last executing test programs:

2m26.774108971s ago: executing program 32 (id=222):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
nanosleep(&(0x7f0000000300)={0x5}, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
r3 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)

2m24.734323026s ago: executing program 33 (id=246):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-2 -3\n\x00', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='3\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='1\n\x00', 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000340)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000380)="80000028000000010000000000000002000186a30000000400"/44, 0x2c)
write(r4, &(0x7f00000003c0)="80000040000000020000000000000002000186a3000000030000000100000001000000140000000100"/68, 0x44)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff)
mount(&(0x7f0000000480)=@filename='none\x00', &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23)

2m22.572428936s ago: executing program 34 (id=263):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\x00/run/rpcbind.sock\x00'}, 0x18)
listen(r0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000200)='threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x2)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)="8000001c000000010000000100"/32, 0x20)

2m20.15372472s ago: executing program 35 (id=288):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/fs/nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/fs/nfsd/ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1\n\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000100)="000000010000000000000002000186a30000000300000000000000010000002000"/64, 0x40, 0x0, &(0x7f0000000200)={0x2, 0x7f1, @loopback}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
read(r4, &(0x7f0000000300)=""/100, 0x64)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x20, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x20}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x20, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x20}}, 0x0)

2m17.499825667s ago: executing program 36 (id=316):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff)
syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./export\x00', 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000380))
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='localhost ./export 2147483647 0 0 0 0\n\x00', 0x26)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/file1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/file2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/file3\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./export/file4\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./export/file5\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./export/file6\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./export/file7\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./export/file8\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export/file9\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./export/file10\x00', 0x1ff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10)
write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a3000000030000001000000000000000000000000000000000000000000000000000000020", 0x3c)
nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0)

2m14.463190913s ago: executing program 37 (id=330):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='\n\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff)
mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='tcp 20000\n\x00', 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='1\n\x00', 0x2)
write(r3, &(0x7f00000003c0)='1\n\x00', 0x2)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)

2m8.440840665s ago: executing program 9 (id=364):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @local}, 0x10)
connect$llc(r0, &(0x7f0000000010)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10)
syz_emit_ethernet(0x1b, &(0x7f0000000020)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x3, 'c'}}}}}, 0x0)
syz_emit_ethernet(0x1c, &(0x7f0000000040)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x2, "0002"}}}}}, 0x0)

2m7.420089874s ago: executing program 9 (id=365):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(0x0, 0x32, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r4, 0x0, 0x200002, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000050c0)=ANY=[@ANYBLOB="5012000044000701fefffffffcdbdf2503"], 0x1250}}, 0xc000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
listen(r1, 0x0)
shutdown(r7, 0x0)
r8 = dup(r7)
write$UHID_INPUT(r8, 0x0, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(r9, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, <r10=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00009d9fde4c0000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

2m6.357545245s ago: executing program 9 (id=366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x14)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r3)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x10, 0x2, 0xff, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x66, 0x0, 0x8, 0x29, 0x0, @local, @empty, {[@end, @noop, @generic={0x82, 0xe, "aecd140ea5bba8848bf050b3"}, @noop, @timestamp_addr={0x44, 0xc, 0x34, 0x1, 0x7, [{@multicast2, 0xaad}]}, @generic={0x7, 0x2}, @generic={0x88, 0x5, "e54a03"}]}}}}})
r7 = socket(0x10, 0x2, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r8, &(0x7f00000022c0)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/13, 0xd}, {&(0x7f0000001940)=""/243, 0xf3}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000001a80)=""/100, 0x64}], 0x8, &(0x7f0000001b80)=""/102, 0x66}}, {{0x0, 0x0, &(0x7f0000002180)}}], 0x2, 0x10022, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x40, 0xfffffff8, 0x5, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0xb, 0x5c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x82, 0xf, "ebe7456883813d8752af68b318"}, @ssrr={0x89, 0x7, 0x73, [@broadcast]}]}}}}})
r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r9, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0), 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x10000000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44830}, 0x8094)

2m5.290106579s ago: executing program 9 (id=369):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65536, 0x10000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x10, 0x4)
mmap$xdp(0xfffffffffffffffc, 0x1000, 0x3, 0x11, r0, 0x0)

2m5.041011759s ago: executing program 9 (id=370):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./rec\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='./rec\x00', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r2, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000180)='3\x00', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r4, &(0x7f0000000240)='8\n\x00', 0x2)
close(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

2m4.586700393s ago: executing program 38 (id=345):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='1\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 client\n', 0x96)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10)
write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74)

2m4.514869482s ago: executing program 39 (id=346):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='3\n', 0x2)
write(r1, &(0x7f0000000200)='4\n', 0x2)
write(r1, &(0x7f0000000240)='5\n', 0x2)
write(r1, &(0x7f0000000280)='6\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='-2 -3\n', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='1\n', 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f00000003c0)={0x2, 0x801, @loopback}, 0x10)

2m1.581469947s ago: executing program 1 (id=387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000040)={0x20, 0x10, 0x1, 0x0, 0x0, {0x3}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)

2m1.431636249s ago: executing program 1 (id=388):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-3 -4.0 -4.1\n', 0xd)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
close(r2)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85)
close(r3)
r4 = socket(0x2, 0x1, 0x6)
connect(r4, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r4, &(0x7f0000000800)=""/100, 0x100)
close(r4)

2m1.183382202s ago: executing program 4 (id=389):
r0 = socket$nl_xfrm(0xa, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000400), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x68, 0x10, 0x5, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x1234, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x0, 0x0, {{'deflate\x00'}}}]}}}, 0x0)
syz_emit_ethernet(0x80, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x0, 0x3a, 0x40, @local, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x40, @remote, @local, [], "00001234"}}}}}}}, 0x0)

2m1.052711133s ago: executing program 4 (id=390):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(0x0, 0x32, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r4, 0x0, 0x200002, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000050c0)=ANY=[@ANYBLOB="5012000044000701fefffffffcdbdf2503"], 0x1250}}, 0xc000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
listen(r1, 0x0)
shutdown(r7, 0x0)
r8 = dup(r7)
write$UHID_INPUT(r8, 0x0, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(r9, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, <r10=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00009d9fde4c0000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

2m0.029795151s ago: executing program 4 (id=391):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='-3\n+4\n+4.2\n\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='tcp 2049\n\x00', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='1\n\x00', 0x2) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r5, &(0x7f0000000400)='1\n\x00', 0x2)

1m51.64172309s ago: executing program 3 (id=405):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800010000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800020000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800030000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800040000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800050000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800060000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800070000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800080000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800090000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000c0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000d0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000e0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000f0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800100000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800110000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800120000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800130000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800140000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800150000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800160000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800170000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800180000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800190000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001c0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001d0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001e0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001f0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800200000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800210000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800220000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800230000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000200)="1c0000001a00010103000000000000000a00"/28, 0x1c)
recvmsg(r0, 0x0, 0x0)

1m51.548107451s ago: executing program 3 (id=406):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0xa)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000300)=0x2, 0x4)
setsockopt(r3, 0x84, 0x7d, &(0x7f0000000340)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x0, 0x10}, 0xa)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f0000000440)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000480)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x200}], 0x1, &(0x7f0000000800)=[@prinfo={0x14, 0x84, 0x5, {0x10}}], 0x14}, 0x0)
nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0)

1m51.321536616s ago: executing program 3 (id=407):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='-4\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='udp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1\n\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x8008, @loopback}, 0x10)
sendto(r3, &(0x7f0000000280)='12345678\x00', 0x8, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m49.943844928s ago: executing program 40 (id=370):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./rec\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='./rec\x00', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r2, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000180)='3\x00', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r4, &(0x7f0000000240)='8\n\x00', 0x2)
close(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m46.386939115s ago: executing program 41 (id=388):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-3 -4.0 -4.1\n', 0xd)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
close(r2)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85)
close(r3)
r4 = socket(0x2, 0x1, 0x6)
connect(r4, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r4, &(0x7f0000000800)=""/100, 0x100)
close(r4)

1m44.90764871s ago: executing program 42 (id=391):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='-3\n+4\n+4.2\n\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='tcp 2049\n\x00', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='1\n\x00', 0x2) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r5, &(0x7f0000000400)='1\n\x00', 0x2)

1m41.907970389s ago: executing program 43 (id=393):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x6)
setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="01000000", 0x4)
bind(r0, &(0x7f0000000200)=@in={0x2, 0x108, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='3\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85)
close(r3)
r4 = socket(0x2, 0x1, 0x6)
connect(r4, &(0x7f0000000500)=@in={0x2, 0x108, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r4, &(0x7f0000000800)=""/100, 0x100)
close(r4)
close(r0)

1m36.677343591s ago: executing program 44 (id=403):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='4\n\x00', 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x108, @loopback}, 0x10)

1m36.66084003s ago: executing program 6 (id=429):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)

1m36.535054959s ago: executing program 6 (id=430):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0xd0}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10)

1m36.203589729s ago: executing program 6 (id=431):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='udp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='1\n\x00', 0x2)
r3 = socket(0x2, 0x2, 0x0)
sendto(r3, &(0x7f0000000800)='12345678901234567890\x00', 0x14, 0x0, &(0x7f0000000900)=@in={0x2, 0x801, @loopback}, 0x10)

1m36.11482434s ago: executing program 45 (id=407):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='-4\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='udp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1\n\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x8008, @loopback}, 0x10)
sendto(r3, &(0x7f0000000280)='12345678\x00', 0x8, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m25.376121506s ago: executing program 46 (id=414):
r0 = socket$inet(0x2, 0x1, 0x0)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='3\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000800)='8\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./exp\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000b00)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000e00)='* ./exp 10000 0 0 0\n\x00', 0x15)
mount$nfs4(&(0x7f0000000f00)='127.0.0.1:./exp\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000001000), 0x0, &(0x7f0000001100)={[{'addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1', 0x31}]}) (async)
openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/file0\x00', 0x0, 0x0)

1m20.417740696s ago: executing program 47 (id=431):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='udp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='1\n\x00', 0x2)
r3 = socket(0x2, 0x2, 0x0)
sendto(r3, &(0x7f0000000800)='12345678901234567890\x00', 0x14, 0x0, &(0x7f0000000900)=@in={0x2, 0x801, @loopback}, 0x10)

1m14.225363578s ago: executing program 5 (id=442):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x17, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
sendto$inet(r1, &(0x7f0000000500)="00010203040506070809", 0xa, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10)

1m14.159329176s ago: executing program 5 (id=443):
set_mempolicy(0x4005, 0x0, 0x7ffd)
r0 = fanotify_init(0x200, 0x0)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0xfe)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)
ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0})
readv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1)

1m11.442380844s ago: executing program 5 (id=444):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

1m11.197125467s ago: executing program 5 (id=445):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x5002})
r3 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1})
write$tun(r2, &(0x7f0000000400)={@val, @val={0x1, 0x3, 0x22, 0x64, 0x22, 0x6}, @eth={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1234, 0x28, 0x0, @opaque="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f"}}}}}}, 0x58)

1m0.858879963s ago: executing program 48 (id=440):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='2049\n', 0x5)

55.852024982s ago: executing program 49 (id=445):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x5002})
r3 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1})
write$tun(r2, &(0x7f0000000400)={@val, @val={0x1, 0x3, 0x22, 0x64, 0x22, 0x6}, @eth={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1234, 0x28, 0x0, @opaque="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f"}}}}}}, 0x58)

39.940145585s ago: executing program 9 (id=428):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
r3 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)

39.03009101s ago: executing program 4 (id=434):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x1f91, @loopback}, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1f90, @loopback}}, {0x14, 0x2, @in={0x2, 0x1f91, @loopback}}}}]}]}, 0x54}}, 0x0)
recvfrom$inet(r2, &(0x7f0000000200), 0x100, 0x0, 0x0, 0x0)

38.739664232s ago: executing program 4 (id=448):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @random="fe5400000001"}, 0x10)
connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @random="fe5400000001"}, 0x10)
syz_emit_ethernet(0x13, &(0x7f0000000040)={@dev, @random="fe5400000001", @void, {@llc={0x4, {@llc={0x2, 0x2, "0202", 'S'}}}}}, 0x0)

38.657123605s ago: executing program 4 (id=449):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1\n\x00', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])

37.335805659s ago: executing program 3 (id=447):
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)

37.15190188s ago: executing program 3 (id=450):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
accept$inet(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000200)='ceph v027\n\x00', 0x10, 0x0, 0x0, 0x0)

36.127559155s ago: executing program 3 (id=451):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='localhost ./export 2147483647 1024 0 0 0\n\x00', 0x29)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/file1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/file2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/file3\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./export/file4\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./export/file5\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./export/file6\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./export/file7\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./export/file8\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export/file9\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./export/file10\x00', 0x1ff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10)
write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a3000000030000001000000000000000000000000000000000000000000000000000000020", 0x3c)
nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0)

35.971546743s ago: executing program 1 (id=432):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf1, 0xff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf1, 0xff}, {0x0, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x6c}}, 0x0)

35.686706223s ago: executing program 1 (id=452):
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000100)="3c0000001000010001000000000000003801000025001c0044454641554c54554549443030303030303030303030303030303000", 0x3c)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r2, &(0x7f0000000500)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)
close(r3)
close(r2)

35.61503787s ago: executing program 0 (id=446):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x14)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r3)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x10, 0x2, 0xff, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x66, 0x0, 0x8, 0x29, 0x0, @local, @empty, {[@end, @noop, @generic={0x82, 0xe, "aecd140ea5bba8848bf050b3"}, @noop, @timestamp_addr={0x44, 0xc, 0x34, 0x1, 0x7, [{@multicast2, 0xaad}]}, @generic={0x7, 0x2}, @generic={0x88, 0x5, "e54a03"}]}}}}})
r7 = socket(0x10, 0x2, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r8, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000002180)}}], 0x1, 0x10022, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x40, 0xfffffff8, 0x5, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0xb, 0x5c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x82, 0xf, "ebe7456883813d8752af68b318"}, @ssrr={0x89, 0x7, 0x73, [@broadcast]}]}}}}})
r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r9, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0), 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x10000000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44830}, 0x8094)

34.696038711s ago: executing program 1 (id=454):
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="8000001c000000000000000100000001000000000000000200000002", 0x1c)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1'}, {'port=2049'}, {'mountport=2049'}, {'proto=tcp'}, {'mountproto=tcp'}, {'nolock'}]}) (async)
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
read(r1, &(0x7f0000000100), 0x70)
write(r1, &(0x7f0000000300), 0x1c)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)

34.659282888s ago: executing program 0 (id=455):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
accept4$inet6(r0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000100)='hello', 0x5)
syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x0, 0x6, 0x40, @local, @local, {[], {{0x4e23, 0x4e22, 0x1, 0x1, 0x0, 0x0, 0x5, 0x10, 0x1000}, {'hello'}}}}}}}, 0x0)
syz_emit_ethernet(0x4f, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x0, 0x6, 0x40, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x2, 0x0, 0x0, 0x5, 0x10, 0x1000}, {'hello'}}}}}}}, 0x0)

34.490940412s ago: executing program 0 (id=457):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
listen(r0, 0x5)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000100)="00000001000000010000000100000001000000010101000000000001", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
recvfrom$rxrpc(r0, &(0x7f0000000300), 0x100, 0x1, 0x0, 0x0)

34.307512462s ago: executing program 0 (id=459):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0073797a30300800450000300000400040113cbb7f0000017f00000112341234001c0000450000140000400040043ce47f0000017f000001"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)

34.121460234s ago: executing program 0 (id=461):
r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000080)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='clientaddr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

33.98348803s ago: executing program 0 (id=463):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
listen(r0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000800)='1\x00', 0x2)

33.742215672s ago: executing program 1 (id=464):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9)
r1 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
listen(r1, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='4\n\x00', 0x2)
write(r0, &(0x7f0000000380)='+3 +4\n\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 root\n\x00', 0x61)
r5 = socket$inet(0x2, 0x1, 0x6)
connect$inet(r5, &(0x7f0000000800)={0x2, 0x0, @empty}, 0x10)
write(r5, &(0x7f0000000900)="123456780000000000000002000186a300000003000000000000000600000018000000010000000200000000000000010000000401000000000000060000001c040400ffffffffff00"/92, 0x54)
nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0)

29.656338061s ago: executing program 8 (id=473):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x204e, @loopback}}, {0x14, 0x2, @in={0x2, 0x204e, @loopback}}}}]}]}, 0x54}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x11)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x204e, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000200)='\x00'/16, 0x10, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000200)='\x00'/16, 0x10, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

29.488192676s ago: executing program 8 (id=474):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811212290000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

28.316475694s ago: executing program 8 (id=475):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0)
getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x0)

28.207761759s ago: executing program 8 (id=476):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
nanosleep(&(0x7f0000000600)={0x0, 0xbebc200}, 0x0)

27.995235373s ago: executing program 8 (id=477):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r2, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r1, &(0x7f0000000300)=@in={0x2, 0x4e20, @loopback}, 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
shutdown(r1, 0x2)
shutdown(r3, 0x2)

27.917744825s ago: executing program 8 (id=478):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='localhost 1 \\x00 2147483647 ./export_dir\n', 0x29)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000580)=@filename='127.0.0.1:/\x00', &(0x7f00000005c0)='./nfs_mnt\x00', &(0x7f0000000600)='nfs\x00', 0x0, &(0x7f0000000640)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00')
setxattr(&(0x7f00000006c0)='./nfs_mnt\x00', &(0x7f0000000700)=@known='system.posix_acl_access\x00', &(0x7f0000000740)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)

24.34438001s ago: executing program 50 (id=428):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
r3 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)

23.34303347s ago: executing program 51 (id=449):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1\n\x00', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])

20.832076779s ago: executing program 52 (id=451):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='localhost ./export 2147483647 1024 0 0 0\n\x00', 0x29)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/file1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/file2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/file3\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./export/file4\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./export/file5\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./export/file6\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./export/file7\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./export/file8\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export/file9\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./export/file10\x00', 0x1ff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10)
write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a3000000030000001000000000000000000000000000000000000000000000000000000020", 0x3c)
nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0)

18.292210478s ago: executing program 53 (id=463):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
listen(r0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000800)='1\x00', 0x2)

18.155531584s ago: executing program 54 (id=464):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9)
r1 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
listen(r1, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='4\n\x00', 0x2)
write(r0, &(0x7f0000000380)='+3 +4\n\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 root\n\x00', 0x61)
r5 = socket$inet(0x2, 0x1, 0x6)
connect$inet(r5, &(0x7f0000000800)={0x2, 0x0, @empty}, 0x10)
write(r5, &(0x7f0000000900)="123456780000000000000002000186a300000003000000000000000600000018000000010000000200000000000000010000000401000000000000060000001c040400ffffffffff00"/92, 0x54)
nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0)

13.355232457s ago: executing program 6 (id=480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x0, 0x1e, 0x4}, @IFLA_NUM_RX_QUEUES={0x0, 0x1f, 0x4}, @IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @veth={{}, {0x0, 0x2, 0x0, 0x1, @void}}}]}, 0x1}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{}, {0x0, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x0, 0x1, {0x2, [0x0, 0x1], 0x0, [0x2, 0x2], [0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x989680}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0x0, 0x3, 0x7fffffffffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x0, 0x5, 0x1}]}}]}, 0x1}}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x1c9c380}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@delqdisc={0x0, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x1}}, 0x0)

13.15565895s ago: executing program 6 (id=494):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'\x00', 0x5002})
write$tun(r2, &(0x7f0000000400)={@val, @val, @eth={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1234, 0x28, 0x0, @opaque="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f"}}}}}}, 0x58)

12.999730096s ago: executing program 6 (id=495):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='udp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='1\n', 0x2)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000300)="123456780000000000000002000186a30000000300000001000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='nfsd 127.0.0.1 9999999 domain\n', 0x1d)
close(r3)

12.465704092s ago: executing program 55 (id=478):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='localhost 1 \\x00 2147483647 ./export_dir\n', 0x29)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000580)=@filename='127.0.0.1:/\x00', &(0x7f00000005c0)='./nfs_mnt\x00', &(0x7f0000000600)='nfs\x00', 0x0, &(0x7f0000000640)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00')
setxattr(&(0x7f00000006c0)='./nfs_mnt\x00', &(0x7f0000000700)=@known='system.posix_acl_access\x00', &(0x7f0000000740)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)

9.788538859s ago: executing program 2 (id=502):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @local}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_host\x00', &(0x7f0000000300)='127.0.0.1:6789\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = accept(r0, 0x0, 0x0)
write(r2, &(0x7f0000000400)="636570682076320a0d0a1000", 0xc)
write(r2, &(0x7f0000000500)="ffffffffffffffff0000000000000000", 0x10)
nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0)
close(r2)
close(r1)

8.897333583s ago: executing program 2 (id=503):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='1\x00', 0x0)
accept$inet(r0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)

7.721067017s ago: executing program 2 (id=504):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10)
connect$llc(r0, &(0x7f0000000010)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x4, @remote}, 0x10)
syz_emit_ethernet(0x11, &(0x7f0000000020)={@local, @remote, @void, {@llc={0x3, {@llc={0x2, 0x5, 'c'}}}}}, 0x0)
syz_emit_ethernet(0x12, &(0x7f0000000040)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x4, "0002"}}}}}, 0x0)

7.367679345s ago: executing program 2 (id=505):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000200)='hello', 0x5, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
sendto$inet(r0, &(0x7f0000000300)='world', 0x5, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)

6.456473583s ago: executing program 2 (id=506):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x5}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

6.235027385s ago: executing program 2 (id=507):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='udp 2049\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\x00', 0x2)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x11)
sendto$inet(r2, &(0x7f0000000400)='hello\x00', 0x5, 0x0, &(0x7f0000000500)={0x2, 0x8008, @loopback}, 0x10)

2.545278706s ago: executing program 7 (id=512):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='bridge0\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
ioctl$sock_ifreq(r0, 0x8924, &(0x7f00000000c0)={'bridge_slave_0\x00', @ifru_hwaddr=@random="021122334455"})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0x4, r1}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x30}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'bridge0\x00', 0x1})
syz_emit_ethernet(0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c20000000011223344550028424203000000000000000000000000000000000000000000000000000000140002000f0000000000"], 0x0)
syz_emit_ethernet(0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c20000000011223344550028424203000000000000000000000000000000000000000000000000000000140002000f0000000000"], 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)

1.927683912s ago: executing program 7 (id=513):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040), 0x0)

1.640268294s ago: executing program 7 (id=514):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000800)=@ipv4_newroute={0x2c, 0x18, 0x605, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @loopback}, @RTA_OIF={0x8, 0x4, r2}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000a00), 0xc, &(0x7f0000000b00)={&(0x7f0000000c00)=@dellink={0x20, 0x12, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0)

1.343485486s ago: executing program 7 (id=515):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
listen(r0, 0x10)

1.092673602s ago: executing program 7 (id=516):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12, @random="fe5400000001"}, 0x10)
connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12, @random="fe5400000002"}, 0x10)
syz_emit_ethernet(0x12, &(0x7f0000000200)={@random="fe5400000001", @random="fe5400000002", @void, {@llc={0x4, {@llc={0x12, 0x12, "01", "01"}}}}}, 0x0)

257.57358ms ago: executing program 5 (id=482):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0)

90.043337ms ago: executing program 7 (id=517):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0), 0x0)
close(r1)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010102, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)

0s ago: executing program 5 (id=518):
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
listen(r1, 0x5)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
r3 = accept(r1, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10)

kernel console output (not intermixed with test programs):

+0x388/0x470
[  196.982936][    C1]  ? __pfx_worker_thread+0x10/0x10
[  196.982962][    C1]  ? __pfx_kthread+0x10/0x10
[  196.982998][    C1]  ret_from_fork+0x514/0xb70
[  196.983035][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  196.983069][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.983112][    C1]  ? __switch_to+0xc89/0x1420
[  196.983165][    C1]  ? __pfx_kthread+0x10/0x10
[  196.983209][    C1]  ret_from_fork_asm+0x1a/0x30
[  196.983253][    C1]  </TASK>
[  196.983265][    C0] CPU: 0 UID: 0 PID: 7620 Comm: syz.5.433 Not tainted syzkaller #0 PREEMPT(full) 
[  196.983292][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  196.983306][    C0] Call Trace:
[  196.983315][    C0]  <IRQ>
[  196.983325][    C0]  dump_stack_lvl+0xe8/0x150
[  196.983367][    C0]  should_fail_ex+0x40c/0x560
[  196.983404][    C0]  prepare_alloc_pages+0x230/0x650
[  196.983427][    C1] FAULT_INJECTION: forcing a failure.
[  196.983427][    C1] name fail_page_alloc, interval 1, probability 100, space 0, times 8
[  196.983447][    C0]  __alloc_frozen_pages_noprof+0x12f/0x380
[  196.983486][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  196.983524][    C0]  ? __pfx_policy_nodemask+0x10/0x10
[  196.983557][    C0]  ? ___slab_alloc+0x8ac/0x950
[  196.983582][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.983608][    C0]  ? rcu_is_watching+0x15/0xb0
[  196.983633][    C0]  alloc_pages_mpol+0x212/0x380
[  196.983675][    C0]  allocate_slab+0x131/0x5e0
[  196.983703][    C0]  ___slab_alloc+0x16a/0x950
[  196.983730][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.983763][    C0]  __kmalloc_flags_noprof+0x347/0x800
[  196.983797][    C0]  ? __kmalloc_flags_noprof+0x35e/0x800
[  196.983826][    C0]  ? __alloc_empty_sheaf+0x28/0x40
[  196.983854][    C0]  ? __alloc_empty_sheaf+0x28/0x40
[  196.983890][    C0]  __alloc_empty_sheaf+0x28/0x40
[  196.983918][    C0]  __pcs_replace_empty_main+0x430/0x6b0
[  196.983951][    C0]  kmem_cache_alloc_node_noprof+0x42f/0x610
[  196.983980][    C0]  ? local_lock_release+0x9c/0x160
[  196.984000][    C0]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  196.984030][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  196.984051][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  196.984089][    C0]  __alloc_skb+0x1d7/0x7a0
[  196.984116][    C0]  __netdev_alloc_skb+0xc1/0x810
[  196.984139][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.984165][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  196.984195][    C0]  __ieee80211_beacon_get+0xcfd/0x1920
[  196.984224][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  196.984255][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.984289][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  196.984321][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  196.984353][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.984379][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  196.984408][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.984439][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  196.984469][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.984500][    C0]  __iterate_interfaces+0x2af/0x5a0
[  196.984525][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  196.984554][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  196.984582][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  196.984610][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  196.984637][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  196.984661][    C0]  mac80211_hwsim_beacon+0xaf/0x240
[  196.984684][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  196.984708][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  196.984751][    C0]  hrtimer_run_softirq+0x17a/0x240
[  196.984784][    C0]  handle_softirqs+0x225/0x840
[  196.984815][    C0]  ? __irq_exit_rcu+0xca/0x220
[  196.984851][    C0]  __irq_exit_rcu+0xca/0x220
[  196.984881][    C0]  irq_exit_rcu+0x9/0x30
[  196.984906][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  196.984931][    C0]  </IRQ>
[  196.984939][    C0]  <TASK>
[  196.984949][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  196.984973][    C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7
[  196.985000][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc
[  196.985018][    C0] RSP: 0018:ffffc90003b3f340 EFLAGS: 00000293
[  196.985037][    C0] RAX: ffffffff824048ce RBX: 0000000000000001 RCX: ffff88808d9a1f00
[  196.985053][    C0] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000000
[  196.985067][    C0] RBP: ffff88801ec50730 R08: ffff88801ec5077f R09: 1ffff11003d8a0ef
[  196.985084][    C0] R10: dffffc0000000000 R11: ffffed1003d8a0f0 R12: 0000000000000011
[  196.985101][    C0] R13: 0000000000000001 R14: ffff88801ec50778 R15: 0000000000071017
[  196.985125][    C0]  ? page_table_check_clear+0x2be/0x500
[  196.985163][    C0]  srso_alias_return_thunk+0x5/0xfbef5
[  196.985190][    C0]  page_table_check_clear+0x2be/0x500
[  196.985220][    C0]  ? page_table_check_clear+0x124/0x500
[  196.985256][    C0]  __zap_vma_range+0x39bb/0x4f10
[  196.985288][    C0]  ? unwind_get_return_address+0x4d/0x90
[  196.985332][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.985380][    C0]  ? __lock_acquire+0x683/0x2cf0
[  196.985430][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  196.985463][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.985498][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.985527][    C0]  ? unmap_vmas+0x1b9/0x550
[  196.985564][    C0]  unmap_vmas+0x390/0x550
[  196.985606][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  196.985660][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.985691][    C0]  exit_mmap+0x293/0x9f0
[  196.985722][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  196.985774][    C0]  ? __pfx_exit_aio+0x10/0x10
[  196.985813][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.985839][    C0]  ? arch_uprobe_clear_state+0x1c8/0x240
[  196.985877][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.985904][    C0]  ? uprobe_clear_state+0x2ac/0x3e0
[  196.985929][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.985961][    C0]  __mmput+0x118/0x420
[  196.985989][    C0]  exit_mm+0x221/0x2d0
[  196.986025][    C0]  do_exit+0x6cd/0x2360
[  196.986059][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.986092][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.986123][    C0]  ? __pfx_do_exit+0x10/0x10
[  196.986161][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  196.986190][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.986225][    C0]  do_group_exit+0x22d/0x2f0
[  196.986244][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  196.986271][    C0]  get_signal+0x121b/0x12c0
[  196.986319][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  196.986496][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.986529][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  196.986584][    C0]  exit_to_user_mode_loop+0x104/0x730
[  196.986616][    C0]  ? rcu_is_watching+0x15/0xb0
[  196.986641][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.986666][    C0]  do_syscall_64+0x353/0x580
[  196.986693][    C0]  ? trace_irq_disable+0x3b/0x140
[  196.986730][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.986754][    C0] RIP: 0033:0x7f9d0d39de99
[  196.986775][    C0] Code: Unable to access opcode bytes at 0x7f9d0d39de6f.
[  196.986787][    C0] RSP: 002b:00007ffcb9a364a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  196.986811][    C0] RAX: 0000000000000000 RBX: 000000000002dab1 RCX: 00007f9d0d39de99
[  196.986827][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9d0d625fac
[  196.986842][    C0] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000
[  196.986857][    C0] R10: 00007ffcb9a365b0 R11: 0000000000000246 R12: 00007ffcb9a365d0
[  196.986887][    C0] R13: 00007f9d0d625fac R14: 000000000002dae3 R15: 00007ffcb9a365b0
[  196.986923][    C0]  </TASK>
[  196.986939][    C1] CPU: 1 UID: 0 PID: 7074 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) 
[  196.986966][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  196.986982][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  196.987014][    C1] Call Trace:
[  196.987025][    C1]  <IRQ>
[  196.987035][    C1]  dump_stack_lvl+0xe8/0x150
[  196.987079][    C1]  should_fail_ex+0x40c/0x560
[  196.987116][    C1]  prepare_alloc_pages+0x230/0x650
[  196.987125][    C0] FAULT_INJECTION: forcing a failure.
[  196.987125][    C0] name fail_page_alloc, interval 1, probability 100, space 0, times 6
[  196.987168][    C1]  __alloc_frozen_pages_noprof+0x12f/0x380
[  196.987209][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  196.987248][    C1]  ? __pfx_policy_nodemask+0x10/0x10
[  196.987285][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  196.987312][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.987344][    C1]  alloc_pages_mpol+0x212/0x380
[  196.987465][    C1]  allocate_slab+0x131/0x5e0
[  196.987496][    C1]  ___slab_alloc+0x16a/0x950
[  196.987533][    C1]  __kmalloc_flags_noprof+0x347/0x800
[  196.987571][    C1]  ? __kmalloc_flags_noprof+0x35e/0x800
[  196.987601][    C1]  ? __alloc_empty_sheaf+0x28/0x40
[  196.987628][    C1]  ? __alloc_empty_sheaf+0x28/0x40
[  196.987665][    C1]  __alloc_empty_sheaf+0x28/0x40
[  196.987693][    C1]  __pcs_replace_empty_main+0x430/0x6b0
[  196.987728][    C1]  __kmalloc_flags_noprof+0x5be/0x800
[  196.987761][    C1]  ? __kmalloc_flags_noprof+0x35e/0x800
[  196.987790][    C1]  ? __alloc_empty_sheaf+0x28/0x40
[  196.987817][    C1]  ? __alloc_empty_sheaf+0x28/0x40
[  196.987853][    C1]  __alloc_empty_sheaf+0x28/0x40
[  196.987881][    C1]  __pcs_replace_empty_main+0x430/0x6b0
[  196.987914][    C1]  kmem_cache_alloc_node_noprof+0x42f/0x610
[  196.987943][    C1]  ? local_lock_release+0x9c/0x160
[  196.987965][    C1]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  196.987995][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  196.988016][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  196.988046][    C1]  __alloc_skb+0x1d7/0x7a0
[  196.988069][    C1]  ? __neigh_notify+0x29/0x310
[  196.988097][    C1]  __neigh_notify+0x15c/0x310
[  196.988131][    C1]  neigh_cleanup_and_release+0xae/0x2b0
[  196.988169][    C1]  neigh_remove_one+0x44c/0x4a0
[  196.988207][    C1]  ___neigh_create+0x488/0x22b0
[  196.988260][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.988291][    C1]  ip6_finish_output2+0x6d6/0x13c0
[  196.988330][    C1]  ? ip6_mtu+0x38c/0x490
[  196.988373][    C1]  ? ip6_output+0x11e/0x540
[  196.988405][    C1]  ip6_output+0x337/0x540
[  196.988440][    C1]  ? __pfx_ip6_output+0x10/0x10
[  196.988469][    C1]  ndisc_send_skb+0xcb2/0x1650
[  196.988496][    C1]  ? kmem_cache_alloc_node_noprof+0x1c1/0x610
[  196.988529][    C1]  ? ndisc_send_skb+0x203/0x1650
[  196.988562][    C1]  ? __pfx_ndisc_send_skb+0x10/0x10
[  196.988590][    C1]  ? __pfx_dst_output+0x10/0x10
[  196.988614][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.988656][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.988683][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.988709][    C1]  ? ipv6_get_lladdr+0x378/0x3f0
[  196.988733][    C1]  ? ipv6_get_lladdr+0x2b/0x3f0
[  196.988761][    C1]  addrconf_rs_timer+0x2d2/0x6c0
[  196.988783][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.988809][    C1]  ? lock_acquire+0x106/0x350
[  196.988846][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  196.988870][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  196.988905][    C1]  call_timer_fn+0x192/0x5e0
[  196.988928][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  196.988949][    C1]  ? call_timer_fn+0xd4/0x5e0
[  196.988970][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  196.989003][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  196.989026][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  196.989050][    C1]  __run_timer_base+0x652/0x8b0
[  196.989084][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.989125][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  196.989163][    C1]  ? ktime_get+0x1f5/0x220
[  196.989194][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.989220][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.989254][    C1]  run_timer_softirq+0xb7/0x170
[  196.989289][    C1]  handle_softirqs+0x225/0x840
[  196.989321][    C1]  ? __irq_exit_rcu+0xca/0x220
[  196.989358][    C1]  __irq_exit_rcu+0xca/0x220
[  196.989393][    C1]  irq_exit_rcu+0x9/0x30
[  196.989418][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  196.989444][    C1]  </IRQ>
[  196.989452][    C1]  <TASK>
[  196.989462][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  196.989486][    C1] RIP: 0010:kasan_check_range+0x9/0x2c0
[  196.989522][    C1] Code: c6 5c 42 4b 8e e8 37 9e f3 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 <41> 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d 04 37 49 39
[  196.989542][    C1] RSP: 0018:ffffc90005ddf098 EFLAGS: 00000246
[  196.989561][    C1] RAX: ffffffff81a70dfb RBX: 0000000000000010 RCX: ffffffff81a70e0d
[  196.989580][    C1] RDX: 0000000000000000 RSI: 0000000000000010 RDI: ffffffff8ea56a68
[  196.989595][    C1] RBP: ffffffff8ea56a60 R08: ffffffff8ea56a67 R09: 1ffffffff1d4ad4c
[  196.989612][    C1] R10: dffffc0000000000 R11: fffffbfff1d4ad4d R12: ffffffff81a70e0d
[  196.989629][    C1] R13: 0000000000000003 R14: ffffffff8ea56a68 R15: ffffc90005ddf228
[  196.989648][    C1]  ? desc_read+0x16d/0x3f0
[  196.989673][    C1]  ? desc_read+0x15b/0x3f0
[  196.989692][    C1]  ? desc_read+0x16d/0x3f0
[  196.989719][    C1]  ? __pfx_prb_first_seq+0x10/0x10
[  196.989742][    C1]  __asan_memcpy+0x29/0x70
[  196.989771][    C1]  desc_read+0x16d/0x3f0
[  196.989800][    C1]  _prb_read_valid+0x286/0xa50
[  196.989843][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  196.989869][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.989895][    C1]  ? desc_read+0x194/0x3f0
[  196.989925][    C1]  prb_read_valid+0x3c/0x60
[  196.989949][    C1]  printk_get_next_message+0x18b/0x880
[  196.989987][    C1]  ? __pfx_printk_get_next_message+0x10/0x10
[  196.990014][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  196.990051][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.990085][    C1]  ? console_flush_all+0x493/0xaf0
[  196.990117][    C1]  console_flush_all+0x4e3/0xaf0
[  196.990149][    C1]  ? console_flush_all+0x123/0xaf0
[  196.990181][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  196.990211][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.990237][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  196.990271][    C1]  console_unlock+0xd1/0x1c0
[  196.990294][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.990323][    C1]  ? __pfx_console_unlock+0x10/0x10
[  196.990346][    C1]  ? vprintk_emit+0x2b0/0x560
[  196.990375][    C1]  ? vprintk_emit+0x455/0x560
[  196.990399][    C1]  ? vprintk_emit+0x2cf/0x560
[  196.990420][    C1]  ? vprintk_emit+0x2cf/0x560
[  196.990448][    C1]  vprintk_emit+0x485/0x560
[  196.990475][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  196.990498][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.990526][    C1]  ? __alloc_frozen_pages_noprof+0x12f/0x380
[  196.990569][    C1]  _printk+0xdd/0x130
[  196.990601][    C1]  ? __pfx__printk+0x10/0x10
[  196.990627][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.990653][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  196.990679][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.990705][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  196.990728][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.990754][    C1]  ? ___ratelimit+0x584/0x8e0
[  196.990786][    C1]  slab_out_of_memory+0x91/0x160
[  196.990812][    C1]  ___slab_alloc+0x8ac/0x950
[  196.990843][    C1]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  196.990876][    C1]  kmem_cache_alloc_node_noprof+0x1d9/0x610
[  196.990905][    C1]  ? local_lock_release+0x9c/0x160
[  196.990926][    C1]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  196.990956][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  196.990977][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  196.991009][    C1]  __alloc_skb+0x1d7/0x7a0
[  196.991037][    C1]  nsim_dev_trap_report_work+0x25f/0xb40
[  196.991083][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  196.991111][    C1]  process_scheduled_works+0xa8e/0x14e0
[  196.991174][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  196.991208][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.991234][    C1]  ? assign_work+0x3cf/0x5d0
[  196.991267][    C1]  worker_thread+0xa47/0xfb0
[  196.991324][    C1]  kthread+0x388/0x470
[  196.991359][    C1]  ? __pfx_worker_thread+0x10/0x10
[  196.991390][    C1]  ? __pfx_kthread+0x10/0x10
[  196.991426][    C1]  ret_from_fork+0x514/0xb70
[  196.991465][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  196.991499][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.991525][    C1]  ? __switch_to+0xc89/0x1420
[  196.991557][    C1]  ? __pfx_kthread+0x10/0x10
[  196.991592][    C1]  ret_from_fork_asm+0x1a/0x30
[  196.991633][    C1]  </TASK>
[  196.991646][    C1] FAULT_INJECTION: forcing a failure.
[  196.991646][    C1] name fail_page_alloc, interval 1, probability 100, space 0, times 4
[  196.991645][    C0] CPU: 0 UID: 0 PID: 7620 Comm: syz.5.433 Not tainted syzkaller #0 PREEMPT(full) 
[  196.991673][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  196.991686][    C0] Call Trace:
[  196.991696][    C0]  <IRQ>
[  196.991705][    C0]  dump_stack_lvl+0xe8/0x150
[  196.991739][    C0]  should_fail_ex+0x40c/0x560
[  196.991773][    C0]  prepare_alloc_pages+0x230/0x650
[  196.991814][    C0]  __alloc_frozen_pages_noprof+0x12f/0x380
[  196.991852][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  196.991897][    C0]  ? __pfx_policy_nodemask+0x10/0x10
[  196.991936][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.991969][    C0]  alloc_pages_mpol+0x212/0x380
[  196.992012][    C0]  allocate_slab+0x131/0x5e0
[  196.992040][    C0]  ___slab_alloc+0x16a/0x950
[  196.992075][    C0]  __kmalloc_flags_noprof+0x347/0x800
[  196.992108][    C0]  ? __kmalloc_flags_noprof+0x35e/0x800
[  196.992137][    C0]  ? __alloc_empty_sheaf+0x28/0x40
[  196.992164][    C0]  ? __alloc_empty_sheaf+0x28/0x40
[  196.992199][    C0]  __alloc_empty_sheaf+0x28/0x40
[  196.992227][    C0]  __pcs_replace_empty_main+0x430/0x6b0
[  196.992253][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.992290][    C0]  __kmalloc_flags_noprof+0x5be/0x800
[  196.992323][    C0]  ? __kmalloc_flags_noprof+0x35e/0x800
[  196.992353][    C0]  ? __alloc_empty_sheaf+0x28/0x40
[  196.992379][    C0]  ? __alloc_empty_sheaf+0x28/0x40
[  196.992415][    C0]  __alloc_empty_sheaf+0x28/0x40
[  196.992443][    C0]  __pcs_replace_empty_main+0x430/0x6b0
[  196.992476][    C0]  kmem_cache_alloc_node_noprof+0x42f/0x610
[  196.992505][    C0]  ? local_lock_release+0x9c/0x160
[  196.992525][    C0]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  196.992556][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  196.992576][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  196.992606][    C0]  __alloc_skb+0x1d7/0x7a0
[  196.992633][    C0]  skb_copy+0x19d/0x870
[  196.992661][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.992689][    C0]  ? seqcount_lockdep_reader_access+0xea/0x100
[  196.992729][    C0]  mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760
[  196.992771][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.992817][    C0]  ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10
[  196.992872][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.992898][    C0]  ? ieee80211_beacon_get_tim+0x218/0x2c0
[  196.992935][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.992967][    C0]  mac80211_hwsim_tx_frame+0x199/0x1f0
[  196.993005][    C0]  mac80211_hwsim_beacon_tx+0x396/0x820
[  196.993038][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.993072][    C0]  __iterate_interfaces+0x2af/0x5a0
[  196.993098][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  196.993127][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  196.993154][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  196.993183][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  196.993210][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  196.993234][    C0]  mac80211_hwsim_beacon+0xaf/0x240
[  196.993257][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  196.993281][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  196.993325][    C0]  hrtimer_run_softirq+0x17a/0x240
[  196.993358][    C0]  handle_softirqs+0x225/0x840
[  196.993390][    C0]  ? __irq_exit_rcu+0xca/0x220
[  196.993425][    C0]  __irq_exit_rcu+0xca/0x220
[  196.993454][    C0]  irq_exit_rcu+0x9/0x30
[  196.993479][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  196.993504][    C0]  </IRQ>
[  196.993512][    C0]  <TASK>
[  196.993522][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  196.993547][    C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7
[  196.993573][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc
[  196.993595][    C0] RSP: 0018:ffffc90003b3f340 EFLAGS: 00000293
[  196.993613][    C0] RAX: ffffffff824048ce RBX: 0000000000000001 RCX: ffff88808d9a1f00
[  196.993630][    C0] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000000
[  196.993643][    C0] RBP: ffff88801ec50730 R08: ffff88801ec5077f R09: 1ffff11003d8a0ef
[  196.993660][    C0] R10: dffffc0000000000 R11: ffffed1003d8a0f0 R12: 0000000000000011
[  196.993676][    C0] R13: 0000000000000001 R14: ffff88801ec50778 R15: 0000000000071017
[  196.993700][    C0]  ? page_table_check_clear+0x2be/0x500
[  196.993739][    C0]  srso_alias_return_thunk+0x5/0xfbef5
[  196.993766][    C0]  page_table_check_clear+0x2be/0x500
[  196.993796][    C0]  ? page_table_check_clear+0x124/0x500
[  196.993832][    C0]  __zap_vma_range+0x39bb/0x4f10
[  196.993869][    C0]  ? unwind_get_return_address+0x4d/0x90
[  196.993930][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.993969][    C0]  ? __lock_acquire+0x683/0x2cf0
[  196.994017][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  196.994051][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.994091][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.994122][    C0]  ? unmap_vmas+0x1b9/0x550
[  196.994159][    C0]  unmap_vmas+0x390/0x550
[  196.994201][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  196.994254][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.994286][    C0]  exit_mmap+0x293/0x9f0
[  196.994320][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  196.994373][    C0]  ? __pfx_exit_aio+0x10/0x10
[  196.994414][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.994439][    C0]  ? arch_uprobe_clear_state+0x1c8/0x240
[  196.994478][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.994509][    C0]  ? uprobe_clear_state+0x2ac/0x3e0
[  196.994538][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.994570][    C0]  __mmput+0x118/0x420
[  196.994598][    C0]  exit_mm+0x221/0x2d0
[  196.994635][    C0]  do_exit+0x6cd/0x2360
[  196.994668][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.994701][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.994732][    C0]  ? __pfx_do_exit+0x10/0x10
[  196.994770][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  196.994798][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.994832][    C0]  do_group_exit+0x22d/0x2f0
[  196.994853][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  196.994885][    C0]  get_signal+0x121b/0x12c0
[  196.994938][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  196.994973][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.995001][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  196.995053][    C0]  exit_to_user_mode_loop+0x104/0x730
[  196.995084][    C0]  ? rcu_is_watching+0x15/0xb0
[  196.995117][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.995145][    C0]  do_syscall_64+0x353/0x580
[  196.995170][    C0]  ? trace_irq_disable+0x3b/0x140
[  196.995231][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.995255][    C0] RIP: 0033:0x7f9d0d39de99
[  196.995274][    C0] Code: Unable to access opcode bytes at 0x7f9d0d39de6f.
[  196.995285][    C0] RSP: 002b:00007ffcb9a364a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  196.995307][    C0] RAX: 0000000000000000 RBX: 000000000002dab1 RCX: 00007f9d0d39de99
[  196.995323][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9d0d625fac
[  196.995337][    C0] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000
[  196.995352][    C0] R10: 00007ffcb9a365b0 R11: 0000000000000246 R12: 00007ffcb9a365d0
[  196.995371][    C0] R13: 00007f9d0d625fac R14: 000000000002dae3 R15: 00007ffcb9a365b0
[  196.995406][    C0]  </TASK>
[  196.995418][    C1] CPU: 1 UID: 0 PID: 7074 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) 
[  196.995443][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  196.995459][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  196.995464][    C0] FAULT_INJECTION: forcing a failure.
[  196.995464][    C0] name fail_page_alloc, interval 1, probability 100, space 0, times 2
[  196.995485][    C1] 
[  196.995492][    C1] Call Trace:
[  196.995502][    C1]  <IRQ>
[  196.995511][    C1]  dump_stack_lvl+0xe8/0x150
[  196.995545][    C1]  should_fail_ex+0x40c/0x560
[  196.995579][    C1]  prepare_alloc_pages+0x230/0x650
[  196.995620][    C1]  __alloc_frozen_pages_noprof+0x12f/0x380
[  196.995659][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  196.995698][    C1]  ? __pfx_policy_nodemask+0x10/0x10
[  196.995732][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.995758][    C1]  ? ___slab_alloc+0x8ac/0x950
[  196.995783][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.995809][    C1]  ? rcu_is_watching+0x15/0xb0
[  196.995835][    C1]  alloc_pages_mpol+0x212/0x380
[  196.995877][    C1]  allocate_slab+0x131/0x5e0
[  196.995906][    C1]  ___slab_alloc+0x16a/0x950
[  196.995941][    C1]  __kmalloc_flags_noprof+0x347/0x800
[  196.995974][    C1]  ? __kmalloc_flags_noprof+0x35e/0x800
[  196.996003][    C1]  ? __alloc_empty_sheaf+0x28/0x40
[  196.996030][    C1]  ? __alloc_empty_sheaf+0x28/0x40
[  196.996073][    C1]  __alloc_empty_sheaf+0x28/0x40
[  196.996101][    C1]  __pcs_replace_empty_main+0x430/0x6b0
[  196.996134][    C1]  kmem_cache_alloc_node_noprof+0x42f/0x610
[  196.996163][    C1]  ? local_lock_release+0x9c/0x160
[  196.996183][    C1]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  196.996214][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  196.996234][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  196.996263][    C1]  __alloc_skb+0x1d7/0x7a0
[  196.996286][    C1]  ? __neigh_notify+0x29/0x310
[  196.996314][    C1]  __neigh_notify+0x15c/0x310
[  196.996345][    C1]  neigh_cleanup_and_release+0xae/0x2b0
[  196.996387][    C1]  neigh_remove_one+0x44c/0x4a0
[  196.996425][    C1]  ___neigh_create+0x488/0x22b0
[  196.996479][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.996510][    C1]  ip6_finish_output2+0x6d6/0x13c0
[  196.996550][    C1]  ? ip6_mtu+0x38c/0x490
[  196.996586][    C1]  ? ip6_output+0x11e/0x540
[  196.996619][    C1]  ip6_output+0x337/0x540
[  196.996654][    C1]  ? __pfx_ip6_output+0x10/0x10
[  196.996684][    C1]  ndisc_send_skb+0xcb2/0x1650
[  196.996710][    C1]  ? kmem_cache_alloc_node_noprof+0x1c1/0x610
[  196.996743][    C1]  ? ndisc_send_skb+0x203/0x1650
[  196.996777][    C1]  ? __pfx_ndisc_send_skb+0x10/0x10
[  196.996805][    C1]  ? __pfx_dst_output+0x10/0x10
[  196.996829][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.996871][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.996898][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.996924][    C1]  ? ipv6_get_lladdr+0x378/0x3f0
[  196.996949][    C1]  ? ipv6_get_lladdr+0x2b/0x3f0
[  196.996977][    C1]  addrconf_rs_timer+0x2d2/0x6c0
[  196.996999][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.997025][    C1]  ? lock_acquire+0x106/0x350
[  196.997060][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  196.997084][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  196.997119][    C1]  call_timer_fn+0x192/0x5e0
[  196.997141][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  196.997162][    C1]  ? call_timer_fn+0xd4/0x5e0
[  196.997183][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  196.997217][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  196.997239][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  196.997263][    C1]  __run_timer_base+0x652/0x8b0
[  196.997296][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.997338][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  196.997382][    C1]  ? ktime_get+0x1f5/0x220
[  196.997413][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.997439][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.997473][    C1]  run_timer_softirq+0xb7/0x170
[  196.997508][    C1]  handle_softirqs+0x225/0x840
[  196.997539][    C1]  ? __irq_exit_rcu+0xca/0x220
[  196.997575][    C1]  __irq_exit_rcu+0xca/0x220
[  196.997604][    C1]  irq_exit_rcu+0x9/0x30
[  196.997633][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  196.997658][    C1]  </IRQ>
[  196.997666][    C1]  <TASK>
[  196.997676][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  196.997700][    C1] RIP: 0010:kasan_check_range+0x9/0x2c0
[  196.997736][    C1] Code: c6 5c 42 4b 8e e8 37 9e f3 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 <41> 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d 04 37 49 39
[  196.997760][    C1] RSP: 0018:ffffc90005ddf098 EFLAGS: 00000246
[  196.997778][    C1] RAX: ffffffff81a70dfb RBX: 0000000000000010 RCX: ffffffff81a70e0d
[  196.997794][    C1] RDX: 0000000000000000 RSI: 0000000000000010 RDI: ffffffff8ea56a68
[  196.997809][    C1] RBP: ffffffff8ea56a60 R08: ffffffff8ea56a67 R09: 1ffffffff1d4ad4c
[  196.997826][    C1] R10: dffffc0000000000 R11: fffffbfff1d4ad4d R12: ffffffff81a70e0d
[  196.997843][    C1] R13: 0000000000000003 R14: ffffffff8ea56a68 R15: ffffc90005ddf228
[  196.997861][    C1]  ? desc_read+0x16d/0x3f0
[  196.997886][    C1]  ? desc_read+0x15b/0x3f0
[  196.997905][    C1]  ? desc_read+0x16d/0x3f0
[  196.997932][    C1]  ? __pfx_prb_first_seq+0x10/0x10
[  196.997955][    C1]  __asan_memcpy+0x29/0x70
[  196.997985][    C1]  desc_read+0x16d/0x3f0
[  196.998013][    C1]  _prb_read_valid+0x286/0xa50
[  196.998055][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  196.998082][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.998108][    C1]  ? desc_read+0x194/0x3f0
[  196.998137][    C1]  prb_read_valid+0x3c/0x60
[  196.998162][    C1]  printk_get_next_message+0x18b/0x880
[  196.998199][    C1]  ? __pfx_printk_get_next_message+0x10/0x10
[  196.998227][    C1]  ? __pfx__prb_read_valid+0x10/0x10
[  196.998263][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.998298][    C1]  ? console_flush_all+0x493/0xaf0
[  196.998330][    C1]  console_flush_all+0x4e3/0xaf0
[  196.998368][    C1]  ? console_flush_all+0x123/0xaf0
[  196.998400][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  196.998431][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.998457][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  196.998492][    C1]  console_unlock+0xd1/0x1c0
[  196.998515][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.998544][    C1]  ? __pfx_console_unlock+0x10/0x10
[  196.998566][    C1]  ? vprintk_emit+0x2b0/0x560
[  196.998591][    C1]  ? vprintk_emit+0x455/0x560
[  196.998614][    C1]  ? vprintk_emit+0x2cf/0x560
[  196.998635][    C1]  ? vprintk_emit+0x2cf/0x560
[  196.998661][    C1]  vprintk_emit+0x485/0x560
[  196.998687][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  196.998711][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.998737][    C1]  ? __alloc_frozen_pages_noprof+0x12f/0x380
[  196.998779][    C1]  _printk+0xdd/0x130
[  196.998811][    C1]  ? __pfx__printk+0x10/0x10
[  196.998837][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.998863][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  196.998888][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.998914][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  196.998937][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.998963][    C1]  ? ___ratelimit+0x584/0x8e0
[  196.998994][    C1]  slab_out_of_memory+0x91/0x160
[  196.999022][    C1]  ___slab_alloc+0x8ac/0x950
[  196.999052][    C1]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  196.999085][    C1]  kmem_cache_alloc_node_noprof+0x1d9/0x610
[  196.999114][    C1]  ? local_lock_release+0x9c/0x160
[  196.999134][    C1]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  196.999165][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  196.999186][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  196.999215][    C1]  __alloc_skb+0x1d7/0x7a0
[  196.999242][    C1]  nsim_dev_trap_report_work+0x25f/0xb40
[  196.999288][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  196.999316][    C1]  process_scheduled_works+0xa8e/0x14e0
[  196.999379][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  196.999413][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.999439][    C1]  ? assign_work+0x3cf/0x5d0
[  196.999472][    C1]  worker_thread+0xa47/0xfb0
[  196.999530][    C1]  kthread+0x388/0x470
[  196.999563][    C1]  ? __pfx_worker_thread+0x10/0x10
[  196.999590][    C1]  ? __pfx_kthread+0x10/0x10
[  196.999625][    C1]  ret_from_fork+0x514/0xb70
[  196.999663][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  196.999698][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  196.999724][    C1]  ? __switch_to+0xc89/0x1420
[  196.999757][    C1]  ? __pfx_kthread+0x10/0x10
[  196.999792][    C1]  ret_from_fork_asm+0x1a/0x30
[  196.999832][    C1]  </TASK>
[  196.999843][    C0] CPU: 0 UID: 0 PID: 7620 Comm: syz.5.433 Not tainted syzkaller #0 PREEMPT(full) 
[  196.999874][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  196.999888][    C0] Call Trace:
[  196.999897][    C0]  <IRQ>
[  196.999906][    C0]  dump_stack_lvl+0xe8/0x150
[  196.999942][    C0]  should_fail_ex+0x40c/0x560
[  196.999978][    C0]  prepare_alloc_pages+0x230/0x650
[  197.000019][    C0]  __alloc_frozen_pages_noprof+0x12f/0x380
[  197.000060][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  197.000101][    C0]  ? __pfx_policy_nodemask+0x10/0x10
[  197.000139][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.000167][    C0]  ? ___slab_alloc+0x8ac/0x950
[  197.000194][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.000222][    C0]  ? rcu_is_watching+0x15/0xb0
[  197.000250][    C0]  alloc_pages_mpol+0x212/0x380
[  197.000295][    C0]  allocate_slab+0x131/0x5e0
[  197.000326][    C0]  ___slab_alloc+0x16a/0x950
[  197.000364][    C0]  __kmalloc_flags_noprof+0x347/0x800
[  197.000396][    C0]  ? __kmalloc_flags_noprof+0x35e/0x800
[  197.000424][    C0]  ? __alloc_empty_sheaf+0x28/0x40
[  197.000451][    C0]  ? __alloc_empty_sheaf+0x28/0x40
[  197.000511][    C0]  __alloc_empty_sheaf+0x28/0x40
[  197.000542][    C0]  __pcs_replace_empty_main+0x430/0x6b0
[  197.000578][    C0]  kmem_cache_alloc_node_noprof+0x42f/0x610
[  197.000610][    C0]  ? local_lock_release+0x9c/0x160
[  197.000632][    C0]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  197.000666][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  197.000689][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  197.000722][    C0]  __alloc_skb+0x1d7/0x7a0
[  197.000752][    C0]  skb_copy+0x19d/0x870
[  197.000782][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.000811][    C0]  ? seqcount_lockdep_reader_access+0xea/0x100
[  197.000870][    C0]  mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760
[  197.000915][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.000963][    C0]  ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10
[  197.001013][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.001046][    C0]  ? ieee80211_beacon_get_tim+0x218/0x2c0
[  197.001086][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.001122][    C0]  mac80211_hwsim_tx_frame+0x199/0x1f0
[  197.001165][    C0]  mac80211_hwsim_beacon_tx+0x396/0x820
[  197.001200][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.001238][    C0]  __iterate_interfaces+0x2af/0x5a0
[  197.001266][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  197.001298][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  197.001332][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  197.001363][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  197.001392][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  197.001419][    C0]  mac80211_hwsim_beacon+0xaf/0x240
[  197.001447][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  197.001473][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  197.001521][    C0]  hrtimer_run_softirq+0x17a/0x240
[  197.001554][    C0]  handle_softirqs+0x225/0x840
[  197.001588][    C0]  ? __irq_exit_rcu+0xca/0x220
[  197.001624][    C0]  __irq_exit_rcu+0xca/0x220
[  197.001655][    C0]  irq_exit_rcu+0x9/0x30
[  197.001684][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  197.001715][    C0]  </IRQ>
[  197.001724][    C0]  <TASK>
[  197.001734][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  197.001761][    C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7
[  197.001789][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc
[  197.001809][    C0] RSP: 0018:ffffc90003b3f340 EFLAGS: 00000293
[  197.001831][    C0] RAX: ffffffff824048ce RBX: 0000000000000001 RCX: ffff88808d9a1f00
[  197.001849][    C0] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000000
[  197.001870][    C0] RBP: ffff88801ec50730 R08: ffff88801ec5077f R09: 1ffff11003d8a0ef
[  197.001894][    C0] R10: dffffc0000000000 R11: ffffed1003d8a0f0 R12: 0000000000000011
[  197.001912][    C0] R13: 0000000000000001 R14: ffff88801ec50778 R15: 0000000000071017
[  197.001942][    C0]  ? page_table_check_clear+0x2be/0x500
[  197.001985][    C0]  srso_alias_return_thunk+0x5/0xfbef5
[  197.002019][    C0]  page_table_check_clear+0x2be/0x500
[  197.002055][    C0]  ? page_table_check_clear+0x124/0x500
[  197.002095][    C0]  __zap_vma_range+0x39bb/0x4f10
[  197.002134][    C0]  ? unwind_get_return_address+0x4d/0x90
[  197.002182][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.002228][    C0]  ? __lock_acquire+0x683/0x2cf0
[  197.002281][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  197.002321][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.002358][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.002393][    C0]  ? unmap_vmas+0x1b9/0x550
[  197.002433][    C0]  unmap_vmas+0x390/0x550
[  197.002481][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  197.002540][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.002577][    C0]  exit_mmap+0x293/0x9f0
[  197.002611][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  197.002673][    C0]  ? __pfx_exit_aio+0x10/0x10
[  197.002717][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.002746][    C0]  ? arch_uprobe_clear_state+0x1c8/0x240
[  197.002788][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.002817][    C0]  ? uprobe_clear_state+0x2ac/0x3e0
[  197.002848][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.002887][    C0]  __mmput+0x118/0x420
[  197.002921][    C0]  exit_mm+0x221/0x2d0
[  197.002962][    C0]  do_exit+0x6cd/0x2360
[  197.002999][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.003035][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.003066][    C0]  ? __pfx_do_exit+0x10/0x10
[  197.003108][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  197.003139][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.003177][    C0]  do_group_exit+0x22d/0x2f0
[  197.003199][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.003229][    C0]  get_signal+0x121b/0x12c0
[  197.003284][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  197.003320][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.003350][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  197.003408][    C0]  exit_to_user_mode_loop+0x104/0x730
[  197.003442][    C0]  ? rcu_is_watching+0x15/0xb0
[  197.003468][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.003496][    C0]  do_syscall_64+0x353/0x580
[  197.003524][    C0]  ? trace_irq_disable+0x3b/0x140
[  197.003563][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.003589][    C0] RIP: 0033:0x7f9d0d39de99
[  197.003610][    C0] Code: Unable to access opcode bytes at 0x7f9d0d39de6f.
[  197.003623][    C0] RSP: 002b:00007ffcb9a364a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  197.003647][    C0] RAX: 0000000000000000 RBX: 000000000002dab1 RCX: 00007f9d0d39de99
[  197.003664][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9d0d625fac
[  197.003681][    C0] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000
[  197.003698][    C0] R10: 00007ffcb9a365b0 R11: 0000000000000246 R12: 00007ffcb9a365d0
[  197.003716][    C0] R13: 00007f9d0d625fac R14: 000000000002dae3 R15: 00007ffcb9a365b0
[  197.003754][    C0]  </TASK>
[  197.032569][ T5637] Bluetooth: hci17: command tx timeout
[  197.032662][ T5637] Bluetooth: hci18: command tx timeout
[  197.099593][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[  197.099626][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  197.099643][    T9] Workqueue: mld mld_dad_work
[  197.099682][    T9] Call Trace:
[  197.099692][    T9]  <TASK>
[  197.099704][    T9]  dump_stack_lvl+0xe8/0x150
[  197.099745][    T9]  should_fail_ex+0x40c/0x560
[  197.099785][    T9]  should_failslab+0xa8/0x100
[  197.099826][    T9]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  197.099859][    T9]  ? local_lock_release+0x9c/0x160
[  197.099887][    T9]  ? __alloc_skb+0x1d7/0x7a0
[  197.099916][    T9]  ? __alloc_skb+0x1d7/0x7a0
[  197.099949][    T9]  __alloc_skb+0x1d7/0x7a0
[  197.099983][    T9]  mld_newpack+0x165/0xcb0
[  197.100031][    T9]  ? __pfx_mld_newpack+0x10/0x10
[  197.100066][    T9]  ? trace_contention_end+0x3d/0x140
[  197.100097][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.100130][    T9]  ? __mutex_lock+0x30d/0x1550
[  197.100164][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.100199][    T9]  add_grec+0x119f/0x19d0
[  197.100240][    T9]  ? __pfx___mutex_lock+0x10/0x10
[  197.100280][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.100314][    T9]  mld_send_initial_cr+0x288/0x550
[  197.100352][    T9]  mld_dad_work+0x3d/0x480
[  197.100458][    T9]  ? process_scheduled_works+0xa20/0x14e0
[  197.100489][    T9]  process_scheduled_works+0xa8e/0x14e0
[  197.100553][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[  197.100591][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.100623][    T9]  ? assign_work+0x3cf/0x5d0
[  197.100659][    T9]  worker_thread+0xa47/0xfb0
[  197.100723][    T9]  kthread+0x388/0x470
[  197.100760][    T9]  ? __pfx_worker_thread+0x10/0x10
[  197.100789][    T9]  ? __pfx_kthread+0x10/0x10
[  197.100828][    T9]  ret_from_fork+0x514/0xb70
[  197.100870][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  197.100907][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.100936][    T9]  ? __switch_to+0xc89/0x1420
[  197.100972][    T9]  ? __pfx_kthread+0x10/0x10
[  197.101011][    T9]  ret_from_fork_asm+0x1a/0x30
[  197.101056][    T9]  </TASK>
[  197.239103][ T7615] CPU: 0 UID: 0 PID: 7615 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  197.239137][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  197.239152][ T7615] Call Trace:
[  197.239163][ T7615]  <TASK>
[  197.239173][ T7615]  dump_stack_lvl+0xe8/0x150
[  197.239217][ T7615]  should_fail_ex+0x40c/0x560
[  197.239255][ T7615]  prepare_alloc_pages+0x230/0x650
[  197.239302][ T7615]  __alloc_frozen_pages_noprof+0x12f/0x380
[  197.239344][ T7615]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  197.239393][ T7615]  ? __pfx_policy_nodemask+0x10/0x10
[  197.239445][ T7615]  alloc_pages_mpol+0x212/0x380
[  197.239492][ T7615]  alloc_pages_noprof+0xac/0x2a0
[  197.239519][ T7615]  get_free_pages_noprof+0xf/0x80
[  197.239559][ T7615]  __kasan_populate_vmalloc+0x38/0x1c0
[  197.239591][ T7615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.239621][ T7615]  ? do_raw_spin_unlock+0xf5/0x210
[  197.239657][ T7615]  alloc_vmap_area+0xd1a/0x1420
[  197.239704][ T7615]  ? __pfx_alloc_vmap_area+0x10/0x10
[  197.239732][ T7615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.239761][ T7615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.239791][ T7615]  ? __kmalloc_cache_node_noprof+0x1f2/0x630
[  197.239826][ T7615]  ? __get_vm_area_node+0x136/0x300
[  197.239854][ T7615]  ? __get_vm_area_node+0x136/0x300
[  197.239889][ T7615]  __get_vm_area_node+0x1f2/0x300
[  197.239926][ T7615]  __vmalloc_node_range_noprof+0x358/0x1730
[  197.239961][ T7615]  ? kcov_ioctl+0x55/0x630
[  197.239995][ T7615]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  197.240028][ T7615]  ? __asan_memset+0x22/0x50
[  197.240066][ T7615]  ? hook_file_ioctl+0x1f0/0x5f0
[  197.240104][ T7615]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  197.240150][ T7615]  ? __pfx_kcov_ioctl+0x10/0x10
[  197.240182][ T7615]  vmalloc_user_noprof+0xad/0xe0
[  197.240214][ T7615]  ? kcov_ioctl+0x55/0x630
[  197.240246][ T7615]  kcov_ioctl+0x55/0x630
[  197.240277][ T7615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.240306][ T7615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.240336][ T7615]  ? __pfx_kcov_ioctl+0x10/0x10
[  197.240372][ T7615]  __se_sys_ioctl+0xfc/0x170
[  197.240400][ T7615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.240427][ T7615]  do_syscall_64+0x174/0x580
[  197.240457][ T7615]  ? trace_irq_disable+0x3b/0x140
[  197.240496][ T7615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.240522][ T7615] RIP: 0033:0x7f9ef519db2b
[  197.240545][ T7615] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  197.240565][ T7615] RSP: 002b:00007ffedd19beb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  197.240591][ T7615] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f9ef519db2b
[  197.240609][ T7615] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9
[  197.240625][ T7615] RBP: 00007f9ef5426128 R08: 0000000000000000 R09: 0000000000000000
[  197.240641][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.240656][ T7615] R13: 0000000000000003 R14: 00007ffedd19c168 R15: 0000000000000000
[  197.240693][ T7615]  </TASK>
[  197.240905][ T7615] syz-executor: vmalloc error: size 4194304, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  197.241431][ T7074]   cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0
[  197.241461][ T7074]   node 0: slabs: 2344, objs: 28128, free: 40
[  197.265497][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) 
[  197.265528][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  197.265545][ T7174] Workqueue: ipv6_addrconf addrconf_dad_work
[  197.265583][ T7174] Call Trace:
[  197.265593][ T7174]  <TASK>
[  197.265604][ T7174]  dump_stack_lvl+0xe8/0x150
[  197.265644][ T7174]  should_fail_ex+0x40c/0x560
[  197.265684][ T7174]  should_failslab+0xa8/0x100
[  197.265725][ T7174]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  197.265758][ T7174]  ? local_lock_release+0x9c/0x160
[  197.265786][ T7174]  ? __alloc_skb+0x1d7/0x7a0
[  197.265809][ T7174]  ? __alloc_skb+0x1d7/0x7a0
[  197.265842][ T7174]  __alloc_skb+0x1d7/0x7a0
[  197.265872][ T7174]  inet6_ifmcaddr_notify+0xfa/0x1e0
[  197.265904][ T7174]  ? __pfx_inet6_ifmcaddr_notify+0x10/0x10
[  197.265941][ T7174]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.265971][ T7174]  ? mld_del_delrec+0x1af/0xc90
[  197.266003][ T7174]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.266035][ T7174]  ? __ipv6_dev_mc_inc+0x540/0xa40
[  197.266073][ T7174]  __ipv6_dev_mc_inc+0x8a0/0xa40
[  197.266119][ T7174]  addrconf_dad_work+0x3fc/0x15c0
[  197.266164][ T7174]  ? __pfx_addrconf_dad_work+0x10/0x10
[  197.266199][ T7174]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.266237][ T7174]  ? rcu_is_watching+0x15/0xb0
[  197.266263][ T7174]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.266295][ T7174]  ? process_scheduled_works+0xa20/0x14e0
[  197.266326][ T7174]  process_scheduled_works+0xa8e/0x14e0
[  197.266395][ T7174]  ? __pfx_process_scheduled_works+0x10/0x10
[  197.266433][ T7174]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.266462][ T7174]  ? assign_work+0x3cf/0x5d0
[  197.266498][ T7174]  worker_thread+0xa47/0xfb0
[  197.266562][ T7174]  kthread+0x388/0x470
[  197.266602][ T7174]  ? __pfx_worker_thread+0x10/0x10
[  197.266634][ T7174]  ? __pfx_kthread+0x10/0x10
[  197.266673][ T7174]  ret_from_fork+0x514/0xb70
[  197.266716][ T7174]  ? __pfx_ret_from_fork+0x10/0x10
[  197.266753][ T7174]  ? srso_alias_return_thunk+0x5/0xfbef5
[  197.266782][ T7174]  ? __switch_to+0xc89/0x1420
[  197.266818][ T7174]  ? __pfx_kthread+0x10/0x10
[  197.266857][ T7174]  ret_from_fork_asm+0x1a/0x30
[  197.266902][ T7174]  </TASK>
[  197.302912][ T7500] veth0_vlan: entered promiscuous mode
[  197.310659][ T7074]   node 1: slabs: 0, objs: 0, free: 0
[  197.316823][ T7615] ,cpuset=
[  197.392079][ T7500] veth1_vlan: entered promiscuous mode
[  197.641065][ T7615] /
[  197.852971][ T7500] veth0_macvtap: entered promiscuous mode
[  198.049103][ T7615] ,mems_allowed=0-1
[  198.154054][ T7500] veth1_macvtap: entered promiscuous mode
[  198.209619][ T7615] 
[  198.328622][ T5637] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  198.414003][ T7500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.429357][ T5637] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  198.460969][ T7500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.467682][ T5637] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  198.541164][ T7177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.550224][ T5637] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  198.565210][ T7177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.566839][ T5637] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  198.656002][ T7615] CPU: 0 UID: 0 PID: 7615 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  198.656035][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  198.656051][ T7615] Call Trace:
[  198.656062][ T7615]  <TASK>
[  198.656073][ T7615]  dump_stack_lvl+0xe8/0x150
[  198.656117][ T7615]  warn_alloc+0x24c/0x270
[  198.656153][ T7615]  ? kasan_quarantine_put+0xbb/0x1f0
[  198.656192][ T7615]  ? __pfx_warn_alloc+0x10/0x10
[  198.656228][ T7615]  ? __get_vm_area_node+0x20b/0x300
[  198.656264][ T7615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.656293][ T7615]  ? __get_vm_area_node+0x20b/0x300
[  198.656337][ T7615]  __vmalloc_node_range_noprof+0x37d/0x1730
[  198.656371][ T7615]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  198.656404][ T7615]  ? __asan_memset+0x22/0x50
[  198.656442][ T7615]  ? hook_file_ioctl+0x1f0/0x5f0
[  198.656480][ T7615]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  198.656526][ T7615]  ? __pfx_kcov_ioctl+0x10/0x10
[  198.656559][ T7615]  vmalloc_user_noprof+0xad/0xe0
[  198.656595][ T7615]  ? kcov_ioctl+0x55/0x630
[  198.656627][ T7615]  kcov_ioctl+0x55/0x630
[  198.656658][ T7615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.656687][ T7615]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.656717][ T7615]  ? __pfx_kcov_ioctl+0x10/0x10
[  198.656749][ T7615]  __se_sys_ioctl+0xfc/0x170
[  198.656776][ T7615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.656804][ T7615]  do_syscall_64+0x174/0x580
[  198.656833][ T7615]  ? trace_irq_disable+0x3b/0x140
[  198.656873][ T7615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.656899][ T7615] RIP: 0033:0x7f9ef519db2b
[  198.656922][ T7615] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  198.656943][ T7615] RSP: 002b:00007ffedd19beb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  198.656969][ T7615] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f9ef519db2b
[  198.656987][ T7615] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9
[  198.657004][ T7615] RBP: 00007f9ef5426128 R08: 0000000000000000 R09: 0000000000000000
[  198.657020][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.657035][ T7615] R13: 0000000000000003 R14: 00007ffedd19c168 R15: 0000000000000000
[  198.657072][ T7615]  </TASK>
[  198.657094][ T7615] Mem-Info:
[  198.823986][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.435'.
[  198.890097][ T7615] active_anon:11224 inactive_anon:0 isolated_anon:0
[  198.890097][ T7615]  active_file:0 inactive_file:43943 isolated_file:0
[  198.890097][ T7615]  unevictable:768 dirty:82 writeback:0
[  198.890097][ T7615]  slab_reclaimable:13333 slab_unreclaimable:147090
[  198.890097][ T7615]  mapped:133044 shmem:1287 pagetables:1959
[  198.890097][ T7615]  sec_pagetables:0 bounce:0
[  198.890097][ T7615]  kernel_misc_reclaimable:0
[  198.890097][ T7615]  free:1092127 free_pcp:9556 free_cma:0
[  199.019468][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.435'.
[  199.023588][ T7615] Node 0 active_anon:44896kB inactive_anon:0kB active_file:0kB inactive_file:175568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:532176kB dirty:324kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19228kB pagetables:7696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  199.098406][ T5637] Bluetooth: hci18: command tx timeout
[  199.104517][ T7615] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  199.107069][ T5637] Bluetooth: hci17: command tx timeout
[  199.111999][ T7615] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  200.748666][ T5637] Bluetooth: hci19: command tx timeout
[  200.778088][ T7615] lowmem_reserve[]:
[  201.155841][ T5637] Bluetooth: hci18: command tx timeout
[  201.945426][    C1] tipc: RX(ac1414aa): key[1] is activated
[  201.974418][ T7615]  0
[  202.000722][ T7177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.008352][ T7615]  2488 2489 2489 2489
[  202.008401][ T7615] Node 0 DMA32 free:399284kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44708kB inactive_anon:0kB active_file:0kB inactive_file:175568kB unevictable:1536kB writepending:324kB zspages:0kB present:3129332kB managed:2548588kB mlocked:0kB bounce:0kB free_pcp:38992kB local_pcp:19828kB free_cma:0kB
[  202.008479][ T7615] lowmem_reserve[]: 0 0 0 0 0
[  202.008533][ T7615] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  202.008603][ T7615] lowmem_reserve[]: 0 0 0 0 0
[  202.008658][ T7615] Node 1 Normal free:3943024kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2956kB local_pcp:0kB free_cma:0kB
[  202.008732][ T7615] lowmem_reserve[]: 0 0
[  202.245160][ T7615]  0
[  202.341283][ T7365] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.383922][ T7615]  0
[  202.824602][ T7365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.856192][ T7615]  0
[  203.220561][ T5637] Bluetooth: hci19: command tx timeout
[  203.232204][ T5637] Bluetooth: hci18: command tx timeout
[  203.247992][ T7615] 
[  203.257448][ T7615] Node 0 
[  203.309083][ T7365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.314569][ T7615] DMA: 
[  203.378329][ T7365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.162278][ T7615] 0*4kB 
[  204.252079][ T7365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.295108][ T7615] 0*8kB 
[  204.557831][ T7610] lo speed is unknown, defaulting to 1000
[  204.641723][ T7615] 0*16kB 
[  205.305571][ T5637] Bluetooth: hci19: command tx timeout
[  205.307594][ T7656] loop5: detected capacity change from 0 to 4096
[  205.313988][ T7615] 0*32kB 
[  205.323963][ T7656] ntfs3: Unknown parameter '@'
[  205.354210][ T7615] 0*64kB 
[  205.518863][   T50] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  205.522550][   T50] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  205.670138][ T7615] 0*128kB 
[  205.695693][   T50] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  205.830056][ T7615] 0*256kB 
[  206.116455][   T50] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  206.120173][ T7615] 0*512kB 
[  206.128691][   T50] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  206.141989][ T7615] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  206.142069][ T7615] Node 0 DMA32: 1*4kB (M) 2*8kB (ME) 2*16kB (ME) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 81*4096kB (M) = 338516kB
[  206.142309][ T7615] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  206.142464][ T7615] Node 1 Normal: 0*4kB 2*8kB (UM) 
[  207.379776][ T5637] Bluetooth: hci19: command tx timeout
[  207.405722][ T7615] 1*16kB 
[  207.725248][ T7625] lo speed is unknown, defaulting to 1000
[  207.811541][ T7615] (M) 
[  208.053404][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.055890][ T7615] 2*32kB 
[  208.117917][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.121547][ T7610] bridge_slave_0: entered allmulticast mode
[  208.131441][ T7615] (UM) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3943328kB
[  208.131611][ T7615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  208.131636][ T7615] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  208.131660][ T7615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  208.131684][ T7615] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  208.131708][ T7615] 45250 total pagecache pages
[  208.131722][ T7615] 0 pages in swap cache
[  208.131733][ T7615] Free swap  = 124996kB
[  208.131746][ T7615] Total swap = 124996kB
[  208.131760][ T7615] 2097051 pages RAM
[  208.131772][ T7615] 0 pages HighMem/MovableOnly
[  208.131784][ T7615] 428224 pages reserved
[  208.131796][ T7615] 0 pages cma reserved
[  208.266782][ T5637] Bluetooth: hci20: command tx timeout
[  209.023453][ T7610] bridge_slave_0: entered promiscuous mode
[  209.389512][ T4936] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  211.144135][ T5638] Bluetooth: hci1: command 0x0406 tx timeout
[  211.180170][ T4936] Bluetooth: hci3: command 0x0406 tx timeout
[  211.191365][ T5641] Bluetooth: hci0: command 0x0406 tx timeout
[  211.202170][ T4936] Bluetooth: hci20: command tx timeout
[  211.202204][ T4936] Bluetooth: hci5: command 0x0406 tx timeout
[  211.202235][ T4936] Bluetooth: hci2: command 0x0406 tx timeout
[  211.202265][ T4936] Bluetooth: hci4: command 0x0406 tx timeout
[  211.242082][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.256179][ T5641] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  211.268723][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.273077][ T5641] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  211.294596][ T7610] bridge_slave_1: entered allmulticast mode
[  211.321635][ T5641] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  211.328619][ T7610] bridge_slave_1: entered promiscuous mode
[  211.336166][ T5641] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  213.217744][ T5631] Bluetooth: hci20: command tx timeout
[  222.627314][ T7698] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  224.656681][ T5641] Bluetooth: hci22: Opcode 0x0c03 failed: -110
[  224.735841][ T5637] Bluetooth: hci20: command tx timeout
[  224.782790][ T5641] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  226.815770][ T7713] Bluetooth: hci22: Opcode 0x0c03 failed: -110
[  227.477070][ T5626] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[  229.495588][ T5641] Bluetooth: hci23: Opcode 0x0c03 failed: -110
[  229.618686][ T5642] Bluetooth: hci21: command tx timeout
[  229.984692][ T5639] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[  230.002452][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.025444][ T5639] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[  230.029640][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.045042][ T5639] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[  230.053233][ T5639] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[  230.061692][ T5639] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[  230.284359][ T7610] team0: Port device team_slave_0 added
[  230.320034][ T7610] team0: Port device team_slave_1 added
[  230.592381][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.610139][ T5639] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  230.620809][ T5639] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[  230.637158][ T5639] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[  230.648818][ T5639] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[  230.658372][ T5639] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[  230.670374][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.699324][ T7610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.717733][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.725683][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.759160][ T7610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.975062][ T7610] hsr_slave_0: entered promiscuous mode
[  230.998766][ T7610] hsr_slave_1: entered promiscuous mode
[  231.021060][ T7610] debugfs: 'hsr0' already exists in 'hsr'
[  231.030212][ T7610] Cannot create hsr debugfs directory
[  231.055582][ T7658] lo speed is unknown, defaulting to 1000
[  231.514242][ T7075] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.695687][ T5639] Bluetooth: hci21: command tx timeout
[  231.821918][ T7075] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.853085][ T7693] lo speed is unknown, defaulting to 1000
[  232.023800][ T7075] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.098536][ T5639] Bluetooth: hci23: command tx timeout
[  232.300914][ T7075] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.326256][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.333640][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.344157][ T7625] bridge_slave_0: entered allmulticast mode
[  232.351993][ T7625] bridge_slave_0: entered promiscuous mode
[  232.417136][ T7610] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.443006][ T7717] lo speed is unknown, defaulting to 1000
[  232.459995][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.490426][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.498471][ T7625] bridge_slave_1: entered allmulticast mode
[  232.510168][ T7625] bridge_slave_1: entered promiscuous mode
[  232.675733][ T7610] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.738697][ T5639] Bluetooth: hci22: command tx timeout
[  232.761536][ T7625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.811726][ T7625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.888116][ T7610] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.957795][ T7730] lo speed is unknown, defaulting to 1000
[  233.100119][ T7625] team0: Port device team_slave_0 added
[  233.127289][ T7610] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.218676][ T7625] team0: Port device team_slave_1 added
[  233.407655][ T7075] bridge_slave_1: left allmulticast mode
[  233.413808][ T7075] bridge_slave_1: left promiscuous mode
[  233.435795][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.453197][ T7075] bridge_slave_0: left allmulticast mode
[  233.458965][ T7075] bridge_slave_0: left promiscuous mode
[  233.465873][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.654635][ T7075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.667729][ T7075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.679445][ T7075] bond0 (unregistering): Released all slaves
[  233.721709][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.729308][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.758557][ T7625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.787153][ T5639] Bluetooth: hci21: command tx timeout
[  233.874125][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.881166][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.911856][ T7625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.178634][ T5639] Bluetooth: hci23: command tx timeout
[  234.279351][ T7625] hsr_slave_0: entered promiscuous mode
[  234.286734][ T7625] hsr_slave_1: entered promiscuous mode
[  234.292970][ T7625] debugfs: 'hsr0' already exists in 'hsr'
[  234.298894][ T7625] Cannot create hsr debugfs directory
[  234.311225][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.322000][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.329625][ T7658] bridge_slave_0: entered allmulticast mode
[  234.338234][ T7658] bridge_slave_0: entered promiscuous mode
[  234.347498][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.354624][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.363392][ T7658] bridge_slave_1: entered allmulticast mode
[  234.371487][ T7658] bridge_slave_1: entered promiscuous mode
[  234.747846][ T7610] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  234.774908][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  234.788530][ T7610] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  234.823100][ T5639] Bluetooth: hci22: command tx timeout
[  234.851681][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  234.893054][ T7658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.947905][ T7658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.153937][ T7610] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  235.202900][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  235.321946][ T7610] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  235.338214][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  235.377091][ T7075] hsr_slave_0: left promiscuous mode
[  235.383543][ T7075] hsr_slave_1: left promiscuous mode
[  235.392065][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.402502][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.410895][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.418399][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.434972][ T7075] veth1_macvtap: left promiscuous mode
[  235.441263][ T7075] veth0_macvtap: left promiscuous mode
[  235.452337][ T7075] veth1_vlan: left promiscuous mode
[  235.457747][ T7075] veth0_vlan: left promiscuous mode
[  235.704582][ T7075] team0 (unregistering): Port device team_slave_1 removed
[  235.722685][ T7075] team0 (unregistering): Port device team_slave_0 removed
[  235.871922][ T5639] Bluetooth: hci21: command tx timeout
[  235.953838][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[  235.972696][ T7658] team0: Port device team_slave_0 added
[  235.983049][ T7658] team0: Port device team_slave_1 added
[  236.095104][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.105076][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.132555][ T7658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.210591][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.221596][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.248420][ T7658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.270500][ T5639] Bluetooth: hci23: command tx timeout
[  236.277290][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.284476][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.293277][ T7693] bridge_slave_0: entered allmulticast mode
[  236.301691][ T7693] bridge_slave_0: entered promiscuous mode
[  236.310294][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.317710][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.324921][ T7693] bridge_slave_1: entered allmulticast mode
[  236.333555][ T7693] bridge_slave_1: entered promiscuous mode
[  236.505635][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.583543][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.607774][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.615068][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.622651][ T7717] bridge_slave_0: entered allmulticast mode
[  236.635072][ T7717] bridge_slave_0: entered promiscuous mode
[  236.658634][ T7658] hsr_slave_0: entered promiscuous mode
[  236.665257][ T7658] hsr_slave_1: entered promiscuous mode
[  236.679046][ T7658] debugfs: 'hsr0' already exists in 'hsr'
[  236.684777][ T7658] Cannot create hsr debugfs directory
[  236.719546][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.729125][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.738403][ T7717] bridge_slave_1: entered allmulticast mode
[  236.747092][ T7717] bridge_slave_1: entered promiscuous mode
[  236.814995][ T7693] team0: Port device team_slave_0 added
[  236.853203][ T7717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.898550][ T5639] Bluetooth: hci22: command tx timeout
[  236.931422][ T7693] team0: Port device team_slave_1 added
[  236.957810][ T7717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.048380][ T7625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.164534][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.171739][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.204271][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.219760][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.227323][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.253814][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.294391][ T7717] team0: Port device team_slave_0 added
[  237.373012][ T7625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.414493][ T7717] team0: Port device team_slave_1 added
[  237.466918][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[  237.552455][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.559638][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.585899][ T7717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.602817][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.610163][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.618369][ T7730] bridge_slave_0: entered allmulticast mode
[  237.627385][ T7730] bridge_slave_0: entered promiscuous mode
[  237.662887][ T7625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.686312][ T7693] hsr_slave_0: entered promiscuous mode
[  237.693137][ T7693] hsr_slave_1: entered promiscuous mode
[  237.707125][ T7693] debugfs: 'hsr0' already exists in 'hsr'
[  237.712923][ T7693] Cannot create hsr debugfs directory
[  237.722455][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.729614][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.758739][ T7717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.770804][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.781300][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.788749][ T7730] bridge_slave_1: entered allmulticast mode
[  237.796630][ T7730] bridge_slave_1: entered promiscuous mode
[  237.891557][ T7730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.939178][ T7625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.970040][ T7730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.125621][ T7717] hsr_slave_0: entered promiscuous mode
[  238.132701][ T7717] hsr_slave_1: entered promiscuous mode
[  238.139982][ T7717] debugfs: 'hsr0' already exists in 'hsr'
[  238.148907][ T7717] Cannot create hsr debugfs directory
[  238.161050][ T7730] team0: Port device team_slave_0 added
[  238.238005][ T7730] team0: Port device team_slave_1 added
[  238.336069][ T5639] Bluetooth: hci23: command tx timeout
[  238.364365][ T7658] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.492272][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.500278][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.537828][ T7730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.628959][ T7658] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.661541][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.669962][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.697802][ T7730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.742509][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3
[  238.783071][ T7658] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.854462][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.921750][ T7658] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.968632][ T7730] hsr_slave_0: entered promiscuous mode
[  238.976442][ T5639] Bluetooth: hci22: command tx timeout
[  238.977301][ T7730] hsr_slave_1: entered promiscuous mode
[  238.991640][ T7730] debugfs: 'hsr0' already exists in 'hsr'
[  239.002305][ T7730] Cannot create hsr debugfs directory
[  239.077400][ T7610] 8021q: adding VLAN 0 to HW filter on device team0
[  239.194061][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.201249][ T7588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.289403][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.296605][ T7588] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.504912][ T7625] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  239.518772][ T7625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  239.526942][ T7625] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  239.553647][ T7625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  239.577831][ T7625] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  239.594207][ T7625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  239.604560][ T7625] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  239.616671][ T7625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  239.661160][ T7693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.808647][ T7693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.831931][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4
[  239.918747][ T7693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.050601][ T7693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.101317][ T7625] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.175057][ T7625] 8021q: adding VLAN 0 to HW filter on device team0
[  240.216246][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.223430][ T7362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.280849][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.288048][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.382305][ T7717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.493246][ T7717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.609554][ T7717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.700510][ T7717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.725065][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.063982][ T7717] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  241.099840][ T7717] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  241.118324][ T7717] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  241.144196][ T7717] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  241.168196][ T7717] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  241.192721][ T7717] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  241.201056][ T7717] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  241.211529][ T7717] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  241.392442][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.405329][ T7658] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  241.428485][ T7658] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  241.481451][ T7730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.509390][ T7658] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  241.522748][ T7658] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  241.532976][ T7658] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  241.544867][ T7658] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  241.569546][ T7658] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  241.582494][ T7658] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  241.632432][ T7730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.709015][ T7610] veth0_vlan: entered promiscuous mode
[  241.751646][ T7730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.824750][ T7610] veth1_vlan: entered promiscuous mode
[  241.872295][ T7730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.004182][ T7717] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.039302][ T7625] veth0_vlan: entered promiscuous mode
[  242.051638][ T7610] veth0_macvtap: entered promiscuous mode
[  242.109198][ T7610] veth1_macvtap: entered promiscuous mode
[  242.128513][ T7625] veth1_vlan: entered promiscuous mode
[  242.163545][ T7717] 8021q: adding VLAN 0 to HW filter on device team0
[  242.192921][ T7658] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.213964][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.224596][ T7693] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  242.235087][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  242.248719][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.255901][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.282948][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.291807][ T7693] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  242.303291][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  242.314545][ T7693] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  242.324734][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  242.340458][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.347587][ T7585] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.364181][ T7693] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  242.375082][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  242.422924][ T7582] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.431871][ T7582] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.459090][ T7582] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.469418][ T7582] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.505162][ T7658] 8021q: adding VLAN 0 to HW filter on device team0
[  242.615889][ T7625] veth0_macvtap: entered promiscuous mode
[  242.629051][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.636203][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.680574][ T7730] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  242.691597][ T7730] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  242.700839][ T7730] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  242.712420][ T7730] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  242.726366][ T7730] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  242.737991][ T7730] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  242.749286][ T7625] veth1_macvtap: entered promiscuous mode
[  242.765235][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.772403][ T7362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.783983][ T7730] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  242.794915][ T7730] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  242.811499][ T7588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.823309][ T7588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.936411][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.959384][ T7585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.972124][ T7585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.038973][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.120655][ T7588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.176622][ T7588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.197440][ T7588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.273289][ T7588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.423252][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.611802][ T7174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.629912][ T7693] 8021q: adding VLAN 0 to HW filter on device team0
[  243.648077][ T7174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.693150][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.700354][ T7075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.783318][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.790881][ T7075] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.820654][ T7582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.850295][ T7582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.888627][ T7730] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.920377][ T7717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.031674][ T7730] 8021q: adding VLAN 0 to HW filter on device team0
[  244.119471][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.126690][ T7365] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.164545][ T7939] tipc: Started in network mode
[  244.170561][ T7939] tipc: Node identity 7f000001, cluster identity 4711
[  244.182015][ T7939] tipc: New replicast peer: 127.0.0.1
[  244.189861][ T7939] tipc: Enabled bearer <udp:syz0>, priority 10
[  244.207617][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.214801][ T7365] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.333910][ T7658] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.483052][ T7717] veth0_vlan: entered promiscuous mode
[  244.570003][ T7717] veth1_vlan: entered promiscuous mode
[  244.699446][ T7717] veth0_macvtap: entered promiscuous mode
[  244.760177][ T7717] veth1_macvtap: entered promiscuous mode
[  244.927484][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.959598][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.021631][ T7582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.041868][ T7582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.077830][ T7582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.113786][ T7582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.315978][   T10] tipc: Node number set to 2130706433
[  245.340725][ T7658] veth0_vlan: entered promiscuous mode
[  245.354758][ T7582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.397441][ T7582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.444413][ T7658] veth1_vlan: entered promiscuous mode
[  245.524267][ T7174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.548921][ T7174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.605146][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.668305][ T7658] veth0_macvtap: entered promiscuous mode
[  245.704215][ T7658] veth1_macvtap: entered promiscuous mode
[  245.801536][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'.
[  245.820832][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.847943][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.856757][ T7693] veth0_vlan: entered promiscuous mode
[  245.869579][ T7730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.929308][ T7362] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.939152][ T7362] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.945756][ T7904] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  245.959539][ T7693] veth1_vlan: entered promiscuous mode
[  245.968130][ T7362] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.977414][ T7362] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.133964][ T7693] veth0_macvtap: entered promiscuous mode
[  246.170774][ T7730] veth0_vlan: entered promiscuous mode
[  246.182629][ T7362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.189759][ T7693] veth1_macvtap: entered promiscuous mode
[  246.192426][ T7362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.209472][ T7925] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  246.261651][ T7730] veth1_vlan: entered promiscuous mode
[  246.291340][ T7174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.307547][ T7174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.324133][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.353814][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.376928][ T7362] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.387164][ T7362] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.399129][ T7362] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.427990][ T7362] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.517313][ T7730] veth0_macvtap: entered promiscuous mode
[  246.566696][ T7730] veth1_macvtap: entered promiscuous mode
[  246.642619][ T7588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.652612][ T7730] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.659149][ T7588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.699919][ T7730] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.726894][ T7904] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  246.756789][ T7979] ceph: No mds server is up or the cluster is laggy
[  246.767141][ T7582] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.779414][ T7582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.815287][ T7588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.832233][ T7582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.844446][ T7588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.866705][ T7582] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.130131][ T7075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.151768][ T7075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.172772][ T7997] netlink: 52 bytes leftover after parsing attributes in process `syz.1.432'.
[  247.244091][ T7174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.253021][ T7174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.521982][ T8000] rdma_rxe: rxe_newlink: failed to add veth0
[  247.559472][ T8000] rdma_rxe: rxe_newlink: failed to add lo
[  249.100855][ T8031] netlink: 32 bytes leftover after parsing attributes in process `syz.8.462'.
[  249.113767][ T8031] tipc: Started in network mode
[  249.118797][ T8031] tipc: Node identity aaaaaaaaaa18, cluster identity 4711
[  249.126343][ T8031] tipc: Enabled bearer <eth:veth0>, priority 10
[  250.245621][ T7904] tipc: Node number set to 11709098
[  250.973482][ T8049] bridge0: port 3(dummy0) entered blocking state
[  250.982721][ T8049] bridge0: port 3(dummy0) entered disabled state
[  250.991970][ T8049] dummy0: entered allmulticast mode
[  251.001088][ T8049] dummy0: entered promiscuous mode
[  251.019551][ T8049] bridge0: port 3(dummy0) entered blocking state
[  251.026109][ T8049] bridge0: port 3(dummy0) entered forwarding state
[  251.038134][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.8.467'.
[  251.477309][   T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  251.621367][ T7588] rpcbind: server 127.0.0.1 not responding, timed out
[  251.659609][   T29] usb 9-1: Using ep0 maxpacket: 32
[  251.667866][   T29] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.680657][   T29] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.692801][   T29] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  251.711073][   T29] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  251.739791][   T29] usb 9-1: Product: syz
[  251.743993][   T29] usb 9-1: Manufacturer: syz
[  251.763554][   T29] hub 9-1:4.0: USB hub found
[  251.963246][   T29] hub 9-1:4.0: 2 ports detected
[  252.384505][ T8059] bridge0: port 4(netdevsim0) entered blocking state
[  252.391734][ T8059] bridge0: port 4(netdevsim0) entered disabled state
[  252.407614][ T8059] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  252.432366][ T8059] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  252.448834][ T8059] bridge0: port 4(netdevsim0) entered blocking state
[  252.455679][ T8059] bridge0: port 4(netdevsim0) entered forwarding state
[  252.485066][   T29] hub 9-1:4.0: set hub depth failed
[  252.530882][   T29] usb 9-1: USB disconnect, device number 2
[  253.406985][ T8118] tipc: New replicast peer: 127.0.0.1
[  253.412690][ T8118] tipc: Enabled bearer <udp:syz0>, priority 10
[  255.062651][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  255.072366][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  258.856218][ T5641] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  258.870576][ T5641] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  258.878432][ T5641] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  258.886802][ T5641] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  258.909659][ T5641] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  259.414764][ T8137] lo speed is unknown, defaulting to 1000
[  259.971537][ T5639] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1
[  259.986522][ T5639] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9
[  259.995892][ T5639] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9
[  260.005353][ T5639] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4
[  260.014249][ T5639] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2
[  260.085049][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.092503][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.101410][ T8137] bridge_slave_0: entered allmulticast mode
[  260.110151][ T8137] bridge_slave_0: entered promiscuous mode
[  260.119370][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.132637][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.140247][ T8137] bridge_slave_1: entered allmulticast mode
[  260.148418][ T8137] bridge_slave_1: entered promiscuous mode
[  260.203838][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.247995][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.321288][ T8137] team0: Port device team_slave_0 added
[  260.347963][ T8137] team0: Port device team_slave_1 added
[  260.394742][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.402099][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  260.428313][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.464927][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.472224][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  260.502029][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.580944][ T8137] hsr_slave_0: entered promiscuous mode
[  260.587636][ T8137] hsr_slave_1: entered promiscuous mode
[  260.593906][ T8137] debugfs: 'hsr0' already exists in 'hsr'
[  260.599680][ T8137] Cannot create hsr debugfs directory
[  260.877132][ T8137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.976870][ T5639] Bluetooth: hci15: command tx timeout
[  260.980398][ T8137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.004050][ T8153] lo speed is unknown, defaulting to 1000
[  261.091561][ T8137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.193158][ T8137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.466869][ T8137] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  261.482539][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  261.490793][ T8137] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  261.502684][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  261.510953][ T8137] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  261.524247][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  261.542400][ T8137] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  261.552652][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  261.673737][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.681077][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.688723][ T8153] bridge_slave_0: entered allmulticast mode
[  261.696884][ T8153] bridge_slave_0: entered promiscuous mode
[  261.707236][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.714454][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.722585][ T8153] bridge_slave_1: entered allmulticast mode
[  261.731103][ T8153] bridge_slave_1: entered promiscuous mode
[  261.785358][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.800266][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.844618][ T8153] team0: Port device team_slave_0 added
[  261.860063][ T8153] team0: Port device team_slave_1 added
[  261.911887][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.920130][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.946642][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.960667][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.976496][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  262.002832][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.080080][ T8153] hsr_slave_0: entered promiscuous mode
[  262.086795][ T8153] hsr_slave_1: entered promiscuous mode
[  262.093141][ T8153] debugfs: 'hsr0' already exists in 'hsr'
[  262.101981][ T5639] Bluetooth: hci24: command tx timeout
[  262.104536][ T8153] Cannot create hsr debugfs directory
[  262.255697][ T5642] Bluetooth: hci6: command 0x0406 tx timeout
[  262.261801][ T5639] Bluetooth: hci7: command 0x0406 tx timeout
[  262.332101][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.440638][ T8137] 8021q: adding VLAN 0 to HW filter on device team0
[  262.473331][ T5633] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1
[  262.473824][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.487826][ T7362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.503244][ T5633] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9
[  262.511331][ T5633] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9
[  262.516889][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.520046][ T5633] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4
[  262.525864][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.543165][ T5633] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2
[  262.600710][ T8153] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.770915][ T8153] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.964416][ T8153] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.056832][ T5641] Bluetooth: hci15: command tx timeout
[  263.087882][ T8153] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.351579][ T8153] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  263.363625][ T8153] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  263.388421][ T8153] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  263.419660][ T8153] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  263.438239][ T8153] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  263.470679][ T8153] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  263.492849][ T8153] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  263.526949][ T8153] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  263.731048][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.741681][ T8181] lo speed is unknown, defaulting to 1000
[  263.750142][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.793291][ T8153] 8021q: adding VLAN 0 to HW filter on device team0
[  263.839016][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.846212][ T7585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.870358][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.877544][ T7585] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.909676][ T8137] veth0_vlan: entered promiscuous mode
[  263.952000][ T8137] veth1_vlan: entered promiscuous mode
[  264.058314][ T8137] veth0_macvtap: entered promiscuous mode
[  264.072049][ T8137] veth1_macvtap: entered promiscuous mode
[  264.160423][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.179193][ T5641] Bluetooth: hci24: command tx timeout
[  264.201370][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.249898][ T7585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.262050][ T7585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.276654][ T7585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.285541][ T7585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.504805][ T7588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.541650][ T7588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.625280][ T7588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.647296][ T7588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.668477][ T5641] Bluetooth: hci25: command tx timeout
[  265.023794][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.061279][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.085849][ T8181] bridge_slave_0: entered allmulticast mode
[  265.098200][ T8181] bridge_slave_0: entered promiscuous mode
[  265.136787][ T5641] Bluetooth: hci15: command tx timeout
[  265.160687][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.193540][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.216832][ T8181] bridge_slave_1: entered allmulticast mode
[  265.237756][ T8181] bridge_slave_1: entered promiscuous mode
[  265.423387][ T5642] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1
[  265.460477][ T5642] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9
[  265.470904][ T5642] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9
[  265.481488][ T5642] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4
[  265.489576][ T5642] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2
[  265.509336][ T8181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.539444][ T8181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.577006][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.815138][ T8181] team0: Port device team_slave_0 added
[  265.834537][ T8181] team0: Port device team_slave_1 added
[  265.843775][ T5639] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1
[  265.864415][ T5639] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9
[  265.874491][ T5639] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9
[  265.885782][ T5639] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4
[  265.899469][ T5639] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2
[  266.094108][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.117886][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.278223][ T5639] Bluetooth: hci24: command tx timeout
[  266.407417][ T8181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.774254][ T5639] Bluetooth: hci25: command tx timeout
[  267.206099][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.232358][ T5639] Bluetooth: hci15: command tx timeout
[  267.259692][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.318094][ T8181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.380615][ T5639] Bluetooth: hci9: command 0x0406 tx timeout
[  267.391065][ T5642] Bluetooth: hci8: command 0x0406 tx timeout
[  267.518356][ T8181] hsr_slave_0: entered promiscuous mode
[  267.525737][ T8181] hsr_slave_1: entered promiscuous mode
[  267.532413][ T8181] debugfs: 'hsr0' already exists in 'hsr'
[  267.538712][ T8181] Cannot create hsr debugfs directory
[  267.616487][ T5641] Bluetooth: hci26: command tx timeout
[  267.938416][ T5641] Bluetooth: hci27: command tx timeout
[  267.992226][ T8181] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.042352][ T8153] veth0_vlan: entered promiscuous mode
[  268.082379][ T8153] veth1_vlan: entered promiscuous mode
[  268.159378][ T8181] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.288897][ T8181] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.336591][ T5641] Bluetooth: hci24: command tx timeout
[  268.357982][ T8153] veth0_macvtap: entered promiscuous mode
[  268.369286][ T8230] lo speed is unknown, defaulting to 1000
[  268.399808][ T8181] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.442817][ T8153] veth1_macvtap: entered promiscuous mode
[  268.491574][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.552834][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.594614][ T7365] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.647602][ T7365] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.694109][ T7365] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.735099][ T7075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.815771][ T5641] Bluetooth: hci25: command tx timeout
[  269.110516][ T7362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.114973][ T8181] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  269.152040][ T7362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.157598][ T8181] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  269.169503][ T8181] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  269.181071][ T8181] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  269.199262][ T8240] lo speed is unknown, defaulting to 1000
[  269.222674][ T8181] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  269.260015][ T8181] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  269.284217][ T8181] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  269.313847][ T8181] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  269.333515][ T8282] netlink: 'syz.2.492': attribute type 4 has an invalid length.
[  269.360638][ T8282] netlink: 'syz.2.492': attribute type 2 has an invalid length.
[  269.462834][ T7585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.482315][ T7585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.705830][ T5641] Bluetooth: hci26: command tx timeout
[  270.017517][ T5641] Bluetooth: hci27: command tx timeout
[  270.200854][ T8181] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.232344][ T8181] 8021q: adding VLAN 0 to HW filter on device team0
[  270.255056][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.262289][ T7585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.297908][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.305115][ T7581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.896001][ T5642] Bluetooth: hci25: command tx timeout
[  270.990742][ T8230] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.011135][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.030155][ T8230] bridge_slave_0: entered allmulticast mode
[  271.048515][ T8230] bridge_slave_0: entered promiscuous mode
[  271.111764][ T8230] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.119531][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.130255][ T8230] bridge_slave_1: entered allmulticast mode
[  271.133032][ T5639] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1
[  271.141042][ T8230] bridge_slave_1: entered promiscuous mode
[  271.147360][ T5639] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9
[  271.157429][ T5639] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9
[  271.167977][ T5639] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4
[  271.176808][ T5639] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2
[  271.199638][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.207607][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.214885][ T8240] bridge_slave_0: entered allmulticast mode
[  271.224090][ T8240] bridge_slave_0: entered promiscuous mode
[  271.298725][ T8230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.313607][ T8230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.346102][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.359535][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.371030][ T8240] bridge_slave_1: entered allmulticast mode
[  271.419700][ T8240] bridge_slave_1: entered promiscuous mode
[  271.540835][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.555234][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.578697][ T8230] team0: Port device team_slave_0 added
[  271.629649][ T8230] team0: Port device team_slave_1 added
[  271.752937][ T8240] team0: Port device team_slave_0 added
[  271.775876][ T5642] Bluetooth: hci26: command tx timeout
[  271.840680][ T8240] team0: Port device team_slave_1 added
[  271.869953][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.880565][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  271.922682][ T8230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.941430][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.948951][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  271.976815][ T8230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.076707][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.096150][ T5642] Bluetooth: hci27: command tx timeout
[  272.098110][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.161846][ T8344] netlink: 108 bytes leftover after parsing attributes in process `syz.2.500'.
[  272.176219][ T8240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.190904][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.198245][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.239003][ T8240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.489909][ T8230] hsr_slave_0: entered promiscuous mode
[  272.496177][ T5642] Bluetooth: hci10: command 0x0406 tx timeout
[  272.497623][ T5639] Bluetooth: hci11: command 0x0406 tx timeout
[  272.504344][ T8230] hsr_slave_1: entered promiscuous mode
[  272.553017][ T8230] debugfs: 'hsr0' already exists in 'hsr'
[  272.571478][ T8230] Cannot create hsr debugfs directory
[  272.649662][ T8240] hsr_slave_0: entered promiscuous mode
[  272.670360][ T8240] hsr_slave_1: entered promiscuous mode
[  272.686639][ T8240] debugfs: 'hsr0' already exists in 'hsr'
[  272.697615][ T8240] Cannot create hsr debugfs directory
[  272.944302][ T8323] lo speed is unknown, defaulting to 1000
[  273.215788][ T5641] Bluetooth: hci28: command tx timeout
[  273.403914][ T8181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.857117][ T5641] Bluetooth: hci26: command tx timeout
[  274.186587][ T5641] Bluetooth: hci27: command tx timeout
[  274.417746][ T8181] veth0_vlan: entered promiscuous mode
[  274.559061][ T8181] veth1_vlan: entered promiscuous mode
[  274.646852][ T8230] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  274.685020][ T8230] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  274.693524][ T8230] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  274.726486][ T8230] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  274.887547][ T8240] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.011594][ T8378] ceph: No mds server is up or the cluster is laggy
[  275.053155][ T8230] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  275.136786][ T8230] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  275.295935][ T5641] Bluetooth: hci28: command tx timeout
[  275.332885][ T8230] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  275.386294][ T8230] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  275.431253][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.452388][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.467793][ T8323] bridge_slave_0: entered allmulticast mode
[  275.503559][ T8323] bridge_slave_0: entered promiscuous mode
[  275.659473][ T8240] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.711795][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.719221][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.727835][ T8323] bridge_slave_1: entered allmulticast mode
[  275.739476][ T8323] bridge_slave_1: entered promiscuous mode
[  275.850774][ T8240] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.890349][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.949063][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.988090][ T8240] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.058730][ T8181] veth0_macvtap: entered promiscuous mode
[  276.134501][ T8323] team0: Port device team_slave_0 added
[  276.149778][ T8181] veth1_macvtap: entered promiscuous mode
[  276.174286][ T8323] team0: Port device team_slave_1 added
[  276.270593][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.279670][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.319664][ T8323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.333760][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.343927][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.372299][ T8323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.501015][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.633869][ T8323] hsr_slave_0: entered promiscuous mode
[  276.651071][ T8323] hsr_slave_1: entered promiscuous mode
[  276.658783][ T8323] debugfs: 'hsr0' already exists in 'hsr'
[  276.673386][ T8323] Cannot create hsr debugfs directory
[  276.698232][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.968085][ T7075] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.981122][ T7075] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.000172][ T8240] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  277.014517][ T8240] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  277.041117][ T8240] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  277.055231][ T8240] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  277.089250][ T7075] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.098856][ T7075] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.118698][ T8240] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  277.144547][ T8240] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  277.166686][ T8240] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  277.188095][ T8240] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  277.376078][ T5641] Bluetooth: hci28: command tx timeout
[  277.558858][ T8323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.598909][ T8230] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.726812][ T8323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.768566][ T7585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.787905][ T7585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.866199][ T8230] 8021q: adding VLAN 0 to HW filter on device team0
[  277.921585][ T8323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.004195][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.011438][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.082729][ T8323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.119737][ T7585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.129722][ T7585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.130325][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.144229][ T7174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.307378][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.623768][ T8240] 8021q: adding VLAN 0 to HW filter on device team0
[  278.853689][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.860883][ T7174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.944824][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.952062][ T7362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.059762][ T8323] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  279.104318][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  279.123975][ T5859] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  279.125170][ T8323] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  279.145014][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  279.157427][ T8323] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  279.176004][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  279.191776][ T8323] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  279.213263][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  279.396310][ T5859] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  279.456342][ T5641] Bluetooth: hci28: command tx timeout
[  279.633070][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.721375][ T8323] 8021q: adding VLAN 0 to HW filter on device team0
[  279.752539][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.759742][ T7075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.809340][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.816543][ T7141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.897753][ T8484] ceph: No mds server is up or the cluster is laggy
[  279.930419][ T5859] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  280.011480][ T8323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  280.293736][ T8518] tipc: Started in network mode
[  280.326205][ T8518] tipc: Node identity 1000001, cluster identity 4711
[  280.337277][ T8518] tipc: Node number set to 16777217
[  280.545006][ T8230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.223535][ T8240] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.571158][ T8554] netlink: 'syz.7.514': attribute type 1 has an invalid length.
[  281.659263][ T8230] veth0_vlan: entered promiscuous mode
[  281.708324][ T8230] veth1_vlan: entered promiscuous mode
[  281.868325][ T8230] veth0_macvtap: entered promiscuous mode
[  281.891315][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.913061][ T8230] veth1_macvtap: entered promiscuous mode
[  282.029818][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.089654][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.114667][ T7362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.124336][ T7362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.172893][ T7362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.220619][ T7362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.437872][ T7174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.482827][ T7174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.563866][ T8240] veth0_vlan: entered promiscuous mode
[  282.573216][ T7174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.601494][ T7174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.610651][ T8240] veth1_vlan: entered promiscuous mode
[  282.700698][ T8240] veth0_macvtap: entered promiscuous mode
[  282.742101][ T5642] Bluetooth: hci12: command 0x0406 tx timeout
[  282.742484][ T5639] Bluetooth: hci13: command 0x0406 tx timeout
[  282.808877][ T8240] veth1_macvtap: entered promiscuous mode
[  282.930203][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.033587][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.112870][ T7174] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.126182][ T7174] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.141006][ T8323] veth0_vlan: entered promiscuous mode
[  283.151807][ T7174] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.190626][ T7174] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.217670][   T31] INFO: task syz.4.222:6508 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  283.242505][ T8323] veth1_vlan: entered promiscuous mode
[  283.248282][   T31]       Not tainted syzkaller #0
[  283.257371][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  283.297485][   T31] task:syz.4.222       state:D stack:27304 pid:6508  tgid:6505  ppid:5619   task_flags:0x400040 flags:0x00080002
[  283.354552][   T31] Call Trace:
[  283.387257][   T31]  <TASK>
[  283.413688][   T31]  __schedule+0x17d9/0x56c0
[  283.450171][   T31]  ? __lock_acquire+0x683/0x2cf0
[  283.495916][   T31]  ? __lock_acquire+0x683/0x2cf0
[  283.514944][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  283.533602][   T31]  ? kernel_text_address+0xa5/0xe0
[  283.552707][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  283.564997][   T31]  ? __kernel_text_address+0xd/0x30
[  283.586525][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  283.593166][   T31]  ? __pfx___schedule+0x10/0x10
[  283.598521][   T31]  ? schedule+0x90/0x2b0
[  283.602808][   T31]  schedule+0x164/0x2b0
[  283.610548][   T31]  schedule_preempt_disabled+0x13/0x30
[  283.618821][   T31]  __mutex_lock+0x7bf/0x1550
[  283.623455][   T31]  ? nfsctl_transaction_write+0xc7/0x160
[  283.630666][   T31]  ? __mutex_lock+0x5d4/0x1550
[  283.636643][   T31]  ? write_threads+0x39d/0x5a0
[  283.641453][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  283.650418][   T31]  ? simple_strntoull+0x111/0x190
[  283.658047][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  283.663714][   T31]  ? qword_get+0x5ad/0x650
[  283.669622][   T31]  write_threads+0x39d/0x5a0
[  283.694730][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  283.709188][   T31]  ? __pfx_write_threads+0x10/0x10
[  283.714342][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  283.722072][   T31]  ? _copy_from_user+0x94/0xb0
[  283.728462][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  283.734249][   T31]  ? simple_transaction_get+0x12d/0x160
[  283.741222][   T31]  nfsctl_transaction_write+0x10f/0x160
[  283.748033][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  283.754153][   T31]  vfs_write+0x296/0xba0
[  283.761770][   T31]  ? __pfx_vfs_write+0x10/0x10
[  283.768766][   T31]  ? __fget_files+0x2a/0x420
[  283.773409][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  283.797849][   T31]  ? __fget_files+0x3a2/0x420
[  283.802611][   T31]  ? __fget_files+0x2a/0x420
[  283.808611][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  283.814297][   T31]  ksys_write+0x150/0x270
[  283.819157][   T31]  ? __pfx_ksys_write+0x10/0x10
[  283.824076][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.837857][   T31]  do_syscall_64+0x174/0x580
[  283.847766][   T31]  ? trace_irq_disable+0x3b/0x140
[  283.852836][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.877823][   T31] RIP: 0033:0x7fadf0b9de99
[  283.891830][   T31] RSP: 002b:00007fadf1b31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  283.900791][   T31] RAX: ffffffffffffffda RBX: 00007fadf0e26090 RCX: 00007fadf0b9de99
[  283.909950][   T31] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000005
[  283.924655][   T31] RBP: 00007fadf0c33eaf R08: 0000000000000000 R09: 0000000000000000
[  283.933038][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.943694][   T31] R13: 00007fadf0e26128 R14: 00007fadf0e26090 R15: 00007ffc34b12f28
[  283.952045][   T31]  </TASK>
[  283.965513][   T31] INFO: task syz.4.222:6511 blocked for more than 144 seconds.
[  284.043470][   T31]       Not tainted syzkaller #0
[  284.065852][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  284.107238][   T31] task:syz.4.222       state:D stack:28712 pid:6511  tgid:6505  ppid:5619   task_flags:0x400040 flags:0x00080002
[  284.136562][   T31] Call Trace:
[  284.139892][   T31]  <TASK>
[  284.142830][   T31]  __schedule+0x17d9/0x56c0
[  284.155442][   T31]  ? __lock_acquire+0x683/0x2cf0
[  284.169826][   T31]  ? __lock_acquire+0x683/0x2cf0
[  284.180247][   T31]  ? __pfx_file_ioctl+0x10/0x10
[  284.202987][   T31]  ? __pfx___schedule+0x10/0x10
[  284.214728][   T31]  ? schedule+0x90/0x2b0
[  284.225797][   T31]  schedule+0x164/0x2b0
[  284.231856][   T31]  schedule_preempt_disabled+0x13/0x30
[  284.243774][   T31]  __mutex_lock+0x7bf/0x1550
[  284.253869][   T31]  ? __mutex_lock+0x5d4/0x1550
[  284.267632][   T31]  ? fdget_pos+0x246/0x320
[  284.277837][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  284.304170][   T31]  ? __fget_files+0x2a/0x420
[  284.310174][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  284.316118][   T31]  ? __fget_files+0x3a2/0x420
[  284.321671][   T31]  ? __fget_files+0x2a/0x420
[  284.328012][   T31]  fdget_pos+0x246/0x320
[  284.332333][   T31]  ksys_write+0x79/0x270
[  284.342747][   T31]  ? __pfx_ksys_write+0x10/0x10
[  284.350106][   T31]  ? __pfx_kcov_ioctl+0x10/0x10
[  284.355045][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.361715][   T31]  do_syscall_64+0x174/0x580
[  284.366787][   T31]  ? trace_irq_disable+0x3b/0x140
[  284.371861][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.378222][   T31] RIP: 0033:0x7fadf0b9de99
[  284.382787][   T31] RSP: 002b:00007fadf1aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  284.410934][   T31] RAX: ffffffffffffffda RBX: 00007fadf0e26270 RCX: 00007fadf0b9de99
[  284.436028][   T31] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000005
[  284.444119][   T31] RBP: 00007fadf0c33eaf R08: 0000000000000000 R09: 0000000000000000
[  284.458693][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.469862][   T31] R13: 00007fadf0e26308 R14: 00007fadf0e26270 R15: 00007ffc34b12f28
[  284.478193][   T31]  </TASK>
[  284.481348][   T31] INFO: task syz.1.246:6593 blocked for more than 144 seconds.
[  284.544265][   T31]       Not tainted syzkaller #0
[  284.553020][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  284.563948][   T31] task:syz.1.246       state:D stack:28184 pid:6593  tgid:6592  ppid:5620   task_flags:0x400140 flags:0x00080002
[  284.591055][   T31] Call Trace:
[  284.594371][   T31]  <TASK>
[  284.617213][   T31]  __schedule+0x17d9/0x56c0
[  284.625362][   T31]  ? __lock_acquire+0x683/0x2cf0
[  284.630569][   T31]  ? __lock_acquire+0x683/0x2cf0
[  284.635722][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  284.641902][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  284.647731][   T31]  ? arch_stack_walk+0xfb/0x150
[  284.652610][   T31]  ? __pfx___schedule+0x10/0x10
[  284.658144][   T31]  ? schedule+0x90/0x2b0
[  284.662440][   T31]  schedule+0x164/0x2b0
[  284.667121][   T31]  schedule_preempt_disabled+0x13/0x30
[  284.672768][   T31]  __mutex_lock+0x7bf/0x1550
[  284.677469][   T31]  ? __mutex_lock+0x5d4/0x1550
[  284.682251][   T31]  ? write_versions+0x95/0xe30
[  284.687409][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  284.692501][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  284.705027][   T31]  write_versions+0x95/0xe30
[  284.709695][   T31]  ? __pfx_write_versions+0x10/0x10
[  284.714906][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  284.720642][   T31]  ? _copy_from_user+0x94/0xb0
[  284.725666][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  284.731583][   T31]  ? simple_transaction_get+0x12d/0x160
[  284.738877][   T31]  nfsctl_transaction_write+0x10f/0x160
[  284.744536][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  284.751038][   T31]  vfs_write+0x296/0xba0
[  284.755324][   T31]  ? __pfx_vfs_write+0x10/0x10
[  284.760468][   T31]  ? __fget_files+0x2a/0x420
[  284.765104][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  284.771129][   T31]  ? __fget_files+0x3a2/0x420
[  284.776847][   T31]  ? __fget_files+0x2a/0x420
[  284.781493][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  284.787558][   T31]  ksys_write+0x150/0x270
[  284.791935][   T31]  ? __pfx_ksys_write+0x10/0x10
[  284.797438][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.810087][   T31]  do_syscall_64+0x174/0x580
[  284.814723][   T31]  ? trace_irq_disable+0x3b/0x140
[  284.821871][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.828356][   T31] RIP: 0033:0x7f069179de99
[  284.832806][   T31] RSP: 002b:00007f0692699028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  284.841699][   T31] RAX: ffffffffffffffda RBX: 00007f0691a25fa0 RCX: 00007f069179de99
[  284.849931][   T31] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000004
[  284.858199][   T31] RBP: 00007f0691833eaf R08: 0000000000000000 R09: 0000000000000000
[  284.866532][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.874538][   T31] R13: 00007f0691a26038 R14: 00007f0691a25fa0 R15: 00007ffe8ff3bc98
[  284.882957][   T31]  </TASK>
[  284.886292][   T31] INFO: task syz.1.246:6594 blocked for more than 145 seconds.
[  284.945467][   T31]       Not tainted syzkaller #0
[  284.955474][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  284.976500][   T31] task:syz.1.246       state:D stack:28424 pid:6594  tgid:6592  ppid:5620   task_flags:0x400040 flags:0x00080002
[  285.009605][   T31] Call Trace:
[  285.015665][   T31]  <TASK>
[  285.022327][   T31]  __schedule+0x17d9/0x56c0
[  285.030129][   T31]  ? __lock_acquire+0x683/0x2cf0
[  285.047247][   T31]  ? __lock_acquire+0x683/0x2cf0
[  285.064144][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.085440][   T31]  ? kernel_text_address+0xa5/0xe0
[  285.091018][   T31]  ? __kernel_text_address+0xd/0x30
[  285.105446][   T31]  ? __pfx___schedule+0x10/0x10
[  285.125551][   T31]  ? schedule+0x90/0x2b0
[  285.140688][   T31]  schedule+0x164/0x2b0
[  285.157531][   T31]  schedule_preempt_disabled+0x13/0x30
[  285.175457][   T31]  __mutex_lock+0x7bf/0x1550
[  285.180115][   T31]  ? kasan_save_track+0x3e/0x80
[  285.184997][   T31]  ? __mutex_lock+0x5d4/0x1550
[  285.197106][   T31]  ? write_ports+0xb5/0xd10
[  285.208046][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  285.235490][   T31]  write_ports+0xb5/0xd10
[  285.247610][   T31]  ? __pfx_write_ports+0x10/0x10
[  285.265835][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.273019][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.285567][   T31]  ? _copy_from_user+0x94/0xb0
[  285.307472][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.329211][   T31]  ? simple_transaction_get+0x12d/0x160
[  285.348426][   T31]  nfsctl_transaction_write+0x10f/0x160
[  285.365643][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  285.385541][   T31]  vfs_write+0x296/0xba0
[  285.399227][   T31]  ? __pfx_vfs_write+0x10/0x10
[  285.435487][   T31]  ? __fget_files+0x2a/0x420
[  285.440171][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.457061][   T31]  ? __fget_files+0x3a2/0x420
[  285.462137][   T31]  ? __fget_files+0x2a/0x420
[  285.475808][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.481544][   T31]  ksys_write+0x150/0x270
[  285.487025][   T31]  ? __pfx_ksys_write+0x10/0x10
[  285.492076][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.498961][   T31]  do_syscall_64+0x174/0x580
[  285.503597][   T31]  ? trace_irq_disable+0x3b/0x140
[  285.509034][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.514974][   T31] RIP: 0033:0x7f069179de99
[  285.529536][   T31] RSP: 002b:00007f0692678028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  285.538720][   T31] RAX: ffffffffffffffda RBX: 00007f0691a26090 RCX: 00007f069179de99
[  285.547771][   T31] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000005
[  285.556048][   T31] RBP: 00007f0691833eaf R08: 0000000000000000 R09: 0000000000000000
[  285.564098][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.572515][   T31] R13: 00007f0691a26128 R14: 00007f0691a26090 R15: 00007ffe8ff3bc98
[  285.581439][   T31]  </TASK>
[  285.602308][   T31] INFO: task syz.1.246:6595 blocked for more than 145 seconds.
[  285.614664][   T31]       Not tainted syzkaller #0
[  285.633711][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  285.642684][   T31] task:syz.1.246       state:D stack:27472 pid:6595  tgid:6592  ppid:5620   task_flags:0x400040 flags:0x00080002
[  285.656968][   T31] Call Trace:
[  285.664113][   T31]  <TASK>
[  285.669800][   T31]  __schedule+0x17d9/0x56c0
[  285.682757][   T31]  ? __lock_acquire+0x683/0x2cf0
[  285.695536][   T31]  ? __lock_acquire+0x683/0x2cf0
[  285.700699][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.707050][   T31]  ? kernel_text_address+0xa5/0xe0
[  285.712208][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.718499][   T31]  ? __kernel_text_address+0xd/0x30
[  285.737791][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  285.744017][   T31]  ? __pfx___schedule+0x10/0x10
[  285.749283][   T31]  ? schedule+0x90/0x2b0
[  285.753583][   T31]  schedule+0x164/0x2b0
[  285.758155][   T31]  schedule_preempt_disabled+0x13/0x30
[  285.764053][   T31]  __mutex_lock+0x7bf/0x1550
[  285.774189][   T31]  ? nfsctl_transaction_write+0xc7/0x160
[  285.809373][   T31]  ? __mutex_lock+0x5d4/0x1550
[  285.814192][   T31]  ? write_threads+0x39d/0x5a0
[  285.819461][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  285.834990][   T31]  ? simple_strntoull+0x111/0x190
[  285.840353][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.851002][   T31]  ? qword_get+0x5ad/0x650
[  285.856551][   T31]  write_threads+0x39d/0x5a0
[  285.861190][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.867789][   T31]  ? __pfx_write_threads+0x10/0x10
[  285.872959][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.881875][   T31]  ? _copy_from_user+0x94/0xb0
[  285.886935][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.892613][   T31]  ? simple_transaction_get+0x12d/0x160
[  285.899626][   T31]  nfsctl_transaction_write+0x10f/0x160
[  285.905219][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  285.914932][   T31]  vfs_write+0x296/0xba0
[  285.922216][   T31]  ? __pfx_vfs_write+0x10/0x10
[  285.941820][   T31]  ? __fget_files+0x2a/0x420
[  285.946785][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.952474][   T31]  ? __fget_files+0x3a2/0x420
[  285.957636][   T31]  ? __fget_files+0x2a/0x420
[  285.962283][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  285.968336][   T31]  ksys_write+0x150/0x270
[  285.972717][   T31]  ? __pfx_ksys_write+0x10/0x10
[  285.977995][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.984145][   T31]  do_syscall_64+0x174/0x580
[  285.989292][   T31]  ? trace_irq_disable+0x3b/0x140
[  285.994369][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.000696][   T31] RIP: 0033:0x7f069179de99
[  286.005143][   T31] RSP: 002b:00007f0692657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  286.014058][   T31] RAX: ffffffffffffffda RBX: 00007f0691a26180 RCX: 00007f069179de99
[  286.024557][   T31] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000006
[  286.041250][   T31] RBP: 00007f0691833eaf R08: 0000000000000000 R09: 0000000000000000
[  286.052935][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.061256][   T31] R13: 00007f0691a26218 R14: 00007f0691a26180 R15: 00007ffe8ff3bc98
[  286.069561][   T31]  </TASK>
[  286.072655][   T31] INFO: task syz.3.263:6648 blocked for more than 146 seconds.
[  286.084489][   T31]       Not tainted syzkaller #0
[  286.089693][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  286.099305][   T31] task:syz.3.263       state:D stack:27304 pid:6648  tgid:6647  ppid:5621   task_flags:0x400140 flags:0x00080002
[  286.111792][   T31] Call Trace:
[  286.115102][   T31]  <TASK>
[  286.118434][   T31]  __schedule+0x17d9/0x56c0
[  286.122979][   T31]  ? __lock_acquire+0x683/0x2cf0
[  286.128378][   T31]  ? __lock_acquire+0x683/0x2cf0
[  286.145157][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.151206][   T31]  ? kernel_text_address+0xa5/0xe0
[  286.159458][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.165139][   T31]  ? __kernel_text_address+0xd/0x30
[  286.170745][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  286.178931][   T31]  ? __pfx___schedule+0x10/0x10
[  286.183850][   T31]  ? schedule+0x90/0x2b0
[  286.189178][   T31]  schedule+0x164/0x2b0
[  286.193381][   T31]  schedule_preempt_disabled+0x13/0x30
[  286.199671][   T31]  __mutex_lock+0x7bf/0x1550
[  286.204302][   T31]  ? nfsctl_transaction_write+0xc7/0x160
[  286.210336][   T31]  ? __mutex_lock+0x5d4/0x1550
[  286.215145][   T31]  ? write_threads+0x39d/0x5a0
[  286.223721][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  286.229024][   T31]  ? simple_strntoull+0x111/0x190
[  286.247722][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.253403][   T31]  ? qword_get+0x5ad/0x650
[  286.258973][   T31]  write_threads+0x39d/0x5a0
[  286.263608][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.269973][   T31]  ? __pfx_write_threads+0x10/0x10
[  286.275137][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.281215][   T31]  ? _copy_from_user+0x94/0xb0
[  286.286253][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.292017][   T31]  ? simple_transaction_get+0x12d/0x160
[  286.298085][   T31]  nfsctl_transaction_write+0x10f/0x160
[  286.303686][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  286.310182][   T31]  vfs_write+0x296/0xba0
[  286.314519][   T31]  ? __pfx_vfs_write+0x10/0x10
[  286.319762][   T31]  ? __fget_files+0x2a/0x420
[  286.324406][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.330590][   T31]  ? __fget_files+0x3a2/0x420
[  286.335313][   T31]  ? __fget_files+0x2a/0x420
[  286.349054][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.354774][   T31]  ksys_write+0x150/0x270
[  286.359533][   T31]  ? __pfx_ksys_write+0x10/0x10
[  286.364427][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.370892][   T31]  do_syscall_64+0x174/0x580
[  286.376049][   T31]  ? trace_irq_disable+0x3b/0x140
[  286.381128][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.387415][   T31] RIP: 0033:0x7f6618f9de99
[  286.392046][   T31] RSP: 002b:00007f6619ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  286.400917][   T31] RAX: ffffffffffffffda RBX: 00007f6619225fa0 RCX: 00007f6618f9de99
[  286.409204][   T31] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000005
[  286.419430][   T31] RBP: 00007f6619033eaf R08: 0000000000000000 R09: 0000000000000000
[  286.428552][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.437034][   T31] R13: 00007f6619226038 R14: 00007f6619225fa0 R15: 00007fff7a189c78
[  286.452077][   T31]  </TASK>
[  286.478079][   T31] INFO: task syz.0.288:6711 blocked for more than 146 seconds.
[  286.486015][   T31]       Not tainted syzkaller #0
[  286.490990][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  286.503891][   T31] task:syz.0.288       state:D stack:28424 pid:6711  tgid:6709  ppid:5618   task_flags:0x400140 flags:0x00080002
[  286.516267][   T31] Call Trace:
[  286.519580][   T31]  <TASK>
[  286.522521][   T31]  __schedule+0x17d9/0x56c0
[  286.528548][   T31]  ? __lock_acquire+0x683/0x2cf0
[  286.533548][   T31]  ? __lock_acquire+0x683/0x2cf0
[  286.538966][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.559101][   T31]  ? kernel_text_address+0xa5/0xe0
[  286.575188][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.583045][   T31]  ? __kernel_text_address+0xd/0x30
[  286.588688][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  286.594907][   T31]  ? __pfx___schedule+0x10/0x10
[  286.600453][   T31]  ? schedule+0x90/0x2b0
[  286.604752][   T31]  schedule+0x164/0x2b0
[  286.609363][   T31]  schedule_preempt_disabled+0x13/0x30
[  286.615060][   T31]  __mutex_lock+0x7bf/0x1550
[  286.619877][   T31]  ? nfsctl_transaction_write+0xc7/0x160
[  286.625681][   T31]  ? __mutex_lock+0x5d4/0x1550
[  286.630469][   T31]  ? write_threads+0x39d/0x5a0
[  286.635250][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  286.640470][   T31]  ? simple_strntoull+0x111/0x190
[  286.654192][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.660839][   T31]  ? qword_get+0x5ad/0x650
[  286.665346][   T31]  write_threads+0x39d/0x5a0
[  286.671606][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.678418][   T31]  ? __pfx_write_threads+0x10/0x10
[  286.683629][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.689491][   T31]  ? _copy_from_user+0x94/0xb0
[  286.694285][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.700306][   T31]  ? simple_transaction_get+0x12d/0x160
[  286.715523][   T31]  nfsctl_transaction_write+0x10f/0x160
[  286.721145][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  286.728171][   T31]  vfs_write+0x296/0xba0
[  286.732480][   T31]  ? __pfx_vfs_write+0x10/0x10
[  286.760865][   T31]  ? __fget_files+0x2a/0x420
[  286.769334][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.775162][   T31]  ? __fget_files+0x3a2/0x420
[  286.782963][   T31]  ? __fget_files+0x2a/0x420
[  286.791730][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.797714][   T31]  ksys_write+0x150/0x270
[  286.802098][   T31]  ? __pfx_ksys_write+0x10/0x10
[  286.807432][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.813638][   T31]  do_syscall_64+0x174/0x580
[  286.823392][   T31]  ? trace_irq_disable+0x3b/0x140
[  286.828742][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.834768][   T31] RIP: 0033:0x7f059299de99
[  286.839650][   T31] RSP: 002b:00007f0593787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  286.863421][   T31] RAX: ffffffffffffffda RBX: 00007f0592c25fa0 RCX: 00007f059299de99
[  286.872093][   T31] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000004
[  286.882379][   T31] RBP: 00007f0592a33eaf R08: 0000000000000000 R09: 0000000000000000
[  286.893228][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.908333][   T31] R13: 00007f0592c26038 R14: 00007f0592c25fa0 R15: 00007fffbd82ec38
[  286.916651][   T31]  </TASK>
[  286.919766][   T31] INFO: task syz.2.316:6772 blocked for more than 147 seconds.
[  286.929196][   T31]       Not tainted syzkaller #0
[  286.934159][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  286.943228][   T31] task:syz.2.316       state:D stack:27080 pid:6772  tgid:6771  ppid:5623   task_flags:0x400140 flags:0x00080002
[  286.968022][   T31] Call Trace:
[  286.971347][   T31]  <TASK>
[  286.974291][   T31]  __schedule+0x17d9/0x56c0
[  286.983780][   T31]  ? __lock_acquire+0x683/0x2cf0
[  286.991165][   T31]  ? __lock_acquire+0x683/0x2cf0
[  286.998865][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.004538][   T31]  ? kernel_text_address+0xa5/0xe0
[  287.011124][   T31]  ? __kernel_text_address+0xd/0x30
[  287.020341][   T31]  ? __pfx___schedule+0x10/0x10
[  287.025252][   T31]  ? schedule+0x90/0x2b0
[  287.029994][   T31]  schedule+0x164/0x2b0
[  287.034201][   T31]  schedule_preempt_disabled+0x13/0x30
[  287.041080][   T31]  __mutex_lock+0x7bf/0x1550
[  287.045917][   T31]  ? kasan_save_track+0x3e/0x80
[  287.050821][   T31]  ? __mutex_lock+0x5d4/0x1550
[  287.074876][   T31]  ? write_ports+0xb5/0xd10
[  287.079620][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  287.084932][   T31]  write_ports+0xb5/0xd10
[  287.089446][   T31]  ? __pfx_write_ports+0x10/0x10
[  287.094951][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.101625][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.108306][   T31]  ? _copy_from_user+0x94/0xb0
[  287.113114][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.118883][   T31]  ? simple_transaction_get+0x12d/0x160
[  287.124558][   T31]  nfsctl_transaction_write+0x10f/0x160
[  287.130251][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  287.136908][   T31]  vfs_write+0x296/0xba0
[  287.143335][   T31]  ? __pfx_vfs_write+0x10/0x10
[  287.153244][   T31]  ? __fget_files+0x2a/0x420
[  287.173080][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.179031][   T31]  ? __fget_files+0x3a2/0x420
[  287.183768][   T31]  ? __fget_files+0x2a/0x420
[  287.188825][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.194513][   T31]  ksys_write+0x150/0x270
[  287.199291][   T31]  ? __pfx_ksys_write+0x10/0x10
[  287.204195][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.211781][   T31]  do_syscall_64+0x174/0x580
[  287.224175][   T31]  ? trace_irq_disable+0x3b/0x140
[  287.230445][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.237398][   T31] RIP: 0033:0x7faf03d9de99
[  287.242018][   T31] RSP: 002b:00007faf04c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  287.254385][   T31] RAX: ffffffffffffffda RBX: 00007faf04025fa0 RCX: 00007faf03d9de99
[  287.276811][   T31] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000004
[  287.284841][   T31] RBP: 00007faf03e33eaf R08: 0000000000000000 R09: 0000000000000000
[  287.293297][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.307762][   T31] R13: 00007faf04026038 R14: 00007faf04025fa0 R15: 00007ffdb3326618
[  287.317422][   T31]  </TASK>
[  287.320522][   T31] INFO: task syz.5.330:6805 blocked for more than 147 seconds.
[  287.332152][   T31]       Not tainted syzkaller #0
[  287.338214][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.347016][   T31] task:syz.5.330       state:D stack:27304 pid:6805  tgid:6804  ppid:5622   task_flags:0x400140 flags:0x00080002
[  287.385178][   T31] Call Trace:
[  287.388618][   T31]  <TASK>
[  287.391565][   T31]  __schedule+0x17d9/0x56c0
[  287.396513][   T31]  ? __lock_acquire+0x683/0x2cf0
[  287.401485][   T31]  ? __lock_acquire+0x683/0x2cf0
[  287.406547][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  287.412768][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.418482][   T31]  ? arch_stack_walk+0xfb/0x150
[  287.423357][   T31]  ? __pfx___schedule+0x10/0x10
[  287.429510][   T31]  ? schedule+0x90/0x2b0
[  287.433803][   T31]  schedule+0x164/0x2b0
[  287.441829][   T31]  schedule_preempt_disabled+0x13/0x30
[  287.448486][   T31]  __mutex_lock+0x7bf/0x1550
[  287.453154][   T31]  ? __mutex_lock+0x5d4/0x1550
[  287.478944][   T31]  ? write_versions+0x95/0xe30
[  287.487631][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  287.492821][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.498555][   T31]  write_versions+0x95/0xe30
[  287.503170][   T31]  ? __pfx_write_versions+0x10/0x10
[  287.508556][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.514250][   T31]  ? _copy_from_user+0x94/0xb0
[  287.519123][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.524863][   T31]  ? simple_transaction_get+0x12d/0x160
[  287.530534][   T31]  nfsctl_transaction_write+0x10f/0x160
[  287.538926][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  287.545045][   T31]  vfs_write+0x296/0xba0
[  287.549537][   T31]  ? __pfx_vfs_write+0x10/0x10
[  287.554363][   T31]  ? __fget_files+0x2a/0x420
[  287.560058][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.577618][   T31]  ? __fget_files+0x3a2/0x420
[  287.582344][   T31]  ? __fget_files+0x2a/0x420
[  287.588534][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.594220][   T31]  ksys_write+0x150/0x270
[  287.598706][   T31]  ? __pfx_ksys_write+0x10/0x10
[  287.603620][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.609766][   T31]  do_syscall_64+0x174/0x580
[  287.614380][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.626850][   T31] RIP: 0033:0x7f3c98b9de99
[  287.631302][   T31] RSP: 002b:00007f3c99b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  287.639836][   T31] RAX: ffffffffffffffda RBX: 00007f3c98e25fa0 RCX: 00007f3c98b9de99
[  287.648041][   T31] RDX: 0000000000000009 RSI: 00002000000002c0 RDI: 0000000000000003
[  287.657978][   T31] RBP: 00007f3c98c33eaf R08: 0000000000000000 R09: 0000000000000000
[  287.666954][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.689017][   T31] R13: 00007f3c98e26038 R14: 00007f3c98e25fa0 R15: 00007ffebca1fb98
[  287.699355][   T31]  </TASK>
[  287.703270][   T31] INFO: task syz.5.330:6806 blocked for more than 147 seconds.
[  287.711822][   T31]       Not tainted syzkaller #0
[  287.716797][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.740833][   T31] task:syz.5.330       state:D stack:27304 pid:6806  tgid:6804  ppid:5622   task_flags:0x400040 flags:0x00080002
[  287.753517][   T31] Call Trace:
[  287.757765][   T31]  <TASK>
[  287.760726][   T31]  __schedule+0x17d9/0x56c0
[  287.765245][   T31]  ? __lock_acquire+0x683/0x2cf0
[  287.781512][   T31]  ? __lock_acquire+0x683/0x2cf0
[  287.788805][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.794486][   T31]  ? kernel_text_address+0xa5/0xe0
[  287.799725][   T31]  ? __kernel_text_address+0xd/0x30
[  287.805012][   T31]  ? __pfx___schedule+0x10/0x10
[  287.810008][   T31]  ? schedule+0x90/0x2b0
[  287.814286][   T31]  schedule+0x164/0x2b0
[  287.818807][   T31]  schedule_preempt_disabled+0x13/0x30
[  287.824321][   T31]  __mutex_lock+0x7bf/0x1550
[  287.828987][   T31]  ? kasan_save_track+0x3e/0x80
[  287.835131][   T31]  ? __mutex_lock+0x5d4/0x1550
[  287.840088][   T31]  ? write_ports+0xb5/0xd10
[  287.844634][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  287.849846][   T31]  write_ports+0xb5/0xd10
[  287.854199][   T31]  ? __pfx_write_ports+0x10/0x10
[  287.859895][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.867688][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.879743][   T31]  ? _copy_from_user+0x94/0xb0
[  287.885253][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.891174][   T31]  ? simple_transaction_get+0x12d/0x160
[  287.896829][   T31]  nfsctl_transaction_write+0x10f/0x160
[  287.902419][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  287.908548][   T31]  vfs_write+0x296/0xba0
[  287.912823][   T31]  ? __pfx_vfs_write+0x10/0x10
[  287.917648][   T31]  ? __fget_files+0x2a/0x420
[  287.922257][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.928003][   T31]  ? __fget_files+0x3a2/0x420
[  287.932715][   T31]  ? __fget_files+0x2a/0x420
[  287.938283][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.943964][   T31]  ksys_write+0x150/0x270
[  287.948481][   T31]  ? __pfx_ksys_write+0x10/0x10
[  287.953351][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.959494][   T31]  do_syscall_64+0x174/0x580
[  287.964125][   T31]  ? trace_irq_disable+0x3b/0x140
[  287.969628][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.982535][   T31] RIP: 0033:0x7f3c98b9de99
[  287.987309][   T31] RSP: 002b:00007f3c99aed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  287.997808][   T31] RAX: ffffffffffffffda RBX: 00007f3c98e26090 RCX: 00007f3c98b9de99
[  288.005901][   T31] RDX: 000000000000000a RSI: 0000200000000340 RDI: 0000000000000004
[  288.013878][   T31] RBP: 00007f3c98c33eaf R08: 0000000000000000 R09: 0000000000000000
[  288.022429][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.030492][   T31] R13: 00007f3c98e26128 R14: 00007f3c98e26090 R15: 00007ffebca1fb98
[  288.038572][   T31]  </TASK>
[  288.041622][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  288.050855][   T31] INFO: task syz.5.330:6807 blocked for more than 148 seconds.
[  288.064151][   T31]       Not tainted syzkaller #0
[  288.069150][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  288.084390][   T31] task:syz.5.330       state:D stack:27304 pid:6807  tgid:6804  ppid:5622   task_flags:0x400040 flags:0x00080002
[  288.108913][   T31] Call Trace:
[  288.116500][   T31]  <TASK>
[  288.119449][   T31]  __schedule+0x17d9/0x56c0
[  288.124006][   T31]  ? __lock_acquire+0x683/0x2cf0
[  288.129130][   T31]  ? __lock_acquire+0x683/0x2cf0
[  288.134102][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  288.139930][   T31]  ? kernel_text_address+0xa5/0xe0
[  288.145162][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  288.150896][   T31]  ? __kernel_text_address+0xd/0x30
[  288.156183][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  288.162342][   T31]  ? __pfx___schedule+0x10/0x10
[  288.167253][   T31]  ? schedule+0x90/0x2b0
[  288.171511][   T31]  schedule+0x164/0x2b0
[  288.177482][   T31]  schedule_preempt_disabled+0x13/0x30
[  288.189432][   T31]  __mutex_lock+0x7bf/0x1550
[  288.194067][   T31]  ? nfsctl_transaction_write+0xc7/0x160
[  288.199841][   T31]  ? __mutex_lock+0x5d4/0x1550
[  288.204621][   T31]  ? write_threads+0x39d/0x5a0
[  288.209512][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  288.214548][   T31]  ? simple_strntoull+0x111/0x190
[  288.220950][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  288.226708][   T31]  ? qword_get+0x5ad/0x650
[  288.231150][   T31]  write_threads+0x39d/0x5a0
[  288.235865][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  288.241531][   T31]  ? __pfx_write_threads+0x10/0x10
[  288.246937][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  288.252704][   T31]  ? _copy_from_user+0x94/0xb0
[  288.259861][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  288.265658][   T31]  ? simple_transaction_get+0x12d/0x160
[  288.271268][   T31]  nfsctl_transaction_write+0x10f/0x160
[  288.276901][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  288.289273][   T31]  vfs_write+0x296/0xba0
[  288.293571][   T31]  ? __pfx_vfs_write+0x10/0x10
[  288.298482][   T31]  ? __fget_files+0x2a/0x420
[  288.303142][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  288.308880][   T31]  ? __fget_files+0x3a2/0x420
[  288.313591][   T31]  ? __fget_files+0x2a/0x420
[  288.318293][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  288.323950][   T31]  ksys_write+0x150/0x270
[  288.328638][   T31]  ? __pfx_ksys_write+0x10/0x10
[  288.333529][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.342231][   T31]  do_syscall_64+0x174/0x580
[  288.346911][   T31]  ? trace_irq_disable+0x3b/0x140
[  288.351947][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.358819][   T31] RIP: 0033:0x7f3c98b9de99
[  288.363302][   T31] RSP: 002b:00007f3c99acc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  288.371814][   T31] RAX: ffffffffffffffda RBX: 00007f3c98e26180 RCX: 00007f3c98b9de99
[  288.379883][   T31] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000005
[  288.396865][   T31] RBP: 00007f3c98c33eaf R08: 0000000000000000 R09: 0000000000000000
[  288.404864][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.412882][   T31] R13: 00007f3c98e26218 R14: 00007f3c98e26180 R15: 00007ffebca1fb98
[  288.422225][   T31]  </TASK>
[  288.425264][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  288.434357][   T31] INFO: task syz.5.330:6808 blocked for more than 148 seconds.
[  288.450859][   T31]       Not tainted syzkaller #0
[  288.455860][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  288.464556][   T31] task:syz.5.330       state:D stack:28808 pid:6808  tgid:6804  ppid:5622   task_flags:0x400040 flags:0x00080002
[  288.476788][   T31] Call Trace:
[  288.480066][   T31]  <TASK>
[  288.483009][   T31]  __schedule+0x17d9/0x56c0
[  288.498974][   T31]  ? __lock_acquire+0x683/0x2cf0
[  288.504000][   T31]  ? __lock_acquire+0x683/0x2cf0
[  288.509077][   T31]  ? __pfx_file_ioctl+0x10/0x10
[  288.514130][   T31]  ? __pfx___schedule+0x10/0x10
[  288.519207][   T31]  ? schedule+0x90/0x2b0
[  288.523475][   T31]  schedule+0x164/0x2b0
[  288.527740][   T31]  schedule_preempt_disabled+0x13/0x30
[  288.533247][   T31]  __mutex_lock+0x7bf/0x1550
[  288.537884][   T31]  ? __mutex_lock+0x5d4/0x1550
[  288.542662][   T31]  ? fdget_pos+0x246/0x320
[  288.547321][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  288.552387][   T31]  ? __fget_files+0x2a/0x420
[  288.557064][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  288.562711][   T31]  ? __fget_files+0x3a2/0x420
[  288.567507][   T31]  ? __fget_files+0x2a/0x420
[  288.572143][   T31]  fdget_pos+0x246/0x320
[  288.577513][   T31]  ksys_write+0x79/0x270
[  288.581785][   T31]  ? __pfx_ksys_write+0x10/0x10
[  288.586734][   T31]  ? __pfx_kcov_ioctl+0x10/0x10
[  288.598213][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.604323][   T31]  do_syscall_64+0x174/0x580
[  288.609172][   T31]  ? trace_irq_disable+0x3b/0x140
[  288.614220][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.620316][   T31] RIP: 0033:0x7f3c98b9de99
[  288.624738][   T31] RSP: 002b:00007f3c99aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  288.633271][   T31] RAX: ffffffffffffffda RBX: 00007f3c98e26270 RCX: 00007f3c98b9de99
[  288.641322][   T31] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000005
[  288.649386][   T31] RBP: 00007f3c98c33eaf R08: 0000000000000000 R09: 0000000000000000
[  288.664126][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.672358][   T31] R13: 00007f3c98e26308 R14: 00007f3c98e26270 R15: 00007ffebca1fb98
[  288.680444][   T31]  </TASK>
[  288.683460][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  288.698683][   T31] 
[  288.698683][   T31] Showing all locks held in the system:
[  288.711096][   T31] 1 lock held by pool_workqueue_/3:
[  288.716383][   T31] 1 lock held by khungtaskd/31:
[  288.721230][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  288.731184][   T31] 2 locks held by getty/5376:
[  288.736601][   T31]  #0: ffff8880364b40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  288.746596][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  288.757034][   T31] 3 locks held by syz.4.222/6506:
[  288.762102][   T31]  #0: ffff88807fa3eb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  288.773296][   T31]  #1: ffff88802739e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  288.782588][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  288.791489][   T31] 3 locks held by syz.4.222/6508:
[  288.802868][   T31]  #0: ffff88807fa577b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  288.812620][   T31]  #1: ffff88802739e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  288.823021][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  288.832537][   T31] 1 lock held by syz.4.222/6511:
[  288.837604][   T31]  #0: ffff88807fa577b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  288.846774][   T31] 3 locks held by syz.1.246/6593:
[  288.851814][   T31]  #0: ffff88801fbac630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  288.860954][   T31]  #1: ffff888066770450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  288.870051][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  288.879285][   T31] 3 locks held by syz.1.246/6594:
[  288.884317][   T31]  #0: ffff888026623eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  288.893715][   T31]  #1: ffff888066770450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  288.912224][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  288.921160][   T31] 3 locks held by syz.1.246/6595:
[  288.926238][   T31]  #0: ffff88801c6da7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  288.935312][   T31]  #1: ffff888066770450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  288.944370][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  288.953530][   T31] 3 locks held by syz.3.263/6648:
[  288.958627][   T31]  #0: ffff88802a2da630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  288.967881][   T31]  #1: ffff888073068450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  288.979612][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  288.988923][   T31] 3 locks held by syz.0.288/6711:
[  288.993968][   T31]  #0: ffff888032006d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.011164][   T31]  #1: ffff888079fb0450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.020699][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  289.029987][   T31] 3 locks held by syz.2.316/6772:
[  289.035040][   T31]  #0: ffff88807f3f62b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.044254][   T31]  #1: ffff88802961c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.053451][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  289.062934][   T31] 3 locks held by syz.5.330/6805:
[  289.068028][   T31]  #0: ffff888012153cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.077202][   T31]  #1: ffff888030450450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.086392][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  289.095712][   T31] 3 locks held by syz.5.330/6806:
[  289.107681][   T31]  #0: ffff88807f6beb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.117083][   T31]  #1: ffff888030450450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.126571][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  289.135862][   T31] 3 locks held by syz.5.330/6807:
[  289.141014][   T31]  #0: ffff88807f6be0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.150362][   T31]  #1: ffff888030450450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.159681][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  289.168856][   T31] 1 lock held by syz.5.330/6808:
[  289.173794][   T31]  #0: ffff88807f6be0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.182926][   T31] 3 locks held by syz.6.345/6938:
[  289.187999][   T31]  #0: ffff88807b362b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.197157][   T31]  #1: ffff888072a2a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.218105][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  289.227265][   T31] 3 locks held by syz.6.345/6942:
[  289.232316][   T31]  #0: ffff88801221a7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.241765][   T31]  #1: ffff888072a2a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.250900][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  289.260191][   T31] 3 locks held by syz.7.346/6950:
[  289.265230][   T31]  #0: ffff888034f510b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.274414][   T31]  #1: ffff88807e5a6450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.283516][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  289.292466][   T31] 1 lock held by syz.7.346/6953:
[  289.298373][   T31]  #0: ffff888034f510b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.313819][   T31] 1 lock held by syz.7.346/6955:
[  289.319543][   T31]  #0: ffff888034f510b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.328948][   T31] 1 lock held by syz.7.346/6957:
[  289.333911][   T31]  #0: ffff888034f510b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.343284][   T31] 3 locks held by syz.7.346/6959:
[  289.348671][   T31]  #0: ffff888012505970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.357813][   T31]  #1: ffff88807e5a6450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.366916][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  289.376458][   T31] 3 locks held by syz.7.346/6966:
[  289.381647][   T31]  #0: ffff88807be41970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.390810][   T31]  #1: ffff88807e5a6450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.399922][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  289.415942][   T31] 3 locks held by syz.9.370/7184:
[  289.421006][   T31]  #0: ffff888036cfb5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.431343][   T31]  #1: ffff888077d62450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.441621][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  289.451864][   T31] 3 locks held by syz.9.370/7185:
[  289.457819][   T31]  #0: ffff88807c047970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.467116][   T31]  #1: ffff888077d62450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.476396][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  289.486573][   T31] 3 locks held by syz.9.370/7186:
[  289.491584][   T31]  #0: ffff8880266287f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.500944][   T31]  #1: ffff888077d62450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.510103][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  289.526896][   T31] 3 locks held by syz.1.388/7254:
[  289.531904][   T31]  #0: ffff888032cadcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.541451][   T31]  #1: ffff88802a082450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.550572][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  289.559871][   T31] 3 locks held by syz.1.388/7255:
[  289.564917][   T31]  #0: ffff88807bb49b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.574484][   T31]  #1: ffff88802a082450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.583665][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  289.592611][   T31] 3 locks held by syz.1.388/7256:
[  289.597708][   T31]  #0: ffff88802bea0d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.606853][   T31]  #1: ffff88802a082450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.636065][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  289.645572][   T31] 3 locks held by syz.4.391/7267:
[  289.650595][   T31]  #0: ffff88807b878b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.659862][   T31]  #1: ffff88802a87c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.668980][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0
[  289.678546][   T31] 3 locks held by syz.4.391/7268:
[  289.683575][   T31]  #0: ffff88807bb489b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.693681][   T31]  #1: ffff88802a87c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.703305][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0
[  289.712794][   T31] 3 locks held by syz.4.391/7269:
[  289.726702][   T31]  #0: ffff888034751eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.736022][   T31]  #1: ffff88802a87c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.745078][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  289.755297][   T31] 3 locks held by syz.4.391/7271:
[  289.760541][   T31]  #0: ffff88807bb30d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.769880][   T31]  #1: ffff88802a87c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.779407][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  289.788570][   T31] 3 locks held by syz.4.391/7273:
[  289.793664][   T31]  #0: ffff88807bb302b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.803191][   T31]  #1: ffff88802a87c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.812292][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  289.828231][   T31] 3 locks held by syz.8.393/7291:
[  289.833276][   T31]  #0: ffff88807b3630b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.842422][   T31]  #1: ffff888034a86450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.851476][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  289.860953][   T31] 3 locks held by syz.8.393/7292:
[  289.866050][   T31]  #0: ffff88807b3620f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.875162][   T31]  #1: ffff888034a86450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.884298][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  289.893481][   T31] 5 locks held by kworker/u8:28/7362:
[  289.898910][   T31]  #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  289.909124][   T31]  #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  289.918218][   T31]  #2: ffff88804f82f258 (&devlink->lock_key#29){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  289.934836][   T31]  #3: ffff8880a30b0168 (&rdev->bss_lock){+.-.}-{3:3}, at: debug_check_no_obj_freed+0xcb/0x450
[  289.946773][   T31]  #4: ffff8880b87281d8 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3e0
[  289.957371][   T31] 3 locks held by syz.0.403/7368:
[  289.962408][   T31]  #0: ffff88802a2fb970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  289.971546][   T31]  #1: ffff888012822450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  289.980609][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  289.989493][   T31] 3 locks held by syz.0.403/7371:
[  289.994513][   T31]  #0: ffff88802a3010b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.003698][   T31]  #1: ffff888012822450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.012792][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  290.028742][   T31] 3 locks held by syz.3.407/7379:
[  290.033850][   T31]  #0: ffff888026652d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.044013][   T31]  #1: ffff88802b2a2450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.053195][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  290.062385][   T31] 3 locks held by syz.3.407/7380:
[  290.067463][   T31]  #0: ffff88802bea5270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.076664][   T31]  #1: ffff88802b2a2450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.085748][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  290.094584][   T31] 3 locks held by syz.3.407/7381:
[  290.101941][   T31]  #0: ffff8880786317b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.112124][   T31]  #1: ffff88802b2a2450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.121496][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  290.137252][   T31] 3 locks held by syz.2.414/7431:
[  290.142292][   T31]  #0: ffff8880262d0d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.151450][   T31]  #1: ffff88807b06e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.160881][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  290.170133][   T31] 3 locks held by syz.2.414/7432:
[  290.175185][   T31]  #0: ffff888034749970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.184978][   T31]  #1: ffff88807b06e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.194182][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  290.203944][   T31] 3 locks held by syz.2.414/7435:
[  290.209040][   T31]  #0: ffff888079f3dcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.218211][   T31]  #1: ffff88807b06e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.233724][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  290.242921][   T31] 3 locks held by kworker/u8:40/7585:
[  290.248468][   T31]  #0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  290.266366][   T31]  #1: ffffc900039efc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  290.277458][   T31]  #2: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  290.286531][   T31] 3 locks held by syz.6.431/7619:
[  290.291561][   T31]  #0: ffff888078269cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.300729][   T31]  #1: ffff888065974450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.309915][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  290.319093][   T31] 3 locks held by syz.7.440/7677:
[  290.324107][   T31]  #0: ffff8880347490b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.339880][   T31]  #1: ffff88807a9dc450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.348953][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  290.358259][   T31] 3 locks held by syz.7.440/7678:
[  290.363378][   T31]  #0: ffff88807b37cef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.372808][   T31]  #1: ffff88807a9dc450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.381971][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  290.391157][   T31] 3 locks held by syz.9.428/7915:
[  290.396273][   T31]  #0: ffff88807f6bf5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.405443][   T31]  #1: ffff888095720450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.414472][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  290.423975][   T31] 3 locks held by syz.9.428/7918:
[  290.429073][   T31]  #0: ffff888012153270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.444968][   T31]  #1: ffff888095720450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.454096][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  290.463287][   T31] 3 locks held by syz.9.428/7920:
[  290.468483][   T31]  #0: ffff888076a66ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.477755][   T31]  #1: ffff888095720450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.486940][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  290.496544][   T31] 1 lock held by syz.9.428/7927:
[  290.501533][   T31]  #0: ffff888076a66ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.510672][   T31] 3 locks held by syz.4.449/7949:
[  290.515786][   T31]  #0: ffff8880a27c1270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.524922][   T31]  #1: ffff88809552e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.534034][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  290.549369][   T31] 3 locks held by syz.4.449/7951:
[  290.554439][   T31]  #0: ffff8880a27c3eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.563590][   T31]  #1: ffff88809552e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.572686][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  290.583578][   T31] 3 locks held by syz.3.451/7993:
[  290.588956][   T31]  #0: ffff88807bb49270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.598155][   T31]  #1: ffff88802643c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.607220][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  290.616083][   T31] 3 locks held by syz.0.463/8033:
[  290.621100][   T31]  #0: ffff88802bea1b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.630344][   T31]  #1: ffff88807970e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.646261][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  290.655142][   T31] 3 locks held by syz.0.463/8034:
[  290.660609][   T31]  #0: ffff888078631970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.669766][   T31]  #1: ffff88807970e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.678987][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  290.688137][   T31] 3 locks held by syz.1.464/8036:
[  290.693146][   T31]  #0: ffff8880782457b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.702481][   T31]  #1: ffff888051c24450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.711580][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  290.720701][   T31] 3 locks held by syz.1.464/8037:
[  290.725756][   T31]  #0: ffff8880782447f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.734827][   T31]  #1: ffff888051c24450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.757316][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  290.766253][   T31] 1 lock held by syz.1.464/8038:
[  290.771308][   T31]  #0: ffff8880782457b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.780512][   T31] 3 locks held by syz.1.464/8039:
[  290.785624][   T31]  #0: ffff888012980b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.794728][   T31]  #1: ffff888051c24450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.803790][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  290.813109][   T31] 3 locks held by syz.8.478/8132:
[  290.818348][   T31]  #0: ffff8880a27ef5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.827513][   T31]  #1: ffff8880a35b6450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.836567][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  290.852191][   T31] 3 locks held by syz.8.478/8133:
[  290.857292][   T31]  #0: ffff8880a27ef430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.866471][   T31]  #1: ffff8880a35b6450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.875528][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  290.884362][   T31] 3 locks held by syz.8.478/8134:
[  290.889600][   T31]  #0: ffff888026629cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  290.909504][   T31]  #1: ffff8880a35b6450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  290.919104][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  290.928489][   T31] 2 locks held by syz-executor/8181:
[  290.933798][   T31]  #0: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  290.942930][   T31]  #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  290.960274][   T31] 1 lock held by syz-executor/8230:
[  290.965580][   T31]  #0: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  290.974620][   T31] 2 locks held by syz-executor/8240:
[  290.981178][   T31]  #0: ffff8881525ecea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  290.991281][   T31]  #1: ffff8881525ec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0
[  291.001117][   T31] 3 locks held by syz.6.495/8303:
[  291.006205][   T31]  #0: ffff88807b121eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  291.015583][   T31]  #1: ffff8880a446a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  291.024640][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  291.033738][   T31] 3 locks held by syz.6.495/8306:
[  291.038813][   T31]  #0: ffff888026653eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  291.054719][   T31]  #1: ffff8880a446a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  291.064637][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  291.073791][   T31] 4 locks held by syz-executor/8323:
[  291.079104][   T31]  #0: ffff88814bb54ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  291.089150][   T31]  #1: ffff88814bb540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0
[  291.098909][   T31]  #2: ffffffff901b4d20 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260
[  291.108988][   T31]  #3: ffff8880852002f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520
[  291.118475][   T31] 3 locks held by syz.2.507/8438:
[  291.123494][   T31]  #0: ffff88803473e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  291.132661][   T31]  #1: ffff8880a3fd4450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  291.143171][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  291.158939][   T31] 3 locks held by syz.2.507/8441:
[  291.163979][   T31]  #0: ffff88801d789b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  291.173162][   T31]  #1: ffff8880a3fd4450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  291.182243][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  291.192084][   T31] 
[  291.194433][   T31] =============================================
[  291.194433][   T31] 
[  291.202874][   T31] NMI backtrace for cpu 0
[  291.202891][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  291.202917][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  291.202932][   T31] Call Trace:
[  291.202943][   T31]  <TASK>
[  291.202953][   T31]  dump_stack_lvl+0xe8/0x150
[  291.202995][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  291.203033][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.203064][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  291.203105][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  291.203148][   T31]  sys_info+0x135/0x170
[  291.203183][   T31]  watchdog+0xfd7/0x1030
[  291.203225][   T31]  ? watchdog+0x1c7/0x1030
[  291.203265][   T31]  kthread+0x388/0x470
[  291.203301][   T31]  ? __pfx_watchdog+0x10/0x10
[  291.203330][   T31]  ? __pfx_kthread+0x10/0x10
[  291.203368][   T31]  ret_from_fork+0x514/0xb70
[  291.203410][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  291.203447][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.203478][   T31]  ? __switch_to+0xc89/0x1420
[  291.203516][   T31]  ? __pfx_kthread+0x10/0x10
[  291.203555][   T31]  ret_from_fork_asm+0x1a/0x30
[  291.203606][   T31]  </TASK>
[  291.203617][   T31] Sending NMI from CPU 0 to CPUs 1:
[  291.335345][    C1] NMI backtrace for cpu 1
[  291.335366][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  291.335393][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  291.335411][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  291.335444][    C1] Code: dc 7e 02 e9 fe 5f 3f f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 8e 18 00 fb f4 <e9> d7 5f 3f f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  291.335463][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246
[  291.335484][    C1] RAX: 0000000000132c8b RBX: ffffffff819b4450 RCX: 0000000080000001
[  291.335500][    C1] RDX: 0000000000000001 RSI: ffffffff8e22d06b RDI: ffffffff8c4bdc80
[  291.335517][    C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
[  291.335534][    C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
[  291.335550][    C1] R13: 1ffff11003bd4000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  291.335571][    C1] FS:  0000000000000000(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000
[  291.335590][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.335605][    C1] CR2: 00005588278e1660 CR3: 000000000e946000 CR4: 0000000000350ef0
[  291.335624][    C1] Call Trace:
[  291.335633][    C1]  <TASK>
[  291.335641][    C1]  default_idle+0x9/0x20
[  291.335670][    C1]  default_idle_call+0x72/0xb0
[  291.335700][    C1]  do_idle+0x2e0/0x540
[  291.335735][    C1]  ? __pfx_do_idle+0x10/0x10
[  291.335768][    C1]  ? do_idle+0xc/0x540
[  291.335800][    C1]  cpu_startup_entry+0x43/0x60
[  291.335831][    C1]  start_secondary+0x101/0x110
[  291.335863][    C1]  common_startup_64+0x13e/0x157
[  291.335902][    C1]  </TASK>
[  291.338498][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  291.338517][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  291.338545][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  291.338568][   T31] Call Trace:
[  291.338579][   T31]  <TASK>
[  291.338591][   T31]  vpanic+0x56c/0xa60
[  291.338634][   T31]  ? __pfx___schedule+0x10/0x10
[  291.338662][   T31]  ? __pfx_vpanic+0x10/0x10
[  291.338699][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.338742][   T31]  panic+0xc5/0xd0
[  291.338779][   T31]  ? __pfx_panic+0x10/0x10
[  291.338815][   T31]  ? preempt_schedule_common+0x82/0xd0
[  291.338844][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  291.338878][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  291.338923][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  291.338967][   T31]  watchdog+0x1030/0x1030
[  291.339009][   T31]  ? watchdog+0x1c7/0x1030
[  291.339050][   T31]  kthread+0x388/0x470
[  291.339089][   T31]  ? __pfx_watchdog+0x10/0x10
[  291.339119][   T31]  ? __pfx_kthread+0x10/0x10
[  291.339158][   T31]  ret_from_fork+0x514/0xb70
[  291.339201][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  291.339239][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.339269][   T31]  ? __switch_to+0xc89/0x1420
[  291.339305][   T31]  ? __pfx_kthread+0x10/0x10
[  291.339345][   T31]  ret_from_fork_asm+0x1a/0x30
[  291.339388][   T31]  </TASK>
[  291.635728][   T31] Kernel Offset: disabled
[  291.640035][   T31] Rebooting in 86400 seconds..