last executing test programs: 4.299655023s ago: executing program 1 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x2080, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000200)={0x2, 0x2080, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303}, '12345678', '1234567812345678', '1234', '00000000'}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, '12345678', '1234567812345678', '1234', '00000000'}, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='5\n', 0x2) sendto(r2, &(0x7f0000000600)="15030300020100", 0x7, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 3.18223601s ago: executing program 1 (id=17): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400010301000000000000002c000000000000001800"/36], 0x24}}, 0x0) 2.909345979s ago: executing program 1 (id=18): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x6c}, {@in6=@remote, 0x1234, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'ip6_vti0\x00'}) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x0, @remote, @local, [], "12340000"}}}}}}}, 0x0) 2.785419283s ago: executing program 5 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0\x00', 0x2) write(r3, &(0x7f0000000280)='100\x00', 0x4) write(r4, &(0x7f00000001c0)='100\x00', 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}}) 2.658796893s ago: executing program 2 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBMARK={0x8, 0x1}]}]}, 0x44}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0xd, 0x0, &(0x7f0000002400)={0x2, 0x4e20, @loopback}, 0x10) 2.573556292s ago: executing program 0 (id=23): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10 1 1\x00', 0x7) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7117}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7217}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7317}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7417}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7517}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7617}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7717}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7817}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7917}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7a17}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@dellink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 2.439470784s ago: executing program 2 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x1f, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="180001801400248004000100"]}, 0x2c}}, 0x0) 2.258102255s ago: executing program 1 (id=26): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x1}], 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="0100000800000000", 0x8}], 0x1}, 0x0) close(r0) close(r1) 2.19969964s ago: executing program 2 (id=27): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'ip6_vti0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@remote, 0x1234, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x40, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x20, 0x6c, 0x40, @local, @remote, [], "0000123400000000"}}}}}}}, 0x0) 1.998665283s ago: executing program 1 (id=28): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:20000:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000200)="636570682076320a001000ffffffffffffffff000000000000000001011900000001000000000000000000000000000000000000000000010000000001000000000200007f00000100"/84, 0x54) 1.843304459s ago: executing program 4 (id=29): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x3, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x3, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x3, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x3, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x3, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x3, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x3, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x3, 0x1, 0x3}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r8, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 1.809781025s ago: executing program 5 (id=30): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="24000000180001000000000000000000020100000b000100706e657431000000070003006c6f0000", 0x14}], 0x1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000400)=@in={0x2, 0x1f90, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r2, &(0x7f0000000500)=@in={0x2, 0x1f90, @loopback}, 0x10) 1.736920111s ago: executing program 2 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) syz_emit_ethernet(0x7fa, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7ec, 0x1234, 0x4000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x7d8, 0x0, @opaque='\x00'/2000}}}}}, 0x0) syz_emit_ethernet(0x7fa, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7ec, 0x1235, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x7d8, 0x0, @opaque='\x00'/2000}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x1236, 0x4000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x6c, 0x0, @opaque='\x00'/100}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x1237, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x6c, 0x0, @opaque='\x00'/100}}}}}, 0x0) 1.635234182s ago: executing program 5 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x10, 0x0, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@ipv4_newaddr={0x14, 0x0, 0x1, 0x0, 0x0, {0x2, 0x8}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@setlink={0x13, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x30}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r3, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) 1.560860853s ago: executing program 3 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@ipv4_newroute={0x48, 0x18, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @remote={0xa, 0x0, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x48}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000500)="1234567890", 0xa, 0x0, &(0x7f0000000600)={0x2, 0x1234, @remote={0xa, 0x0, 0x0, 0x1}}, 0x10) 1.552884571s ago: executing program 4 (id=34): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000080)='espintcp\x00', 0x9) write(r1, &(0x7f0000000100)='\x00\n\x00\x00\x00\x00\x00\x00\x00\x00', 0xa) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000300), 0x100) 1.435290225s ago: executing program 2 (id=35): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000440)='ceph v027\x00'/403, 0x193) write(r1, &(0x7f0000000600)="01ffffffffffffffff0000000000000000000000000000000001000000", 0x1d) write(r1, &(0x7f0000000640)="01070100000000000000000000000000000400000000000000000000001000000000000100000000000000000000009be7d6b4", 0x33) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 1.39468153s ago: executing program 5 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./rpc_pipefs\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/cache/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 testuser\n\x00', 0x77) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = socket(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @loopback}, 0x10) write(r2, &(0x7f0000000700)="800000c8123456780000000000000002000186a300000003000000000000000600000034000000010000000000000001000000030000000a7465737468616e646c650000000000060000001c040400ffffffffff00000000000000010000000000000000000000000000002c0000000100"/152, 0x98) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 1.329802928s ago: executing program 0 (id=37): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='hello', 0x5}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00)=""/100, 0x64}], 0x1, &(0x7f0000000c00)=""/100, 0x64}, 0x0) sendmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000f00)='reply1', 0x6}], 0x1, &(0x7f0000001000)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x8000) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)='reply2', 0x6}], 0x1, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001700)=""/100, 0x64}], 0x1, &(0x7f0000001800)=""/100, 0x64}, 0x0) recvmsg(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001b00)=""/100, 0x64}], 0x1, &(0x7f0000001c00)=""/100, 0x64}, 0x0) 1.261945235s ago: executing program 3 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "0100000000000000"}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "0100000000000000"}]}]}, 0x58}}, 0x0) 1.198307848s ago: executing program 4 (id=39): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000100"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000200"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000300"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000400"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000500"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000600"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000700"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000800"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000900"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000a00"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000b00"/40], 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000100000000000000000001000000010000000c00"/40], 0x28}}, 0x0) 956.921176ms ago: executing program 0 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x34}}, 0x0) 924.609122ms ago: executing program 4 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x0, 0x1}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x26) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r3, &(0x7f0000003000), 0x200) read(r3, &(0x7f0000004000), 0x10) 920.255307ms ago: executing program 3 (id=42): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2, 'syz0\x00'}, &(0x7f0000000200)=0x28) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) 869.235648ms ago: executing program 1 (id=43): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x8914, &(0x7f0000000040)="6574683000000000000000000000000001000000") ioctl(r0, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) close(r0) 635.977831ms ago: executing program 3 (id=44): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x1000, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = dup(r0) write(r0, &(0x7f0000001000)='\x00'/100000, 0x186a0) write(r0, &(0x7f0000001000)='\x00'/100000, 0x186a0) write(r0, &(0x7f0000001000)='\x00'/100000, 0x186a0) (async) close(r0) close(r1) 580.071202ms ago: executing program 4 (id=45): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) shutdown(r2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 571.950425ms ago: executing program 0 (id=46): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400010301000000000000002c000000000000001800"/36], 0x24}}, 0x0) 424.877898ms ago: executing program 5 (id=47): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x2710, 0x4e20, 0xa}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000500)="001122334455", 0x6, 0x0, &(0x7f0000000600)={0x2, 0x1f90, @loopback}, 0x10) 406.407743ms ago: executing program 3 (id=48): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c00170004000100"]}, 0x68}}, 0x0) 256.838052ms ago: executing program 0 (id=49): r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r2, &(0x7f0000000200), 0x10) lseek(r2, 0x1, 0x0) read(r2, &(0x7f0000000300), 0x1000) 247.434224ms ago: executing program 2 (id=50): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffffffffffffffffffff00"/30, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 241.653597ms ago: executing program 4 (id=51): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) sendto(r2, &(0x7f0000000200)='A', 0x1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x8, &(0x7f00000000c0), &(0x7f0000000400)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000800)=""/10, 0xa, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000a00)=""/10, 0xa, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000b00)=""/10, 0xa, 0x0, 0x0, 0x0) 151.580563ms ago: executing program 5 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}}, 0xd8}}, 0x0) 59.834405ms ago: executing program 3 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, 0x10, 0x1, 0x0, 0x0, {0x1f}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x2, 0x0, 0x0, @str='eth0\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x10}, @typed={0x8, 0x4, 0x0, 0x0, @u32}, @typed={0x8, 0x6, 0x0, 0x0, @u32}]}, 0x44}}, 0x0) 0s ago: executing program 0 (id=54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000800)="00112233445566778899aabb0800", 0xe, 0x0, &(0x7f0000000900)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 80.003126][ T5606] cgroup: Unknown subsys name 'net' [ 80.105898][ T5606] cgroup: Unknown subsys name 'cpuset' [ 80.115203][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.686332][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.352807][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.363920][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.379521][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.388842][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.397036][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.405723][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.419663][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.427143][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.436728][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.447575][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.448241][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.458326][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.464902][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.471618][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.482360][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.486874][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.498444][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.499890][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.514729][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.515026][ T4935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.524048][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.537394][ T4935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.544656][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.550816][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.552763][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.560086][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.566739][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.585786][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.593057][ T4935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.601451][ T4935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.975825][ T29] cfg80211: failed to load regulatory.db [ 86.531998][ T4935] Bluetooth: hci0: command tx timeout [ 86.615639][ T4935] Bluetooth: hci2: command tx timeout [ 86.615686][ T5639] Bluetooth: hci3: command tx timeout [ 86.622421][ T5627] Bluetooth: hci1: command tx timeout [ 86.670404][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.688504][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.695791][ T5627] Bluetooth: hci5: command tx timeout [ 86.702692][ T4935] Bluetooth: hci4: command tx timeout [ 86.705184][ T5635] bridge_slave_0: entered allmulticast mode [ 86.716878][ T5635] bridge_slave_0: entered promiscuous mode [ 86.769238][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.776583][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.784206][ T5635] bridge_slave_1: entered allmulticast mode [ 86.791914][ T5635] bridge_slave_1: entered promiscuous mode [ 87.026884][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.060893][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.068180][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.075529][ T5629] bridge_slave_0: entered allmulticast mode [ 87.083626][ T5629] bridge_slave_0: entered promiscuous mode [ 87.107209][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.144900][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.152165][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.159522][ T5629] bridge_slave_1: entered allmulticast mode [ 87.167148][ T5629] bridge_slave_1: entered promiscuous mode [ 87.315133][ T5635] team0: Port device team_slave_0 added [ 87.321149][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.328458][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.336057][ T5636] bridge_slave_0: entered allmulticast mode [ 87.343777][ T5636] bridge_slave_0: entered promiscuous mode [ 87.374739][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.393745][ T5635] team0: Port device team_slave_1 added [ 87.412758][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.419932][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.427657][ T5636] bridge_slave_1: entered allmulticast mode [ 87.436102][ T5636] bridge_slave_1: entered promiscuous mode [ 87.452511][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.459690][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.467904][ T5626] bridge_slave_0: entered allmulticast mode [ 87.475558][ T5626] bridge_slave_0: entered promiscuous mode [ 87.486626][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.546276][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.553778][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.561462][ T5626] bridge_slave_1: entered allmulticast mode [ 87.569012][ T5626] bridge_slave_1: entered promiscuous mode [ 87.602608][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.609706][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.635776][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.700064][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.707399][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.715022][ T5638] bridge_slave_0: entered allmulticast mode [ 87.722685][ T5638] bridge_slave_0: entered promiscuous mode [ 87.731265][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.738252][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.764519][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.778853][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.788405][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.795949][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.803254][ T5625] bridge_slave_0: entered allmulticast mode [ 87.811195][ T5625] bridge_slave_0: entered promiscuous mode [ 87.832641][ T5629] team0: Port device team_slave_0 added [ 87.841875][ T5629] team0: Port device team_slave_1 added [ 87.847683][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.855087][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.862582][ T5638] bridge_slave_1: entered allmulticast mode [ 87.870121][ T5638] bridge_slave_1: entered promiscuous mode [ 87.889529][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.899515][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.906751][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.914050][ T5625] bridge_slave_1: entered allmulticast mode [ 87.921799][ T5625] bridge_slave_1: entered promiscuous mode [ 87.932818][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.011046][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.048760][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.096715][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.104098][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.130151][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.157770][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.169544][ T5636] team0: Port device team_slave_0 added [ 88.179510][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.201865][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.208966][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.235413][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.253798][ T5635] hsr_slave_0: entered promiscuous mode [ 88.260589][ T5635] hsr_slave_1: entered promiscuous mode [ 88.281983][ T5636] team0: Port device team_slave_1 added [ 88.290088][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.314708][ T5626] team0: Port device team_slave_0 added [ 88.378703][ T5626] team0: Port device team_slave_1 added [ 88.412634][ T5638] team0: Port device team_slave_0 added [ 88.433552][ T5625] team0: Port device team_slave_0 added [ 88.476810][ T5638] team0: Port device team_slave_1 added [ 88.483772][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.490846][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.516832][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.530595][ T5625] team0: Port device team_slave_1 added [ 88.550092][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.557132][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.583304][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.610703][ T4935] Bluetooth: hci0: command tx timeout [ 88.623612][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.630746][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.656991][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.691489][ T4935] Bluetooth: hci3: command tx timeout [ 88.700696][ T4935] Bluetooth: hci1: command tx timeout [ 88.706809][ T5627] Bluetooth: hci2: command tx timeout [ 88.711114][ T5629] hsr_slave_0: entered promiscuous mode [ 88.718898][ T5629] hsr_slave_1: entered promiscuous mode [ 88.725486][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 88.731668][ T5629] Cannot create hsr debugfs directory [ 88.738685][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.745771][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.771742][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.780895][ T5627] Bluetooth: hci5: command tx timeout [ 88.788052][ T4935] Bluetooth: hci4: command tx timeout [ 88.824102][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.831511][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.858153][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.873113][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.880117][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.906160][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.926937][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.934471][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.960579][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.973576][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.980579][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.006603][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.193614][ T5626] hsr_slave_0: entered promiscuous mode [ 89.200068][ T5626] hsr_slave_1: entered promiscuous mode [ 89.206406][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 89.212281][ T5626] Cannot create hsr debugfs directory [ 89.292525][ T5636] hsr_slave_0: entered promiscuous mode [ 89.298978][ T5636] hsr_slave_1: entered promiscuous mode [ 89.305490][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 89.311646][ T5636] Cannot create hsr debugfs directory [ 89.369716][ T5625] hsr_slave_0: entered promiscuous mode [ 89.376413][ T5625] hsr_slave_1: entered promiscuous mode [ 89.382659][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 89.388367][ T5625] Cannot create hsr debugfs directory [ 89.401819][ T5638] hsr_slave_0: entered promiscuous mode [ 89.408227][ T5638] hsr_slave_1: entered promiscuous mode [ 89.414470][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 89.420179][ T5638] Cannot create hsr debugfs directory [ 90.006888][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.019731][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.027905][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.037448][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.045815][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.056675][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.086919][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.097426][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.179057][ T5629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.194679][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.203188][ T5629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.214647][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.222897][ T5629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.233687][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.242208][ T5629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.253416][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.344993][ T5626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.355884][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.364670][ T5626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.375069][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.385961][ T5626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.396073][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.405631][ T5626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.415944][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.537679][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.549493][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.558658][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.568992][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.588116][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.598576][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.607299][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.617205][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.653468][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.701597][ T5627] Bluetooth: hci0: command tx timeout [ 90.760380][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.767831][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.779077][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.781687][ T4935] Bluetooth: hci2: command tx timeout [ 90.786249][ T5639] Bluetooth: hci3: command tx timeout [ 90.794638][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.797159][ T5627] Bluetooth: hci1: command tx timeout [ 90.812752][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.830330][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.840252][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.851667][ T5627] Bluetooth: hci5: command tx timeout [ 90.852812][ T5639] Bluetooth: hci4: command tx timeout [ 90.858186][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.875130][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.929581][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.937076][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.952689][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.959834][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.993862][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.056179][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.066955][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.086117][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.097507][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.105846][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.115487][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.128378][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.144195][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.155513][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.166964][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.217995][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.225169][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.249987][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.257185][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.286271][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.343985][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.351193][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.394963][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.402193][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.489892][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.644216][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.666050][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.715377][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.722581][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.759695][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.766910][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.849617][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.902909][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.910141][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.960322][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.967520][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.026105][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.190238][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.246616][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.253849][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.330574][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.337764][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.406934][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.723502][ T5635] veth0_vlan: entered promiscuous mode [ 92.758844][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.780637][ T5639] Bluetooth: hci0: command tx timeout [ 92.850872][ T5639] Bluetooth: hci1: command tx timeout [ 92.861249][ T5639] Bluetooth: hci3: command tx timeout [ 92.862612][ T5627] Bluetooth: hci2: command tx timeout [ 92.884407][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.905191][ T5635] veth1_vlan: entered promiscuous mode [ 92.932382][ T5627] Bluetooth: hci4: command tx timeout [ 92.932401][ T5639] Bluetooth: hci5: command tx timeout [ 93.143542][ T5635] veth0_macvtap: entered promiscuous mode [ 93.202425][ T5635] veth1_macvtap: entered promiscuous mode [ 93.349591][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.415871][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.482114][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.669496][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.702573][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.809450][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.865643][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.957714][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.986132][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.087804][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.101540][ T5626] veth0_vlan: entered promiscuous mode [ 94.118806][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.129304][ T5626] veth1_vlan: entered promiscuous mode [ 94.136549][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.180866][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.237153][ T5638] veth0_vlan: entered promiscuous mode [ 94.244129][ T5635] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.257549][ T5638] veth1_vlan: entered promiscuous mode [ 94.267505][ T5625] veth0_vlan: entered promiscuous mode [ 94.283867][ T5629] veth0_vlan: entered promiscuous mode [ 94.333150][ T5625] veth1_vlan: entered promiscuous mode [ 94.358025][ T5626] veth0_macvtap: entered promiscuous mode [ 94.381643][ T5629] veth1_vlan: entered promiscuous mode [ 94.418441][ T5626] veth1_macvtap: entered promiscuous mode [ 94.432977][ T5636] veth0_vlan: entered promiscuous mode [ 94.457303][ T5636] veth1_vlan: entered promiscuous mode [ 94.500079][ T5638] veth0_macvtap: entered promiscuous mode [ 94.538735][ T5625] veth0_macvtap: entered promiscuous mode [ 94.557587][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.577028][ T5625] veth1_macvtap: entered promiscuous mode [ 94.593228][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.609510][ T5638] veth1_macvtap: entered promiscuous mode [ 94.654948][ T5629] veth0_macvtap: entered promiscuous mode [ 94.669777][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.698237][ T5629] veth1_macvtap: entered promiscuous mode [ 94.720451][ T5636] veth0_macvtap: entered promiscuous mode [ 94.733749][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.747545][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.755706][ T5636] veth1_macvtap: entered promiscuous mode [ 94.779301][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.797655][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.815047][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.831360][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.849746][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.871255][ T139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.893487][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.943665][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.960917][ T139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.036135][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.048179][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.115927][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.124080][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.180172][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.189423][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.258692][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.282947][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.333690][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.345168][ T139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.362225][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.372689][ T139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.539801][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.565198][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.590160][ T5785] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 95.630930][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.637266][ T24] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 95.643660][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.649203][ T804] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 95.659389][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.676378][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.686173][ T5785] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 95.693770][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.815207][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.826834][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.833093][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.857536][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.939823][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.962074][ T5756] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 95.963396][ T804] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 95.990087][ T24] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 95.991172][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.000861][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.042842][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.062431][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.100862][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.137346][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.176089][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.199217][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.270972][ T3293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.318425][ T3293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.319102][ T5870] ceph: No mds server is up or the cluster is laggy [ 96.345094][ T5869] ceph: No mds server is up or the cluster is laggy [ 96.423606][ T5872] ceph: No mds server is up or the cluster is laggy [ 96.480911][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.512037][ T5778] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 96.542346][ T29] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 96.563804][ T5886] NFSD: Failed to start, no listeners configured. [ 96.654974][ T5903] bridge0: port 3(veth0) entered blocking state [ 96.672838][ T5903] bridge0: port 3(veth0) entered disabled state [ 96.673925][ T5902] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.681953][ T5903] veth0: entered allmulticast mode [ 96.744206][ T5903] veth0: entered promiscuous mode [ 96.765632][ T5903] bridge0: port 3(veth0) entered blocking state [ 96.772532][ T5903] bridge0: port 3(veth0) entered forwarding state [ 96.939598][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 97.245772][ T5912] bridge0: port 3(veth0) entered blocking state [ 97.324464][ T5912] bridge0: port 3(veth0) entered disabled state [ 97.361184][ T5912] veth0: entered allmulticast mode [ 97.379643][ T5912] veth0: entered promiscuous mode [ 97.399594][ T5912] bridge0: port 3(veth0) entered blocking state [ 97.406062][ T5912] bridge0: port 3(veth0) entered forwarding state [ 97.743363][ T5930] ip_tables: iptables: counters copy to user failed while replacing table [ 97.903932][ T5939] netlink: 'syz.2.25': attribute type 1 has an invalid length. [ 98.151759][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.344669][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.672529][ T36] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.149599][ T5956] ceph: No mds server is up or the cluster is laggy [ 99.149814][ T5749] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PAYLOAD) [ 99.356785][ T5978] NFSD: Failed to start, no listeners configured. [ 99.558875][ T6000] smc: net device veth0 applied user defined pnetid SYZ0 [ 99.837696][ T5771] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 99.853718][ T5977] ceph: No mds server is up or the cluster is laggy [ 100.022187][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 100.057044][ T6013] openvswitch: netlink: Message has 4 unknown bytes. [ 100.324035][ T5352] ------------[ cut here ]------------ [ 100.329562][ T5352] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 100.329582][ T5352] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#1: kworker/1:3/5352 [ 100.348656][ T5352] Modules linked in: [ 100.352895][ T5352] CPU: 1 UID: 0 PID: 5352 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 100.362331][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.373874][ T5352] Workqueue: ceph-msgr ceph_con_workfn [ 100.382221][ T5352] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 100.389467][ T5352] Code: 45 31 e4 e9 3f d1 ff ff e8 08 c6 32 f6 90 0f 0b 90 e9 cd d3 ff ff e8 fa c5 32 f6 90 0f 0b 90 e9 dd e6 ff ff e8 ec c5 32 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 100.409286][ T5352] RSP: 0018:ffffc9000360f180 EFLAGS: 00010293 [ 100.415426][ T5352] RAX: ffffffff8b944ef4 RBX: 0000000000000001 RCX: ffff888032d83e00 [ 100.423553][ T5352] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001 [ 100.431585][ T5352] RBP: ffffc9000360fa78 R08: ffff888032d83e00 R09: 0000000000000009 [ 100.439593][ T5352] R10: 000000000000000d R11: 0000000000000000 R12: ffff88807bba0418 [ 100.447618][ T5352] R13: fffff520006c1e70 R14: dffffc0000000000 R15: 00000000ffffffff [ 100.456459][ T5352] FS: 0000000000000000(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 100.466464][ T5352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.473172][ T5352] CR2: 00007fa0fae57ff8 CR3: 0000000077216000 CR4: 0000000000350ef0 [ 100.482059][ T5352] Call Trace: [ 100.485343][ T5352] [ 100.488291][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.494605][ T5352] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 100.500387][ T5352] ? veth_xmit+0x66/0xe60 [ 100.504801][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.510450][ T5352] ? dev_hard_start_xmit+0x7c7/0x830 [ 100.515804][ T5352] ? __dev_queue_xmit+0x29b/0x3820 [ 100.520969][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.526626][ T5352] ? __dev_queue_xmit+0x29b/0x3820 [ 100.531826][ T5352] ? __local_bh_enable_ip+0xd0/0x130 [ 100.537127][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.542826][ T5352] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.548047][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.553734][ T5352] ? __local_bh_enable_ip+0xd0/0x130 [ 100.557859][ T6032] tipc: Started in network mode [ 100.559030][ T5352] ? __dev_queue_xmit+0x29b/0x3820 [ 100.559069][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.574723][ T5352] ? __dev_queue_xmit+0x1edc/0x3820 [ 100.580869][ T5352] ? __lock_acquire+0x683/0x2cf0 [ 100.584584][ T6032] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 100.585829][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.585868][ T5352] ? __dev_queue_xmit+0x29b/0x3820 [ 100.602701][ T6032] tipc: Enabled bearer , priority 0 [ 100.604474][ T5352] ? __pfx_mroute6_is_socket+0x10/0x10 [ 100.604525][ T5352] ? __pfx___dev_queue_xmit+0x10/0x10 [ 100.604560][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.604590][ T5352] ? ip6_output+0x337/0x540 [ 100.604631][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.604659][ T5352] ? __lock_acquire+0x683/0x2cf0 [ 100.604705][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.604733][ T5352] ? __lock_acquire+0x683/0x2cf0 [ 100.604775][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.604802][ T5352] ? __mutex_trylock_common+0x15f/0x270 [ 100.604833][ T5352] ? __pfx___mutex_trylock_common+0x10/0x10 [ 100.604863][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.604889][ T5352] ? rcu_is_watching+0x15/0xb0 [ 100.604913][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.604940][ T5352] ? trace_contention_end+0x3d/0x140 [ 100.604968][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.604996][ T5352] ? __mutex_lock+0x30d/0x1550 [ 100.605033][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.605062][ T5352] ? __lock_acquire+0x683/0x2cf0 [ 100.605100][ T5352] ? ceph_con_workfn+0x3b/0x14a0 [ 100.605136][ T5352] ? __pfx___mutex_lock+0x10/0x10 [ 100.725493][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.731194][ T5352] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.736239][ T5352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.741691][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.747348][ T5352] ceph_con_workfn+0x208/0x14a0 [ 100.752279][ T5352] ? rcu_is_watching+0x15/0xb0 [ 100.757103][ T5352] ? process_scheduled_works+0xa20/0x14e0 [ 100.762896][ T5352] process_scheduled_works+0xa8e/0x14e0 [ 100.768493][ T5352] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.774958][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.780844][ T5352] ? assign_work+0x3cf/0x5d0 [ 100.786430][ T5352] worker_thread+0xa47/0xfb0 [ 100.791803][ T5352] kthread+0x388/0x470 [ 100.795903][ T5352] ? __pfx_worker_thread+0x10/0x10 [ 100.801113][ T5352] ? __pfx_kthread+0x10/0x10 [ 100.805718][ T5352] ret_from_fork+0x514/0xb70 [ 100.810339][ T5352] ? __pfx_ret_from_fork+0x10/0x10 [ 100.815572][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.821255][ T5352] ? __switch_to+0xc89/0x1420 [ 100.825966][ T5352] ? __pfx_kthread+0x10/0x10 [ 100.830648][ T5352] ret_from_fork_asm+0x1a/0x30 [ 100.835443][ T5352] [ 100.838462][ T5352] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.845740][ T5352] CPU: 1 UID: 0 PID: 5352 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 100.855111][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.865168][ T5352] Workqueue: ceph-msgr ceph_con_workfn [ 100.870652][ T5352] Call Trace: [ 100.873929][ T5352] [ 100.876861][ T5352] vpanic+0x56c/0xa60 [ 100.880861][ T5352] ? __pfx__printk+0x10/0x10 [ 100.885466][ T5352] ? __pfx_vpanic+0x10/0x10 [ 100.889990][ T5352] ? is_bpf_text_address+0x292/0x2b0 [ 100.895295][ T5352] ? is_bpf_text_address+0x26/0x2b0 [ 100.900523][ T5352] panic+0xc5/0xd0 [ 100.904251][ T5352] ? __pfx_panic+0x10/0x10 [ 100.908679][ T5352] ? ret_from_fork_asm+0x1a/0x30 [ 100.913628][ T5352] __warn+0x315/0x4c0 [ 100.917602][ T5352] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 100.923153][ T5352] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 100.928699][ T5352] __report_bug+0x276/0x570 [ 100.933219][ T5352] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 100.938768][ T5352] ? __pfx___report_bug+0x10/0x10 [ 100.943794][ T5352] ? tcp_recvmsg+0x213/0x7f0 [ 100.948388][ T5352] ? __local_bh_enable_ip+0xd0/0x130 [ 100.953667][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.959294][ T5352] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.964493][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.970123][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.975749][ T5352] ? tcp_recvmsg+0x288/0x7f0 [ 100.980338][ T5352] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 100.985888][ T5352] report_bug+0x16a/0x220 [ 100.990220][ T5352] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 100.995780][ T5352] ? ceph_con_v1_try_read+0x3337/0x6eb0 [ 101.001331][ T5352] handle_bug+0x9c/0x200 [ 101.005575][ T5352] exc_invalid_op+0x1a/0x50 [ 101.010114][ T5352] asm_exc_invalid_op+0x1a/0x20 [ 101.014957][ T5352] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 101.021114][ T5352] Code: 45 31 e4 e9 3f d1 ff ff e8 08 c6 32 f6 90 0f 0b 90 e9 cd d3 ff ff e8 fa c5 32 f6 90 0f 0b 90 e9 dd e6 ff ff e8 ec c5 32 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 101.040709][ T5352] RSP: 0018:ffffc9000360f180 EFLAGS: 00010293 [ 101.046776][ T5352] RAX: ffffffff8b944ef4 RBX: 0000000000000001 RCX: ffff888032d83e00 [ 101.054738][ T5352] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001 [ 101.062694][ T5352] RBP: ffffc9000360fa78 R08: ffff888032d83e00 R09: 0000000000000009 [ 101.070653][ T5352] R10: 000000000000000d R11: 0000000000000000 R12: ffff88807bba0418 [ 101.078609][ T5352] R13: fffff520006c1e70 R14: dffffc0000000000 R15: 00000000ffffffff [ 101.086576][ T5352] ? ceph_con_v1_try_read+0x3334/0x6eb0 [ 101.092159][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.097822][ T5352] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 101.103547][ T5352] ? veth_xmit+0x66/0xe60 [ 101.107888][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.113519][ T5352] ? dev_hard_start_xmit+0x7c7/0x830 [ 101.118803][ T5352] ? __dev_queue_xmit+0x29b/0x3820 [ 101.123913][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.129540][ T5352] ? __dev_queue_xmit+0x29b/0x3820 [ 101.134653][ T5352] ? __local_bh_enable_ip+0xd0/0x130 [ 101.139934][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.145559][ T5352] ? lockdep_hardirqs_on+0x7a/0x110 [ 101.150758][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.156387][ T5352] ? __local_bh_enable_ip+0xd0/0x130 [ 101.161666][ T5352] ? __dev_queue_xmit+0x29b/0x3820 [ 101.166775][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.172401][ T5352] ? __dev_queue_xmit+0x1edc/0x3820 [ 101.177602][ T5352] ? __lock_acquire+0x683/0x2cf0 [ 101.182542][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.188175][ T5352] ? __dev_queue_xmit+0x29b/0x3820 [ 101.193286][ T5352] ? __pfx_mroute6_is_socket+0x10/0x10 [ 101.198759][ T5352] ? __pfx___dev_queue_xmit+0x10/0x10 [ 101.204137][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.209769][ T5352] ? ip6_output+0x337/0x540 [ 101.214282][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.219911][ T5352] ? __lock_acquire+0x683/0x2cf0 [ 101.224861][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.230488][ T5352] ? __lock_acquire+0x683/0x2cf0 [ 101.235440][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.241065][ T5352] ? __mutex_trylock_common+0x15f/0x270 [ 101.246605][ T5352] ? __pfx___mutex_trylock_common+0x10/0x10 [ 101.252491][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.258115][ T5352] ? rcu_is_watching+0x15/0xb0 [ 101.262869][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.268493][ T5352] ? trace_contention_end+0x3d/0x140 [ 101.273771][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.279396][ T5352] ? __mutex_lock+0x30d/0x1550 [ 101.284161][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.289787][ T5352] ? __lock_acquire+0x683/0x2cf0 [ 101.294734][ T5352] ? ceph_con_workfn+0x3b/0x14a0 [ 101.299683][ T5352] ? __pfx___mutex_lock+0x10/0x10 [ 101.304712][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.310339][ T5352] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.315361][ T5352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.320733][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.326367][ T5352] ceph_con_workfn+0x208/0x14a0 [ 101.331217][ T5352] ? rcu_is_watching+0x15/0xb0 [ 101.335976][ T5352] ? process_scheduled_works+0xa20/0x14e0 [ 101.341691][ T5352] process_scheduled_works+0xa8e/0x14e0 [ 101.347262][ T5352] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.353247][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.358897][ T5352] ? assign_work+0x3cf/0x5d0 [ 101.363490][ T5352] worker_thread+0xa47/0xfb0 [ 101.368102][ T5352] kthread+0x388/0x470 [ 101.372176][ T5352] ? __pfx_worker_thread+0x10/0x10 [ 101.377284][ T5352] ? __pfx_kthread+0x10/0x10 [ 101.381882][ T5352] ret_from_fork+0x514/0xb70 [ 101.386478][ T5352] ? __pfx_ret_from_fork+0x10/0x10 [ 101.391591][ T5352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.397219][ T5352] ? __switch_to+0xc89/0x1420 [ 101.401994][ T5352] ? __pfx_kthread+0x10/0x10 [ 101.406590][ T5352] ret_from_fork_asm+0x1a/0x30 [ 101.411360][ T5352] [ 101.414601][ T5352] Kernel Offset: disabled [ 101.418911][ T5352] Rebooting in 86400 seconds..