451324][T18382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.451481][T18382] bridge_slave_1: entered allmulticast mode [ 1564.475730][T18382] bridge_slave_1: entered promiscuous mode [ 1564.506330][T18424] lo speed is unknown, defaulting to 1000 [ 1564.520754][ T5259] 8021q: adding VLAN 0 to HW filter on device eth33 [ 1564.552661][ T5606] Bluetooth: hci1: command tx timeout [ 1565.211786][ T66] tipc: Disabling bearer [ 1565.212042][ T66] tipc: Left network mode [ 1565.479775][T18382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.618594][T18382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.030366][ T5259] 8021q: adding VLAN 0 to HW filter on device eth34 [ 1566.203742][T18382] team0: Port device team_slave_0 added [ 1566.270358][T18382] team0: Port device team_slave_1 added [ 1566.779908][ T5259] 8021q: adding VLAN 0 to HW filter on device eth35 [ 1566.906441][T18382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.906459][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.906485][T18382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.046923][T18382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.046943][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.046976][T18382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.404459][T18319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.404612][T18319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.405203][T18319] bridge_slave_0: entered allmulticast mode [ 1567.442864][T18319] bridge_slave_0: entered promiscuous mode [ 1567.631739][T18319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.640422][T18319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.640705][T18319] bridge_slave_1: entered allmulticast mode [ 1567.673723][T18319] bridge_slave_1: entered promiscuous mode [ 1567.905102][ T5259] 8021q: adding VLAN 0 to HW filter on device eth36 [ 1568.015811][T18382] hsr_slave_0: entered promiscuous mode [ 1568.030435][T18382] hsr_slave_1: entered promiscuous mode [ 1568.233419][T18319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.403264][T18319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.823813][ T66] hsr_slave_0: left promiscuous mode [ 1568.842674][ T66] hsr_slave_1: left promiscuous mode [ 1568.843768][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.843792][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.904824][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.904851][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.976989][ T66] veth1_macvtap: left promiscuous mode [ 1568.977174][ T66] veth0_macvtap: left promiscuous mode [ 1568.977519][ T66] veth1_vlan: left promiscuous mode [ 1568.977670][ T66] veth0_vlan: left promiscuous mode [ 1569.804085][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1569.863447][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1570.260996][ T5259] 8021q: adding VLAN 0 to HW filter on device eth37 [ 1570.298104][T18319] team0: Port device team_slave_0 added [ 1570.384126][T18319] team0: Port device team_slave_1 added [ 1570.777005][T18319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.777026][T18319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.777058][T18319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.935325][T18371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.935433][T18371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.935583][T18371] bridge_slave_0: entered allmulticast mode [ 1570.937594][T18371] bridge_slave_0: entered promiscuous mode [ 1571.008209][T18319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.008228][T18319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.008259][T18319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.092142][T18371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.092286][T18371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.092784][T18371] bridge_slave_1: entered allmulticast mode [ 1571.095857][T18371] bridge_slave_1: entered promiscuous mode [ 1571.684251][T18371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.874367][ T5259] 8021q: adding VLAN 0 to HW filter on device eth38 [ 1571.907016][T18371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.964977][T18377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.965197][T18377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.965431][T18377] bridge_slave_0: entered allmulticast mode [ 1571.996791][T18377] bridge_slave_0: entered promiscuous mode [ 1572.151270][T18319] hsr_slave_0: entered promiscuous mode [ 1572.159734][T18319] hsr_slave_1: entered promiscuous mode [ 1572.166912][T18319] debugfs: 'hsr0' already exists in 'hsr' [ 1572.166997][T18319] Cannot create hsr debugfs directory [ 1572.169966][T18377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.170221][T18377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.195216][T18377] bridge_slave_1: entered allmulticast mode [ 1572.209848][T18377] bridge_slave_1: entered promiscuous mode [ 1572.485562][T18371] team0: Port device team_slave_0 added [ 1572.756773][T18371] team0: Port device team_slave_1 added [ 1572.782689][T18377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.104662][ T5259] 8021q: adding VLAN 0 to HW filter on device eth39 [ 1573.179933][T18377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.378736][T18424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.378950][T18424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.379183][T18424] bridge_slave_0: entered allmulticast mode [ 1573.382123][T18424] bridge_slave_0: entered promiscuous mode [ 1573.472176][T18371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1573.472195][T18371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1573.472222][T18371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1573.534751][T18424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.534884][T18424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.535155][T18424] bridge_slave_1: entered allmulticast mode [ 1573.538437][T18424] bridge_slave_1: entered promiscuous mode [ 1573.640669][T18371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1573.640689][T18371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1573.640720][T18371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.397937][ T66] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.459452][T18377] team0: Port device team_slave_0 added [ 1574.531599][ T5259] 8021q: adding VLAN 0 to HW filter on device eth40 [ 1574.539728][T18377] team0: Port device team_slave_1 added [ 1574.581953][T18424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.918094][T18424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.187903][ T66] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.380977][ T5259] 8021q: adding VLAN 0 to HW filter on device eth41 [ 1575.382213][T18377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.382231][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.382262][T18377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.510219][T18377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.510242][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.510279][T18377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.808958][ T66] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.256782][T18371] hsr_slave_0: entered promiscuous mode [ 1576.261419][T18371] hsr_slave_1: entered promiscuous mode [ 1576.282541][T18371] debugfs: 'hsr0' already exists in 'hsr' [ 1576.282600][T18371] Cannot create hsr debugfs directory [ 1576.322214][T18424] team0: Port device team_slave_0 added [ 1576.410976][ T5259] 8021q: adding VLAN 0 to HW filter on device eth42 [ 1576.425654][T18424] team0: Port device team_slave_1 added [ 1576.782175][ T66] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.987029][T18424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.987050][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.987081][T18424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.071170][T18377] hsr_slave_0: entered promiscuous mode [ 1577.126295][T18377] hsr_slave_1: entered promiscuous mode [ 1577.128353][T18377] debugfs: 'hsr0' already exists in 'hsr' [ 1577.128385][T18377] Cannot create hsr debugfs directory [ 1577.159711][T18424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.159733][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.159766][T18424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.401949][T18424] hsr_slave_0: entered promiscuous mode [ 1578.416659][T18424] hsr_slave_1: entered promiscuous mode [ 1578.417821][T18424] debugfs: 'hsr0' already exists in 'hsr' [ 1578.417849][T18424] Cannot create hsr debugfs directory [ 1580.701975][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.247481][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.644575][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.009103][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.063536][T18382] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1582.090306][T18382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1582.103898][T18382] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1582.129942][T18382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1582.131770][T18382] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1582.186949][T18382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1582.498447][T18382] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1582.517339][T18382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1583.143057][T18382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.416474][T18382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.568922][T12954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.569049][T12954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.669248][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.669352][T12954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.775226][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.781635][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.581136][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.044637][T18382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1587.461174][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.171417][T18382] veth0_vlan: entered promiscuous mode [ 1588.238101][T18382] veth1_vlan: entered promiscuous mode [ 1588.739836][T18382] veth0_macvtap: entered promiscuous mode [ 1589.171957][T18382] veth1_macvtap: entered promiscuous mode [ 1589.270172][T18382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1589.433879][T18382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.923675][ T66] bridge_slave_1: left allmulticast mode [ 1589.923716][ T66] bridge_slave_1: left promiscuous mode [ 1589.924016][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.104515][ T66] bridge_slave_0: left allmulticast mode [ 1590.104561][ T66] bridge_slave_0: left promiscuous mode [ 1590.104880][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.444046][ T66] bridge_slave_1: left allmulticast mode [ 1590.444086][ T66] bridge_slave_1: left promiscuous mode [ 1590.444326][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.520724][ T8264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1590.572712][ T8264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1590.613912][ T8264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1590.618017][ T8264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1590.618868][ T8264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1590.838732][ T66] bridge_slave_0: left allmulticast mode [ 1590.838776][ T66] bridge_slave_0: left promiscuous mode [ 1590.839066][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.123157][ T66] bridge_slave_1: left allmulticast mode [ 1591.123199][ T66] bridge_slave_1: left promiscuous mode [ 1591.123514][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.314282][ T66] bridge_slave_0: left allmulticast mode [ 1591.314329][ T66] bridge_slave_0: left promiscuous mode [ 1591.314608][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.802546][ T8264] Bluetooth: hci0: command tx timeout [ 1592.933533][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.023417][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.076793][ T66] bond0 (unregistering): Released all slaves [ 1594.004162][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1594.093423][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.145803][ T66] bond0 (unregistering): Released all slaves [ 1594.882497][ T8264] Bluetooth: hci0: command tx timeout [ 1595.023470][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.103439][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.138820][ T66] bond0 (unregistering): Released all slaves [ 1595.193055][ T24] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.711220][ T24] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.721852][ T24] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.724227][ T24] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.895770][ T66] tipc: Disabling bearer [ 1595.895906][ T66] tipc: Disabling bearer [ 1596.062944][ T66] tipc: Left network mode [ 1596.953902][ T5606] Bluetooth: hci0: command tx timeout [ 1597.047688][T18863] lo speed is unknown, defaulting to 1000 [ 1597.239710][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.239735][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.503833][ T9946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.503857][ T9946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.032636][ T5606] Bluetooth: hci0: command tx timeout [ 1602.194754][T18371] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1602.250185][T18371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1602.316288][T18371] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1602.477704][T18371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1602.758327][T18863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.758569][T18863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.758856][T18863] bridge_slave_0: entered allmulticast mode [ 1602.841265][T18863] bridge_slave_0: entered promiscuous mode [ 1602.872171][T18863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.873060][T18863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.880383][T18863] bridge_slave_1: entered allmulticast mode [ 1602.954591][T18863] bridge_slave_1: entered promiscuous mode [ 1603.016764][ T8264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1603.090219][ T8264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1603.096187][ T8264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1603.107055][ T8264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1603.149312][ T8264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1604.261782][T18863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.758343][T18863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.124646][ T8264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1605.209791][ T8264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1605.231563][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1605.250996][ T8264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1605.274700][ T8264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1605.279659][ T8264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1605.432519][ T8264] Bluetooth: hci2: command tx timeout [ 1605.881058][T18863] team0: Port device team_slave_0 added [ 1605.959497][T18863] team0: Port device team_slave_1 added [ 1606.516489][T18863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.516510][T18863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.516541][T18863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.537815][T18863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.537873][T18863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.537953][T18863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.697170][T19015] lo speed is unknown, defaulting to 1000 [ 1607.044468][ T66] hsr_slave_0: left promiscuous mode [ 1607.082498][ T66] hsr_slave_1: left promiscuous mode [ 1607.083830][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.083861][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.144080][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.144132][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.332857][ T66] hsr_slave_0: left promiscuous mode [ 1607.382603][ T66] hsr_slave_1: left promiscuous mode [ 1607.383666][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.383696][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.443823][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.443851][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.512702][ T5606] Bluetooth: hci2: command tx timeout [ 1607.592988][ T5606] Bluetooth: hci3: command tx timeout [ 1607.662584][ T66] hsr_slave_0: left promiscuous mode [ 1607.682619][ T66] hsr_slave_1: left promiscuous mode [ 1607.683495][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.683517][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.733840][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.733873][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.836290][ T66] veth1_macvtap: left promiscuous mode [ 1607.836406][ T66] veth0_macvtap: left promiscuous mode [ 1607.836684][ T66] veth1_vlan: left promiscuous mode [ 1607.836874][ T66] veth0_vlan: left promiscuous mode [ 1607.973374][ T66] veth1_macvtap: left promiscuous mode [ 1607.973486][ T66] veth0_macvtap: left promiscuous mode [ 1607.973754][ T66] veth1_vlan: left promiscuous mode [ 1607.973950][ T66] veth0_vlan: left promiscuous mode [ 1608.103017][ T66] veth1_macvtap: left promiscuous mode [ 1608.103137][ T66] veth0_macvtap: left promiscuous mode [ 1608.103409][ T66] veth1_vlan: left promiscuous mode [ 1608.103553][ T66] veth0_vlan: left promiscuous mode [ 1609.163512][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1609.223375][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1609.593142][ T5606] Bluetooth: hci2: command tx timeout [ 1609.672593][ T5606] Bluetooth: hci3: command tx timeout [ 1610.045189][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1610.104369][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1610.904797][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1610.963507][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1611.209897][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1611.505439][ T32] lo speed is unknown, defaulting to 1000 [ 1611.505480][ T32] syz1: Port: 1 Link DOWN [ 1611.675439][ T5606] Bluetooth: hci2: command tx timeout [ 1611.752855][ T5606] Bluetooth: hci3: command tx timeout [ 1611.962214][ T5708] syz0: Port: 1 Link DOWN [ 1611.964746][ T32] lo speed is unknown, defaulting to 1000 [ 1611.984519][ T9946] smc: removing ib device syz0 [ 1611.988745][T12945] smc: removing ib device syz1 [ 1612.101886][T12945] smbdirect: ib_dev[syz1] removed [ 1612.141691][T18863] hsr_slave_0: entered promiscuous mode [ 1612.149784][T18863] hsr_slave_1: entered promiscuous mode [ 1612.150897][T18863] debugfs: 'hsr0' already exists in 'hsr' [ 1612.150925][T18863] Cannot create hsr debugfs directory [ 1612.206584][ T9946] smbdirect: ib_dev[syz0] removed [ 1612.634546][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1613.881719][ T5606] Bluetooth: hci3: command tx timeout [ 1614.236401][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.236476][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.898443][ T8264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1614.945398][ T8264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1614.947491][ T8264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1614.949290][ T8264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1614.994946][ T8264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1615.487094][T18424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1615.551221][T18424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1616.446016][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1616.517316][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1616.574299][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1616.578602][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1616.598849][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1617.353086][ T8264] Bluetooth: hci4: command tx timeout [ 1617.941865][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1618.872670][ T8264] Bluetooth: hci6: command tx timeout [ 1619.435639][ T8264] Bluetooth: hci4: command tx timeout [ 1619.923130][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1620.952757][ T8264] Bluetooth: hci6: command tx timeout [ 1621.180961][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1621.512457][ T8264] Bluetooth: hci4: command tx timeout [ 1622.418092][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1623.034749][ T8264] Bluetooth: hci6: command tx timeout [ 1623.593152][ T8264] Bluetooth: hci4: command tx timeout [ 1624.025823][T19015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.026004][T19015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.026260][T19015] bridge_slave_0: entered allmulticast mode [ 1624.058762][T19015] bridge_slave_0: entered promiscuous mode [ 1624.138359][T19015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.138543][T19015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.138817][T19015] bridge_slave_1: entered allmulticast mode [ 1624.167156][T19015] bridge_slave_1: entered promiscuous mode [ 1624.397699][T19015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.399670][T19040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.399807][T19040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.400213][T19040] bridge_slave_0: entered allmulticast mode [ 1624.439844][T19040] bridge_slave_0: entered promiscuous mode [ 1624.476148][T19015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.476581][T19040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.476738][T19040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.476952][T19040] bridge_slave_1: entered allmulticast mode [ 1624.479055][T19040] bridge_slave_1: entered promiscuous mode [ 1624.810321][T19015] team0: Port device team_slave_0 added [ 1624.819667][T19040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.859672][T19015] team0: Port device team_slave_1 added [ 1624.873289][T19040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.001876][T18863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1625.038177][T18863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1625.113536][ T8264] Bluetooth: hci6: command tx timeout [ 1625.393517][T18863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1625.441923][T18863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1625.452689][T19015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.452709][T19015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.452757][T19015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1625.527472][T19040] team0: Port device team_slave_0 added [ 1625.553902][T18863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1625.616193][T18863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1625.633811][T19015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1625.633839][T19015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.633872][T19015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.636189][T19040] team0: Port device team_slave_1 added [ 1625.638310][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1625.832144][T18863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1625.867141][T18863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1626.198612][T19040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.198632][T19040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.198670][T19040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.381621][T19040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.381642][T19040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.381675][T19040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.615154][T19015] hsr_slave_0: entered promiscuous mode [ 1626.616752][T19015] hsr_slave_1: entered promiscuous mode [ 1626.617923][T19015] debugfs: 'hsr0' already exists in 'hsr' [ 1626.617961][T19015] Cannot create hsr debugfs directory [ 1626.817595][T19108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.818624][T19108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.818921][T19108] bridge_slave_0: entered allmulticast mode [ 1626.824381][T19108] bridge_slave_0: entered promiscuous mode [ 1626.917598][T19108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.917697][T19108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.917939][T19108] bridge_slave_1: entered allmulticast mode [ 1626.921027][T19108] bridge_slave_1: entered promiscuous mode [ 1626.992670][T19124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.994075][T19124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.994293][T19124] bridge_slave_0: entered allmulticast mode [ 1626.997888][T19124] bridge_slave_0: entered promiscuous mode [ 1627.141276][T19040] hsr_slave_0: entered promiscuous mode [ 1627.153005][T19040] hsr_slave_1: entered promiscuous mode [ 1627.154309][T19040] debugfs: 'hsr0' already exists in 'hsr' [ 1627.154340][T19040] Cannot create hsr debugfs directory [ 1627.154805][T19124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.154942][T19124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.155176][T19124] bridge_slave_1: entered allmulticast mode [ 1627.158277][T19124] bridge_slave_1: entered promiscuous mode [ 1627.611515][T19108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.749691][T19108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.778347][T19124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.838565][T19124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.936815][T19108] team0: Port device team_slave_0 added [ 1627.981481][T19108] team0: Port device team_slave_1 added [ 1628.000948][T19124] team0: Port device team_slave_0 added [ 1628.056228][T19124] team0: Port device team_slave_1 added [ 1628.136759][T19108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1628.136776][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.136801][T19108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1628.291890][T19108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.291912][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.291947][T19108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.362256][T19124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1628.362662][T19124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.362697][T19124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1628.466210][T19124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.466230][T19124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.466261][T19124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.267816][T19108] hsr_slave_0: entered promiscuous mode [ 1629.269425][T19108] hsr_slave_1: entered promiscuous mode [ 1629.270618][T19108] debugfs: 'hsr0' already exists in 'hsr' [ 1629.270646][T19108] Cannot create hsr debugfs directory [ 1629.446359][T19124] hsr_slave_0: entered promiscuous mode [ 1629.447621][T19124] hsr_slave_1: entered promiscuous mode [ 1629.448364][T19124] debugfs: 'hsr0' already exists in 'hsr' [ 1629.448384][T19124] Cannot create hsr debugfs directory [ 1629.535990][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1630.879193][T18863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.072339][T18863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1631.098916][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.099132][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.129748][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.130790][T12954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.800923][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1632.272877][ T66] bridge_slave_1: left allmulticast mode [ 1632.272906][ T66] bridge_slave_1: left promiscuous mode [ 1632.273127][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.454185][ T66] bridge_slave_0: left allmulticast mode [ 1632.454236][ T66] bridge_slave_0: left promiscuous mode [ 1632.454555][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.762708][ T66] bridge_slave_1: left allmulticast mode [ 1632.762739][ T66] bridge_slave_1: left promiscuous mode [ 1632.762969][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.864447][ T66] bridge_slave_0: left allmulticast mode [ 1632.864488][ T66] bridge_slave_0: left promiscuous mode [ 1632.864742][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.073954][ T66] bridge_slave_1: left allmulticast mode [ 1633.073998][ T66] bridge_slave_1: left promiscuous mode [ 1633.074261][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.174818][ T66] bridge_slave_0: left allmulticast mode [ 1633.174850][ T66] bridge_slave_0: left promiscuous mode [ 1633.175065][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.372696][ T66] bridge_slave_1: left allmulticast mode [ 1633.372746][ T66] bridge_slave_1: left promiscuous mode [ 1633.372938][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.483799][ T66] bridge_slave_0: left allmulticast mode [ 1633.483849][ T66] bridge_slave_0: left promiscuous mode [ 1633.484131][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.893321][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.973608][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1634.034483][ T66] bond0 (unregistering): Released all slaves [ 1634.288525][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1634.363395][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1634.445558][ T66] bond0 (unregistering): Released all slaves [ 1634.733422][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1634.813653][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1634.876837][ T66] bond0 (unregistering): Released all slaves [ 1635.233309][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1635.313398][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1635.394683][ T66] bond0 (unregistering): Released all slaves [ 1635.442127][ T5259] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1636.463414][T18863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.692546][ T66] hsr_slave_0: left promiscuous mode [ 1637.733673][ T66] hsr_slave_1: left promiscuous mode [ 1637.736851][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.773401][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.934548][ T66] hsr_slave_0: left promiscuous mode [ 1637.953390][ T66] hsr_slave_1: left promiscuous mode [ 1637.954389][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.003490][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.144371][ T66] hsr_slave_0: left promiscuous mode [ 1638.162449][ T66] hsr_slave_1: left promiscuous mode [ 1638.164684][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.213388][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.352752][ T66] hsr_slave_0: left promiscuous mode [ 1638.376942][ T66] hsr_slave_1: left promiscuous mode [ 1638.379162][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.413560][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.863253][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1638.913376][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1639.463355][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1639.514484][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1640.023338][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1640.076233][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1640.634414][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1640.684908][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1641.126131][T18863] veth0_vlan: entered promiscuous mode [ 1641.212988][T18863] veth1_vlan: entered promiscuous mode [ 1641.295727][T18863] veth0_macvtap: entered promiscuous mode [ 1641.387464][T18863] veth1_macvtap: entered promiscuous mode [ 1641.558433][T18863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.585240][T18863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.636549][ T3196] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.636865][ T3196] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.637140][ T3196] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.637576][ T3196] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.003986][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.004011][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.220676][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.220701][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.541590][T19404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'. [ 1648.417703][T19015] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1648.482252][T19015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1648.484013][T19015] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1648.539593][T19015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1648.541145][T19015] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1648.589633][T19015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1648.591085][T19015] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1648.648490][T19015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1649.233924][T19015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.271365][T19040] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1649.372080][T19040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1649.391596][T19015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.393793][T19040] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1649.465319][T19040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1649.483107][T19040] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1649.537122][T19040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1649.579963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.580243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1649.581095][T19040] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1649.651905][T19040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1649.741821][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.742003][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1649.967761][T12945] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.946213][T19040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.053066][T19040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.155863][T19514] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1732'. [ 1651.155903][T19514] openvswitch: netlink: Flow key attr not present in new flow. [ 1651.253646][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.253868][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.310121][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.310340][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.849108][T19108] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1651.917119][T19108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1651.922630][T19108] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1652.007747][T19108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1652.111702][T19108] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1652.213954][T19536] FAULT_INJECTION: forcing a failure. [ 1652.213954][T19536] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1652.213988][T19536] CPU: 0 UID: 0 PID: 19536 Comm: syz.5.1735 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1652.214010][T19536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1652.214037][T19536] Call Trace: [ 1652.214045][T19536] [ 1652.214054][T19536] dump_stack_lvl+0xe8/0x150 [ 1652.214094][T19536] should_fail_ex+0x467/0x600 [ 1652.214130][T19536] get_futex_key+0x1b3/0x1580 [ 1652.214163][T19536] ? __pfx_get_futex_key+0x10/0x10 [ 1652.214185][T19536] ? debug_object_free+0x29c/0x340 [ 1652.214214][T19536] futex_wake+0x119/0x600 [ 1652.214249][T19536] ? __pfx_futex_wait+0x10/0x10 [ 1652.214284][T19536] ? __pfx_futex_wake+0x10/0x10 [ 1652.214319][T19536] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1652.214354][T19536] ? ktime_get+0x45/0x220 [ 1652.214374][T19536] do_futex+0x458/0x4e0 [ 1652.214401][T19536] ? __pfx_do_futex+0x10/0x10 [ 1652.214422][T19536] ? lockdep_hardirqs_on+0x7a/0x110 [ 1652.214447][T19536] ? ktime_get+0x45/0x220 [ 1652.214467][T19536] __se_sys_futex+0x3a8/0x450 [ 1652.214500][T19536] ? __pfx___se_sys_futex+0x10/0x10 [ 1652.214525][T19536] ? rcu_is_watching+0x15/0xb0 [ 1652.214556][T19536] ? __x64_sys_futex+0x21/0xf0 [ 1652.214579][T19536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.214600][T19536] do_syscall_64+0x174/0x580 [ 1652.214624][T19536] ? trace_irq_disable+0x3b/0x140 [ 1652.214644][T19536] ? clear_bhb_loop+0x40/0x90 [ 1652.214668][T19536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.214688][T19536] RIP: 0033:0x7fb91be9de99 [ 1652.214705][T19536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1652.214722][T19536] RSP: 002b:00007ffda11a1f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1652.214741][T19536] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb91be9de99 [ 1652.214754][T19536] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb91c125fa8 [ 1652.214767][T19536] RBP: 0000000000001e51 R08: 0000000000000005 R09: 0000000000000000 [ 1652.214777][T19536] R10: 00007fb91c125fa0 R11: 0000000000000246 R12: 0000000000000000 [ 1652.214788][T19536] R13: 00007fb91c125fac R14: 00007fb91c125fa8 R15: 00007fb91c125fa0 [ 1652.214815][T19536] [ 1652.535919][T19108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1652.585887][T19108] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1652.687858][T19108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1652.951973][T19015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.534816][T19571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1736'. [ 1653.561450][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1736'. [ 1654.616769][T19124] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1654.686109][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1654.709515][T19124] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1654.783778][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1654.830562][T19124] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1654.891743][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1654.918872][T19124] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1654.951195][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1655.371265][T19015] veth0_vlan: entered promiscuous mode [ 1655.509794][T19015] veth1_vlan: entered promiscuous mode [ 1655.556208][T19108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.701759][T19108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.778152][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.778246][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.869045][T19040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.888425][ T3196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.888547][ T3196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1655.958829][T19015] veth0_macvtap: entered promiscuous mode [ 1656.051435][T19015] veth1_macvtap: entered promiscuous mode [ 1656.234412][T19124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.270365][T19015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.356823][T19015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.469427][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.485797][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.489683][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.571468][T19124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.573668][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.647813][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.647914][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.725421][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.725564][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1657.960363][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.960396][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.281512][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.281537][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.328557][T19040] veth0_vlan: entered promiscuous mode [ 1658.518605][T19040] veth1_vlan: entered promiscuous mode [ 1658.731572][T19040] veth0_macvtap: entered promiscuous mode [ 1658.771963][T19040] veth1_macvtap: entered promiscuous mode [ 1658.877077][T19040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1658.918735][T19040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1658.984768][T12954] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.988136][T12954] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.989604][T12954] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.991124][T12954] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.315822][T19108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1660.480736][T12945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.480761][T12945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.850489][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.850513][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.287481][T19124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1661.571173][T19124] veth0_vlan: entered promiscuous mode [ 1661.627083][T19124] veth1_vlan: entered promiscuous mode [ 1661.836642][T19124] veth0_macvtap: entered promiscuous mode [ 1661.897705][T19124] veth1_macvtap: entered promiscuous mode [ 1662.042769][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1749'. [ 1662.067606][T19124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.123834][T19124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.142159][T19108] veth0_vlan: entered promiscuous mode [ 1662.193770][T19737] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1662.193823][T19737] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1662.193856][T19737] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1662.297900][T19702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.299060][T19737] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1662.341015][T19702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.351705][T19702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.384139][T19702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.410836][T19108] veth1_vlan: entered promiscuous mode [ 1663.341520][T19737] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1663.799642][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.799665][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.824862][T19108] veth0_macvtap: entered promiscuous mode [ 1663.918640][T19108] veth1_macvtap: entered promiscuous mode [ 1664.386226][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.386254][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.655060][T19108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.703152][T19108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.796900][ T67] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.796956][ T67] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.796996][ T67] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.797035][ T67] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.038038][T19771] netlink: 'syz.3.1726': attribute type 48 has an invalid length. [ 1666.846663][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.846684][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.169328][T12954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.169351][T12954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.296641][T19842] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1767'. [ 1669.723133][T19878] netlink: 'syz.5.1778': attribute type 66 has an invalid length. [ 1670.223548][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1781'. [ 1670.646805][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1781'. [ 1672.316927][T16476] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 1672.321521][T19924] ceph: No mds server is up or the cluster is laggy [ 1672.367893][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1792'. [ 1672.612651][T19945] netlink: 'syz.5.1792': attribute type 1 has an invalid length. [ 1672.739476][ T5606] Bluetooth: hci8: command 0x0406 tx timeout [ 1674.319230][T19998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1805'. [ 1675.149618][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1809'. [ 1675.640243][T20042] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 1675.690360][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.690444][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1677.426602][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1677.512234][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1677.517642][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1677.569874][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1677.608085][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1678.235391][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 1679.832436][ T8264] Bluetooth: hci1: command tx timeout [ 1680.357858][T20075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.358026][T20075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.358264][T20075] bridge_slave_0: entered allmulticast mode [ 1680.384774][T20075] bridge_slave_0: entered promiscuous mode [ 1680.400203][T20075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.400315][T20075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.400547][T20075] bridge_slave_1: entered allmulticast mode [ 1680.447724][T20075] bridge_slave_1: entered promiscuous mode [ 1680.544855][T20075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.565881][T20075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.751015][T20075] team0: Port device team_slave_0 added [ 1680.768213][T20075] team0: Port device team_slave_1 added [ 1681.117542][T20075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.117566][T20075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.117601][T20075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.170170][T20075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.170190][T20075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.170222][T20075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.397094][T20075] hsr_slave_0: entered promiscuous mode [ 1681.398277][T20075] hsr_slave_1: entered promiscuous mode [ 1681.399080][T20075] debugfs: 'hsr0' already exists in 'hsr' [ 1681.399100][T20075] Cannot create hsr debugfs directory [ 1681.912604][ T8264] Bluetooth: hci1: command tx timeout [ 1681.994652][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 1681.996008][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 1681.997144][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 1682.193129][T20196] rdma_rxe: rxe_newlink: failed to add veth0 [ 1682.505627][T20198] smc: net device veth0 applied user defined pnetid SYZ0 [ 1683.011509][T20197] infiniband syz1: set active [ 1683.011623][T20197] infiniband syz1: added veth1 [ 1683.040239][T20197] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1683.040283][T20197] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1683.040334][T20197] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1683.137854][T20197] RDS/IB: syz1: added [ 1683.137945][T20197] smc: adding ib device syz1 with port count 1 [ 1683.137975][T20197] smc: ib device syz1 port 1 has no pnetid [ 1683.993510][ T8264] Bluetooth: hci1: command tx timeout [ 1685.468756][T20075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1685.521716][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1685.530192][T20075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1685.561925][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1685.593469][T20075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1685.703736][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1685.705469][T20075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1685.772533][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1686.072497][ T8264] Bluetooth: hci1: command tx timeout [ 1686.138601][T20075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.219682][T20075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.296820][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.296962][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.347657][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.347804][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1687.485485][T20075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.779220][T20075] veth0_vlan: entered promiscuous mode [ 1687.816172][ T5606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1687.860104][ T5606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1687.877776][T20075] veth1_vlan: entered promiscuous mode [ 1687.896901][ T5606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1687.927223][ T5606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1687.931090][ T5606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1688.240829][T20075] veth0_macvtap: entered promiscuous mode [ 1688.285804][T20075] veth1_macvtap: entered promiscuous mode [ 1688.449722][T20075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.478168][T20075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.574296][T19702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.574836][T19702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.575514][T19702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.576231][T19702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.841809][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.841832][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.151666][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.151689][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.232642][ T8264] Bluetooth: hci7: command tx timeout [ 1691.223317][T20326] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 1692.248635][T20279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.248858][T20279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.249206][T20279] bridge_slave_0: entered allmulticast mode [ 1692.267416][T20279] bridge_slave_0: entered promiscuous mode [ 1692.281639][T20279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.281970][T20279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.282990][T20279] bridge_slave_1: entered allmulticast mode [ 1692.296568][T20279] bridge_slave_1: entered promiscuous mode [ 1692.313942][ T5606] Bluetooth: hci7: command tx timeout [ 1692.437849][T20279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.452097][T20279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1692.541534][T20279] team0: Port device team_slave_0 added [ 1692.551959][T20279] team0: Port device team_slave_1 added [ 1692.840010][T20279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1692.840031][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1692.840064][T20279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1692.844995][T20279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1692.845015][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1692.845047][T20279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.950032][T20279] hsr_slave_0: entered promiscuous mode [ 1692.951736][T20279] hsr_slave_1: entered promiscuous mode [ 1693.085241][T20279] debugfs: 'hsr0' already exists in 'hsr' [ 1693.085273][T20279] Cannot create hsr debugfs directory [ 1694.392593][ T8264] Bluetooth: hci7: command tx timeout [ 1694.651409][ T5606] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1694.698674][ T5606] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1694.740020][ T5606] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1694.755393][ T5606] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1694.765073][ T5606] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1696.472570][ T5606] Bluetooth: hci7: command tx timeout [ 1696.495493][T20384] 9pnet: p9_errstr2errno: server reported unknown error VÔ÷£ä ½Xe) [ 1696.966102][ T5606] Bluetooth: hci9: command tx timeout [ 1697.297349][ T8264] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1697.351111][ T8264] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1697.377908][ T8264] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1697.439539][ T8264] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1697.440382][ T8264] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1699.181329][ T5606] Bluetooth: hci9: command tx timeout [ 1699.672525][ T5606] Bluetooth: hci10: command tx timeout [ 1701.202531][ T5606] Bluetooth: hci9: command tx timeout [ 1701.288009][ T39] INFO: task syz.4.1722:18365 blocked for more than 143 seconds. [ 1701.288039][ T39] Not tainted syzkaller #0 [ 1701.288051][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1701.288062][ T39] task:syz.4.1722 state:D stack:28424 pid:18365 tgid:18362 ppid:16848 task_flags:0x400040 flags:0x00080002 [ 1701.288144][ T39] Call Trace: [ 1701.288153][ T39] [ 1701.288168][ T39] __schedule+0x16dc/0x5500 [ 1701.288210][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1701.288273][ T39] ? arch_scale_cpu_capacity+0x18/0xb0 [ 1701.288408][ T39] ? __pfx___schedule+0x10/0x10 [ 1701.288432][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1701.288487][ T39] rt_mutex_schedule+0x76/0xf0 [ 1701.288515][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1701.288515][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1701.288562][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1701.288603][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1701.288643][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1701.288682][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1701.288732][ T39] ? write_threads+0x3a0/0x5a0 [ 1701.288774][ T39] ? write_threads+0x3a0/0x5a0 [ 1701.288815][ T39] ? write_threads+0x3a0/0x5a0 [ 1701.288848][ T39] mutex_lock_nested+0x168/0x1d0 [ 1701.288891][ T39] write_threads+0x3a0/0x5a0 [ 1701.288925][ T39] ? __might_fault+0xaf/0x130 [ 1701.288965][ T39] ? __pfx_write_threads+0x10/0x10 [ 1701.289030][ T39] ? _copy_from_user+0x94/0xb0 [ 1701.289061][ T39] ? simple_transaction_get+0x130/0x170 [ 1701.289093][ T39] nfsctl_transaction_write+0x112/0x160 [ 1701.289131][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1701.289169][ T39] vfs_write+0x29f/0xbb0 [ 1701.289219][ T39] ? __pfx_vfs_write+0x10/0x10 [ 1701.289294][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1701.289326][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 1701.289356][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1701.289385][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 1701.289420][ T39] ? fdget_pos+0x252/0x320 [ 1701.289481][ T39] ksys_write+0x156/0x270 [ 1701.289515][ T39] ? __pfx_ksys_write+0x10/0x10 [ 1701.289556][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.289583][ T39] do_syscall_64+0x174/0x580 [ 1701.289619][ T39] ? trace_irq_disable+0x3b/0x140 [ 1701.289645][ T39] ? clear_bhb_loop+0x40/0x90 [ 1701.289674][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.289698][ T39] RIP: 0033:0x7f96ea9ade99 [ 1701.289720][ T39] RSP: 002b:00007f96e8be5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1701.289745][ T39] RAX: ffffffffffffffda RBX: 00007f96eac36090 RCX: 00007f96ea9ade99 [ 1701.289762][ T39] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1701.289777][ T39] RBP: 00007f96eaa43eaf R08: 0000000000000000 R09: 0000000000000000 [ 1701.289792][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.289806][ T39] R13: 00007f96eac36128 R14: 00007f96eac36090 R15: 00007ffe831f4b58 [ 1701.289843][ T39] [ 1701.289924][ T39] [ 1701.289924][ T39] Showing all locks held in the system: [ 1701.290158][ T39] 1 lock held by khungtaskd/39: [ 1701.290173][ T39] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1701.290295][ T39] 2 locks held by kworker/u8:7/194: [ 1701.290340][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1701.290402][ T39] #1: ffffc90003987c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1701.290493][ T39] 2 locks held by getty/5353: [ 1701.290523][ T39] #0: ffff888036cd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1701.290620][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1701.290714][ T39] 3 locks held by kworker/u8:3/9955: [ 1701.290728][ T39] #0: ffff888032267138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1701.290789][ T39] #1: ffffc90005087c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1701.290848][ T39] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 1701.290908][ T39] 3 locks held by syz.4.1722/18363: [ 1701.290921][ T39] #0: ffff8880117bad28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.290985][ T39] #1: ffff88806684c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.291052][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1701.291117][ T39] 3 locks held by syz.4.1722/18365: [ 1701.291131][ T39] #0: ffff8880117bb328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.291185][ T39] #1: ffff88806684c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.291250][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 1701.291316][ T39] 3 locks held by syz.8.1727/18992: [ 1701.291330][ T39] #0: ffff8880256ec528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.291387][ T39] #1: ffff888035088500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.291451][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1701.291514][ T39] 3 locks held by syz.8.1727/18993: [ 1701.291528][ T39] #0: ffff8880650bed28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.291589][ T39] #1: ffff888035088500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.291664][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 1701.291728][ T39] 3 locks held by syz.8.1727/18994: [ 1701.291742][ T39] #0: ffff8880650beb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.291797][ T39] #1: ffff888035088500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.291860][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1701.291923][ T39] 3 locks held by syz.8.1727/18995: [ 1701.291936][ T39] #0: ffff8880650be928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.291999][ T39] #1: ffff888035088500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.292062][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 1701.292133][ T39] 2 locks held by syz-executor/19015: [ 1701.292148][ T39] #0: ffff8880652620d0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1701.292216][ T39] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1701.292434][ T39] 3 locks held by syz.7.1724/19721: [ 1701.292453][ T39] #0: ffff88801179d928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.292511][ T39] #1: ffff888064e1a500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.292577][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1701.292641][ T39] 3 locks held by syz.7.1724/19726: [ 1701.292655][ T39] #0: ffff888050549528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.292711][ T39] #1: ffff888064e1a500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.292775][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1701.292855][ T39] 3 locks held by syz.7.1724/19727: [ 1701.292868][ T39] #0: ffff88803f1f3128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.292923][ T39] #1: ffff888064e1a500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.292993][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 1701.293058][ T39] 3 locks held by syz.3.1790/19943: [ 1701.293072][ T39] #0: ffff888034720728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.293127][ T39] #1: ffff88803c7ea500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.293243][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1701.293313][ T39] 3 locks held by syz.3.1790/19947: [ 1701.293327][ T39] #0: ffff88805071e328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.293383][ T39] #1: ffff88803c7ea500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.293453][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1701.293516][ T39] 3 locks held by syz.3.1790/19951: [ 1701.293530][ T39] #0: ffff88805071ed28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.293593][ T39] #1: ffff88803c7ea500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.293690][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 1701.293757][ T39] 3 locks held by syz.9.1836/20181: [ 1701.293770][ T39] #0: ffff888058073b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.293825][ T39] #1: ffff88806d32c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.293889][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1701.293952][ T39] 3 locks held by syz.9.1836/20182: [ 1701.293972][ T39] #0: ffff888058073328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.402422][ T39] #1: ffff88806d32c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.402477][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1701.402531][ T39] 3 locks held by syz.9.1836/20184: [ 1701.402542][ T39] #0: ffff888028f70928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1701.402585][ T39] #1: ffff88806d32c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1701.402639][ T39] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 1701.402692][ T39] 7 locks held by syz-executor/20279: [ 1701.402705][ T39] 2 locks held by syz-executor/20370: [ 1701.402716][ T39] 1 lock held by syz.5.1858/20410: [ 1701.402727][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1701.402864][ T39] 2 locks held by modprobe/20441: [ 1701.402875][ T39] 3 locks held by sed/20449: [ 1701.402888][ T39] [ 1701.402893][ T39] ============================================= [ 1701.402893][ T39] [ 1701.402911][ T39] NMI backtrace for cpu 1 [ 1701.402926][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1701.402946][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1701.402958][ T39] Call Trace: [ 1701.402966][ T39] [ 1701.402975][ T39] dump_stack_lvl+0xe8/0x150 [ 1701.403011][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1701.403031][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1701.403132][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1701.403165][ T39] sys_info+0x135/0x170 [ 1701.403191][ T39] watchdog+0xfd7/0x1030 [ 1701.403215][ T39] ? watchdog+0x1c7/0x1030 [ 1701.403238][ T39] kthread+0x388/0x470 [ 1701.403268][ T39] ? __pfx_watchdog+0x10/0x10 [ 1701.403283][ T39] ? __pfx_kthread+0x10/0x10 [ 1701.403313][ T39] ret_from_fork+0x514/0xb70 [ 1701.403349][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1701.403378][ T39] ? __switch_to+0xc89/0x1420 [ 1701.403406][ T39] ? __pfx_kthread+0x10/0x10 [ 1701.403434][ T39] ret_from_fork_asm+0x1a/0x30 [ 1701.403465][ T39] [ 1701.403481][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1701.403515][ C0] NMI backtrace for cpu 0 [ 1701.403533][ C0] CPU: 0 UID: 0 PID: 19702 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1701.403556][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1701.403570][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 1701.403597][ C0] RIP: 0010:__lock_acquire+0x17a5/0x2ce0 [ 1701.403628][ C0] Code: 00 00 0f 83 84 01 00 00 4e 8b 3c e5 a0 29 a6 95 ff c0 25 ff 0f 00 00 89 05 48 37 05 14 4d 85 ff 0f 84 ac 01 00 00 49 8b 47 10 <48> 85 c0 0f 84 38 0d 00 00 8b 0d 34 37 05 14 39 48 5c 0f 84 6a ff [ 1701.403645][ C0] RSP: 0018:ffffc90004a570e0 EFLAGS: 00000086 [ 1701.403661][ C0] RAX: ffffffff93480460 RBX: 00000000000003cd RCX: ffffffff964299e8 [ 1701.403676][ C0] RDX: ffffffff9637bc48 RSI: ffff888058ff6a70 RDI: 00000000000003cd [ 1701.403689][ C0] RBP: 0b43e3f6b8ff9969 R08: ffffc90004a570a8 R09: 0000000000000020 [ 1701.403703][ C0] R10: 0000000000000000 R11: ffffffff81a1c580 R12: 00000000000005bb [ 1701.403716][ C0] R13: ffff888058ff6a70 R14: ffff888058ff5d00 R15: ffffffff964299e8 [ 1701.403732][ C0] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 1701.403748][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1701.403761][ C0] CR2: 00007fe61e6261fc CR3: 000000004fca8000 CR4: 00000000003526f0 [ 1701.403778][ C0] Call Trace: [ 1701.403786][ C0] [ 1701.403806][ C0] ? ktime_get+0x45/0x220 [ 1701.403825][ C0] lock_acquire+0x106/0x350 [ 1701.403844][ C0] ? ktime_get+0x45/0x220 [ 1701.403866][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1701.403906][ C0] ? ktime_get+0x45/0x220 [ 1701.403923][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 1701.403942][ C0] ? ktime_get+0x45/0x220 [ 1701.403959][ C0] ktime_get+0x45/0x220 [ 1701.403977][ C0] clockevents_program_event+0x290/0x630 [ 1701.404006][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1701.404033][ C0] ? tick_program_event+0x8f/0x120 [ 1701.404121][ C0] hrtimer_start_range_ns+0x1ab/0x3f0 [ 1701.404150][ C0] enqueue_task+0x75/0x410 [ 1701.404178][ C0] sched_change_end+0x213/0x600 [ 1701.404209][ C0] __schedule+0x1879/0x5500 [ 1701.404231][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1701.404259][ C0] ? lapic_next_event+0x11/0x20 [ 1701.404279][ C0] ? clockevents_program_event+0x491/0x630 [ 1701.404303][ C0] ? __hrtimer_rearm_deferred+0x99/0x430 [ 1701.404337][ C0] ? __pfx___schedule+0x10/0x10 [ 1701.404357][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1701.404380][ C0] ? irqentry_exit+0x218/0x8f0 [ 1701.404404][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1701.404429][ C0] preempt_schedule_common+0x82/0xd0 [ 1701.404451][ C0] preempt_schedule_thunk+0x16/0x40 [ 1701.404477][ C0] _raw_spin_unlock_irqrestore+0x74/0x80 [ 1701.404500][ C0] fill_pool+0x405/0x610 [ 1701.404522][ C0] ? __pfx_fill_pool+0x10/0x10 [ 1701.404542][ C0] ? wg_cookie_add_mac_to_packet+0x9e/0x1a0 [ 1701.404653][ C0] ? debug_objects_fill_pool+0x3b/0x80 [ 1701.404672][ C0] ? debug_objects_fill_pool+0x3b/0x80 [ 1701.404692][ C0] debug_objects_fill_pool+0x63/0x80 [ 1701.404710][ C0] debug_object_assert_init+0x65/0x310 [ 1701.404733][ C0] ? wg_timers_any_authenticated_packet_traversal+0x82/0x2f0 [ 1701.404755][ C0] __mod_timer+0x4b/0xf10 [ 1701.404774][ C0] ? rcu_is_watching+0x15/0xb0 [ 1701.404797][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1701.404822][ C0] ? wg_timers_any_authenticated_packet_traversal+0x82/0x2f0 [ 1701.404842][ C0] ? wg_timers_any_authenticated_packet_traversal+0x82/0x2f0 [ 1701.404864][ C0] wg_timers_any_authenticated_packet_traversal+0x1fc/0x2f0 [ 1701.404887][ C0] wg_packet_handshake_send_worker+0x1b2/0x370 [ 1701.404910][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1701.404941][ C0] ? rcu_is_watching+0x15/0xb0 [ 1701.404965][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1701.404989][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1701.405025][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1701.405051][ C0] ? assign_work+0x3cf/0x5d0 [ 1701.405075][ C0] worker_thread+0xa47/0xfb0 [ 1701.405105][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1701.405136][ C0] kthread+0x388/0x470 [ 1701.405164][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1701.405187][ C0] ? __pfx_kthread+0x10/0x10 [ 1701.405215][ C0] ret_from_fork+0x514/0xb70 [ 1701.405247][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1701.405276][ C0] ? __switch_to+0xc89/0x1420 [ 1701.405302][ C0] ? __pfx_kthread+0x10/0x10 [ 1701.405331][ C0] ret_from_fork_asm+0x1a/0x30 [ 1701.405357][ C0] [ 1701.423198][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1701.423316][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1701.423393][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1701.423434][ T39] Call Trace: [ 1701.423457][ T39] [ 1701.423481][ T39] vpanic+0x56c/0xa60 [ 1701.423560][ T39] ? __pfx___schedule+0x10/0x10 [ 1701.423628][ T39] ? __pfx_vpanic+0x10/0x10 [ 1701.423713][ T39] panic+0xc5/0xd0 [ 1701.423748][ T39] ? __pfx_panic+0x10/0x10 [ 1701.423796][ T39] ? preempt_schedule_common+0x82/0xd0 [ 1701.423871][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1701.423940][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1701.424008][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1701.424115][ T39] watchdog+0x1030/0x1030 [ 1701.424219][ T39] ? watchdog+0x1c7/0x1030 [ 1701.424295][ T39] kthread+0x388/0x470 [ 1701.424390][ T39] ? __pfx_watchdog+0x10/0x10 [ 1701.424443][ T39] ? __pfx_kthread+0x10/0x10 [ 1701.424498][ T39] ret_from_fork+0x514/0xb70 [ 1701.424535][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1701.424571][ T39] ? __switch_to+0xc89/0x1420 [ 1701.424603][ T39] ? __pfx_kthread+0x10/0x10 [ 1701.424639][ T39] ret_from_fork_asm+0x1a/0x30 [ 1701.424680][ T39] [ 1701.425300][ T39] Kernel Offset: disabled