last executing test programs: 4.951872756s ago: executing program 0 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10 1\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000100005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000110005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000120005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000130005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000140005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000150005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000160005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000170005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000180005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000190005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001a0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001b0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001c0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001e0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001f0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000200005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000210005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000220005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000230005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) 3.604460004s ago: executing program 1 (id=88): r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x50, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="5800010054000100500001000900010067617465000000004000020020000100000000000000000000000000000000000000000000000000180003000c000100010000000a00000000000000"}]}, 0x54}], 0x1}, 0x0) 3.431898449s ago: executing program 0 (id=90): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x3, 0x290, 0xffffffff, 0x70, 0x70, 0x108, 0xffffffff, 0x0, 0x70, 0x0, 0x108, 0xffffffff, 0x3, &(0x7f0000001000), {[{{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x33}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xffff]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r1 = socket$inet(0x2, 0x3, 0x33) sendto$inet(r1, &(0x7f0000000100)="33000000000000000000000100000000", 0x10, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3.335447272s ago: executing program 1 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_LINK={0x8, 0x5, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) (async) 3.200021762s ago: executing program 0 (id=94): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "1234567800", "123456781234567800", "123400", "0000000000000001"}, 0x28) 3.096481215s ago: executing program 0 (id=95): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x1, 0x2, 0x3, 0x4, 0x0, 0x1, 0x2, 0x3, 0x4, 0x6, 0x0, {[{{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x544}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x1f90, @loopback}, 0x10) 2.935817052s ago: executing program 5 (id=98): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/24, &(0x7f0000000200)=0x18) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/32, &(0x7f0000000200)=0x20) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/24, &(0x7f0000000200)=0x18) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/24, &(0x7f0000000200)=0x18) 2.907146352s ago: executing program 0 (id=99): syz_clone(0x40000011, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 2.7572728s ago: executing program 5 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x1, 0x1}}, @TCA_RED_STAB={0x104, 0x2, 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}]}}]}, 0x58}}, 0x0) 2.644066663s ago: executing program 1 (id=102): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x0, 0x1, [@m_tunnel_key={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x0, 0x1, {{0x0, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x2, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x0, 0x3, @loopback}]}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@deltaction={0x38, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}]}]}, 0x38}}, 0x0) 2.403062557s ago: executing program 5 (id=105): add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="0100000002000000ffffffff0100"/24, 0x18, 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @local}}, 0x24) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1235, @remote}}, 0x24) sendto$rxrpc(r0, &(0x7f0000000100)='test\x00', 0x4, 0x0, 0x0, 0x0) 2.396932808s ago: executing program 1 (id=106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x2, 0x1, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x6, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xb8, 0xb8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect(r2, &(0x7f0000000300)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r2, &(0x7f0000000400)="12345678", 0x8, 0x0, 0x0, 0x0) 2.178593505s ago: executing program 1 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000002f0)='./pipefs/nfsd\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) 2.059992321s ago: executing program 5 (id=110): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='+tcp 2049\n\x00', 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x115c, @loopback}, 0x10) write(r2, &(0x7f0000000300)="80000024000000010000000000000002000186a300000003000000000000000700"/44, 0x28) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000540), 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x1}, [@generic="0800010000000000"]}, 0x1c}}, 0x0) write(r2, &(0x7f0000000600)="15030300020100", 0x7) 1.963446889s ago: executing program 2 (id=111): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x11, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x12, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x15, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x16, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x21, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x22, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x26, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x27, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x28, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x2a, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x2b, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x2c, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x2d, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x2f, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x30, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) 1.762773198s ago: executing program 5 (id=114): r0 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r0, &(0x7f0000000040), 0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x1) 1.718154854s ago: executing program 4 (id=115): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000800), 0x4) 1.65668254s ago: executing program 2 (id=116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 1.552016386s ago: executing program 2 (id=117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)='ceph v027\x00'/153, 0x99) write(r1, &(0x7f0000000080)="01ffffffffffffffff0000000000000000000000000000000001000000", 0x1d) write(r1, &(0x7f00000000c0)="0100000000000000000000000000000000290000000400000000000000100000000000010000000000000000000000572b1fb2", 0x33) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 1.551605799s ago: executing program 4 (id=118): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0x1000, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x124, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}}, 0x28) sendto$inet(r1, &(0x7f0000001000)='\x00', 0x2000, 0x8001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000003000)='\x00', 0x2000, 0x8001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000005000)='\x00', 0x2000, 0x8001, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000007000), 0x100, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 1.356250944s ago: executing program 4 (id=119): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="01154e00010000112233445588fb00010001160c00"/34, 0x22, 0x0, &(0x7f0000000040)={0x11, 0x88fb, r1, 0x0, 0x0, 0x0}, 0x14) 1.271371539s ago: executing program 4 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000004c000000030a01040000000000000000010000000900010073797a30000000000900030073797a300000000014000480080001400000000108000240000000000b00060066696c746572000054000000060a01040000000000000000010000000900010073797a30000000000900020073797a300000000028000480240001800b00010072656a65637400001400028008000140000000020500020000000000140000001100010000000000000000000000000a"], 0xec}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 1.088079128s ago: executing program 4 (id=121): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200)=0x1, 0x4) sendto$inet(r2, &(0x7f0000000100)='msg1\x00', 0x5, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000200)='msg2\x00', 0x5, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)='msg3\x00', 0x5, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)='msg4\x00', 0x5, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xe) 951.293619ms ago: executing program 3 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x0) 813.416162ms ago: executing program 3 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x2, 0x1, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x6, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xb8, 0x0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect(r2, &(0x7f0000000300)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r2, &(0x7f0000000400)="12345678", 0x8, 0x0, 0x0, 0x0) 684.085004ms ago: executing program 3 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='10 1 1\n', 0x7) (async) r1 = io_uring_setup(0x1, &(0x7f0000000300)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000400)={0x1, 0x0, 0x10, 0x0, &(0x7f0000000500)={&(0x7f0000001000), 0x1000}, &(0x7f0000000600)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 537.357613ms ago: executing program 2 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100005060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012000d00010076736f636b6d6f6e00000000"], 0x44}}, 0x0) 532.259661ms ago: executing program 3 (id=126): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip6_vti0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 355.681764ms ago: executing program 3 (id=127): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400), 0x400}], 0x1}, 0x40) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400010301000000000000002c00"/36], 0x24}}, 0x0) 355.465511ms ago: executing program 2 (id=128): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 255.373184ms ago: executing program 3 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002000, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x989680}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x1234, 0x4e22, r3, r2, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) 248.63999ms ago: executing program 2 (id=130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) read(r2, &(0x7f0000000500), 0x200) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) read(r2, &(0x7f0000000500), 0x200) write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/26, 0x1a) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 180.081948ms ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0 1 1\x00', 0x6) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7117}]}}}]}}}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 162.231311ms ago: executing program 0 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x20, 0x1, 0x1, 0x0, {0x1}, [@generic="000000000b0001006f76732d73797374656d0000"]}, 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x20, 0x301, 0x1, 0x0, {0x3}, [@generic='\x00\x00\x00\x00']}, 0x18}}, 0x0) 159.742317ms ago: executing program 4 (id=133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xd457}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x28}}}}, 0x2d8) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) 0s ago: executing program 5 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt/sys/net/ipv4/tcp_fastopen\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='7\x00', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000)="00112233", 0x4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 79.870264][ T5608] cgroup: Unknown subsys name 'net' [ 80.007180][ T5608] cgroup: Unknown subsys name 'cpuset' [ 80.016584][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.587930][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.627702][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.636970][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.645628][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.654729][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.663007][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.663105][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.677786][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.678644][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.693674][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.695201][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.713136][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.720575][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.728550][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.730869][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.737908][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.743142][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.750138][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.773521][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.782478][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.794801][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.804633][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.820785][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.829878][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.837570][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.847842][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.857849][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.864982][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.873572][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.882716][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.890892][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.030356][ T10] cfg80211: failed to load regulatory.db [ 87.775943][ T5637] Bluetooth: hci0: command tx timeout [ 87.853035][ T5643] Bluetooth: hci1: command tx timeout [ 87.853046][ T5632] Bluetooth: hci2: command tx timeout [ 87.861053][ T5637] Bluetooth: hci3: command tx timeout [ 87.934247][ T5637] Bluetooth: hci4: command tx timeout [ 87.934275][ T5643] Bluetooth: hci5: command tx timeout [ 88.213421][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.220700][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.227978][ T5631] bridge_slave_0: entered allmulticast mode [ 88.235660][ T5631] bridge_slave_0: entered promiscuous mode [ 88.294766][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.301940][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.309237][ T5638] bridge_slave_0: entered allmulticast mode [ 88.316679][ T5638] bridge_slave_0: entered promiscuous mode [ 88.326278][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.333751][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.340973][ T5631] bridge_slave_1: entered allmulticast mode [ 88.348718][ T5631] bridge_slave_1: entered promiscuous mode [ 88.368742][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.375951][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.383341][ T5625] bridge_slave_0: entered allmulticast mode [ 88.390788][ T5625] bridge_slave_0: entered promiscuous mode [ 88.418247][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.425449][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.432687][ T5638] bridge_slave_1: entered allmulticast mode [ 88.440128][ T5638] bridge_slave_1: entered promiscuous mode [ 88.466734][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.473954][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.481181][ T5625] bridge_slave_1: entered allmulticast mode [ 88.488826][ T5625] bridge_slave_1: entered promiscuous mode [ 88.604666][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.638078][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.646518][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.654441][ T5640] bridge_slave_0: entered allmulticast mode [ 88.662175][ T5640] bridge_slave_0: entered promiscuous mode [ 88.679571][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.692228][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.716657][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.726543][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.734028][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.741174][ T5640] bridge_slave_1: entered allmulticast mode [ 88.748841][ T5640] bridge_slave_1: entered promiscuous mode [ 88.765133][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.799226][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.806609][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.813891][ T5626] bridge_slave_0: entered allmulticast mode [ 88.821246][ T5626] bridge_slave_0: entered promiscuous mode [ 88.831299][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.902911][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.910090][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.917492][ T5626] bridge_slave_1: entered allmulticast mode [ 88.925022][ T5626] bridge_slave_1: entered promiscuous mode [ 88.983222][ T5638] team0: Port device team_slave_0 added [ 88.991358][ T5631] team0: Port device team_slave_0 added [ 89.014107][ T5625] team0: Port device team_slave_0 added [ 89.023014][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.032256][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.039573][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.046805][ T5639] bridge_slave_0: entered allmulticast mode [ 89.055125][ T5639] bridge_slave_0: entered promiscuous mode [ 89.065708][ T5638] team0: Port device team_slave_1 added [ 89.073740][ T5631] team0: Port device team_slave_1 added [ 89.081925][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.093195][ T5625] team0: Port device team_slave_1 added [ 89.100946][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.122334][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.129701][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.137244][ T5639] bridge_slave_1: entered allmulticast mode [ 89.145083][ T5639] bridge_slave_1: entered promiscuous mode [ 89.178578][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.274359][ T5640] team0: Port device team_slave_0 added [ 89.293913][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.300879][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.327190][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.340082][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.347250][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.373462][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.397454][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.404703][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.430809][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.445641][ T5640] team0: Port device team_slave_1 added [ 89.456332][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.466180][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.473432][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.499366][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.511286][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.518498][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.544549][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.558256][ T5626] team0: Port device team_slave_0 added [ 89.564752][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.572083][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.598022][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.625492][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.651724][ T5626] team0: Port device team_slave_1 added [ 89.738755][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.746091][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.772108][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.788452][ T5639] team0: Port device team_slave_0 added [ 89.797434][ T5639] team0: Port device team_slave_1 added [ 89.803909][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.810867][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.837428][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.849227][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.856938][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.883040][ T5637] Bluetooth: hci0: command tx timeout [ 89.883488][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.934638][ T5637] Bluetooth: hci1: command tx timeout [ 89.940126][ T5643] Bluetooth: hci3: command tx timeout [ 89.940158][ T5632] Bluetooth: hci2: command tx timeout [ 89.960446][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.967617][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.993951][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.012739][ T5637] Bluetooth: hci5: command tx timeout [ 90.018480][ T5632] Bluetooth: hci4: command tx timeout [ 90.084122][ T5638] hsr_slave_0: entered promiscuous mode [ 90.090799][ T5638] hsr_slave_1: entered promiscuous mode [ 90.105179][ T5631] hsr_slave_0: entered promiscuous mode [ 90.111596][ T5631] hsr_slave_1: entered promiscuous mode [ 90.118518][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 90.124621][ T5631] Cannot create hsr debugfs directory [ 90.137208][ T5625] hsr_slave_0: entered promiscuous mode [ 90.144187][ T5625] hsr_slave_1: entered promiscuous mode [ 90.150364][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 90.156132][ T5625] Cannot create hsr debugfs directory [ 90.162556][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.169570][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.195547][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.208168][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.215138][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.241223][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.285463][ T5640] hsr_slave_0: entered promiscuous mode [ 90.291877][ T5640] hsr_slave_1: entered promiscuous mode [ 90.298175][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 90.303932][ T5640] Cannot create hsr debugfs directory [ 90.448073][ T5626] hsr_slave_0: entered promiscuous mode [ 90.454868][ T5626] hsr_slave_1: entered promiscuous mode [ 90.461028][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 90.466833][ T5626] Cannot create hsr debugfs directory [ 90.611116][ T5639] hsr_slave_0: entered promiscuous mode [ 90.618073][ T5639] hsr_slave_1: entered promiscuous mode [ 90.624519][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 90.630237][ T5639] Cannot create hsr debugfs directory [ 91.201540][ T5625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.217391][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.225761][ T5625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.236666][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.245021][ T5625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.254951][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.263211][ T5625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.273989][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.358224][ T5640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.369601][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.377878][ T5640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.387934][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.398019][ T5640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.408377][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.417347][ T5640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.427915][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.526646][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.538274][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.547129][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.558012][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.571431][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.583072][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.591592][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.601939][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.728085][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.739832][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.748761][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.759403][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.770707][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.785874][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.795858][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.823127][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.833904][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.898830][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.911903][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.932973][ T5632] Bluetooth: hci0: command tx timeout [ 91.950771][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.958095][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.990976][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.003945][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.012164][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.019469][ T5632] Bluetooth: hci2: command tx timeout [ 92.022483][ T5637] Bluetooth: hci3: command tx timeout [ 92.031233][ T5632] Bluetooth: hci1: command tx timeout [ 92.042048][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.051029][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.060979][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.069474][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.079523][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.093450][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.100555][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.108301][ T5637] Bluetooth: hci4: command tx timeout [ 92.108355][ T5632] Bluetooth: hci5: command tx timeout [ 92.199581][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.234939][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.242157][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.275160][ T5639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.285873][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.294585][ T5639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.305056][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.323763][ T5639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.335714][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.352224][ T5639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.363920][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.373603][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.380706][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.415687][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.519730][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.565949][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.573148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.621215][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.628374][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.660096][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.754229][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.787999][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.835574][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.849448][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.856586][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.913990][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.921221][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.949416][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.956608][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.004821][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.011993][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.068632][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.210879][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.321320][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.328508][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.410837][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.435498][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.442700][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.936854][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.015588][ T5632] Bluetooth: hci0: command tx timeout [ 94.096096][ T5632] Bluetooth: hci3: command tx timeout [ 94.097530][ T5637] Bluetooth: hci1: command tx timeout [ 94.101539][ T5643] Bluetooth: hci2: command tx timeout [ 94.175270][ T5637] Bluetooth: hci5: command tx timeout [ 94.175285][ T5632] Bluetooth: hci4: command tx timeout [ 94.276641][ T5640] veth0_vlan: entered promiscuous mode [ 94.370985][ T5640] veth1_vlan: entered promiscuous mode [ 94.465537][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.574841][ T5640] veth0_macvtap: entered promiscuous mode [ 94.621254][ T5625] veth0_vlan: entered promiscuous mode [ 94.654872][ T5640] veth1_macvtap: entered promiscuous mode [ 94.700382][ T5625] veth1_vlan: entered promiscuous mode [ 94.761598][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.787925][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.839340][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.887423][ T5631] veth0_vlan: entered promiscuous mode [ 94.930738][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.940353][ T5631] veth1_vlan: entered promiscuous mode [ 94.961313][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.993331][ T1170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.056414][ T5625] veth0_macvtap: entered promiscuous mode [ 95.081757][ T5625] veth1_macvtap: entered promiscuous mode [ 95.216922][ T5631] veth0_macvtap: entered promiscuous mode [ 95.230387][ T5638] veth0_vlan: entered promiscuous mode [ 95.246532][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.258855][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.269113][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.280255][ T5631] veth1_macvtap: entered promiscuous mode [ 95.340874][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.374130][ T1121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.392033][ T5626] veth0_vlan: entered promiscuous mode [ 95.399362][ T5638] veth1_vlan: entered promiscuous mode [ 95.413944][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.420544][ T5626] veth1_vlan: entered promiscuous mode [ 95.424116][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.437722][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.461736][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.551484][ T5640] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.564130][ T5638] veth0_macvtap: entered promiscuous mode [ 95.641913][ T5638] veth1_macvtap: entered promiscuous mode [ 95.720007][ T5639] veth0_vlan: entered promiscuous mode [ 95.759314][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.782007][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.788171][ T5626] veth0_macvtap: entered promiscuous mode [ 95.872232][ T5626] veth1_macvtap: entered promiscuous mode [ 95.884935][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.897009][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.913249][ T5639] veth1_vlan: entered promiscuous mode [ 95.923145][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 95.941323][ T5861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7'. [ 95.957249][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.965889][ T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.974146][ T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.025797][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.073820][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.108481][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.130982][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.176039][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.203962][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.290870][ T5639] veth0_macvtap: entered promiscuous mode [ 96.316503][ T5639] veth1_macvtap: entered promiscuous mode [ 96.352962][ T251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.376972][ T251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.414191][ T251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.623254][ T71] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.747150][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.799492][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.824480][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.840543][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.051420][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.074411][ T1121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.086287][ T251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.092746][ T1121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.096856][ T251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.233319][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.247681][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.389154][ T5890] Zero length message leads to an empty skb [ 97.655464][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.676617][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.745053][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.754186][ T1170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.771730][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.802762][ T1121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.906386][ T1121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.924848][ T1170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.127299][ T251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.188984][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.330521][ T5909] netlink: 'syz.2.14': attribute type 5 has an invalid length. [ 98.425914][ T1170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.435515][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.477779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.489359][ T5913] hsr_slave_0: left promiscuous mode [ 98.534185][ T5913] hsr_slave_1: left promiscuous mode [ 98.715315][ T5930] bond0: entered promiscuous mode [ 98.735268][ T5930] bond_slave_0: entered promiscuous mode [ 98.748331][ T5930] bond_slave_1: entered promiscuous mode [ 98.759112][ T5930] gretap0: entered promiscuous mode [ 98.766240][ T5930] dummy0: entered promiscuous mode [ 98.775550][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 98.781387][ T5930] Cannot create hsr debugfs directory [ 98.886049][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.904425][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.906075][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.962659][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.982666][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.213452][ T1170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.251795][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.419779][ T5629] IPVS: starting estimator thread 0... [ 99.543653][ T5949] IPVS: using max 25 ests per chain, 60000 per kthread [ 99.620101][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 99.648975][ T5929] infiniband syz1: set active [ 99.656177][ T5929] infiniband syz1: added veth0 [ 99.665139][ T5929] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 99.671260][ T5929] infiniband syz1: Couldn't open port 1 [ 99.687036][ T5929] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 99.692607][ T5914] NFSD: Unable to initialize client recovery tracking! (-110) [ 99.702894][ T5929] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 99.734007][ T5929] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 99.734946][ T5914] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 99.755293][ T5914] NFSD: starting 90-second grace period (net f00004b7) [ 99.897072][ T5929] RDS/IB: syz1: added [ 99.912195][ T5929] smc: adding ib device syz1 with port count 1 [ 99.919235][ T5929] smc: ib device syz1 port 1 has no pnetid [ 100.307198][ T5962] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.454627][ T5962] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.659188][ T5962] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.817678][ T5962] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.920069][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.40'. [ 101.964143][ T5998] netlink: 112 bytes leftover after parsing attributes in process `syz.2.40'. [ 102.665481][ T37] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.742627][ T5964] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.752980][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.776317][ T5977] lo speed is unknown, defaulting to 1000 [ 103.808649][ T5977] lo speed is unknown, defaulting to 1000 [ 103.817329][ T5977] lo speed is unknown, defaulting to 1000 [ 103.930661][ T29] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 103.956367][ T29] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 104.004396][ T29] usb 4-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 104.004579][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 104.022394][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 104.037537][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 104.055961][ T29] usb 4-1: Product: syz [ 104.070099][ T29] usb 4-1: Manufacturer: syz [ 104.165324][ T71] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.189247][ T71] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.225038][ T71] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.244001][ T71] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.350557][ T29] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 104.455272][ T5749] lo speed is unknown, defaulting to 1000 [ 104.461587][ T5977] infiniband syz0: set active [ 104.480301][ T5977] infiniband syz0: added lo [ 104.490997][ T5977] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 104.494669][ T5977] infiniband syz0: Couldn't open port 1 [ 104.509120][ T5977] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 104.524386][ T5977] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 104.541844][ T5977] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 104.601067][ T5977] RDS/IB: syz0: added [ 104.613028][ T5977] smc: adding ib device syz0 with port count 1 [ 104.619320][ T5977] smc: ib device syz0 port 1 has no pnetid [ 104.626097][ T5769] lo speed is unknown, defaulting to 1000 [ 104.639261][ T5977] lo speed is unknown, defaulting to 1000 [ 104.913863][ T5977] lo speed is unknown, defaulting to 1000 [ 104.985378][ T5787] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_CONNECT_MSG) [ 104.999863][ T6058] ceph: No mds server is up or the cluster is laggy [ 105.113731][ T6076] netlink: 'syz.0.73': attribute type 2 has an invalid length. [ 105.121911][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 105.155016][ T6076] : entered promiscuous mode [ 105.163469][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 105.205994][ T5977] lo speed is unknown, defaulting to 1000 [ 105.526111][ T5977] lo speed is unknown, defaulting to 1000 [ 105.689797][ T6088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.78'. [ 105.716068][ T6088] netlink: 48 bytes leftover after parsing attributes in process `syz.2.78'. [ 105.897926][ T5977] lo speed is unknown, defaulting to 1000 [ 106.004069][ T29] usb 4-1: device descriptor read/64, error -71 [ 106.199585][ T5977] lo speed is unknown, defaulting to 1000 [ 106.252541][ T29] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 106.392942][ T6096] rdma_rxe: rxe_newlink: failed to add veth0 [ 106.778085][ T1009] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.848840][ T6112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.88'. [ 106.992296][ T6118] smc: net device lo applied user defined pnetid SYZ0 [ 107.021633][ T6118] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 107.074567][ T6121] veth1_macvtap: left promiscuous mode [ 107.268869][ T29] usb 4-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 107.308006][ T29] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 107.570075][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.100'. [ 107.611942][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.100'. [ 107.645255][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.100'. [ 107.693840][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.100'. [ 107.711196][ T6142] netlink: 44 bytes leftover after parsing attributes in process `syz.5.101'. [ 107.790359][ T6145] netlink: 100 bytes leftover after parsing attributes in process `syz.1.102'. [ 107.811710][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.1.102'. [ 107.943759][ T6148] ovs-system: entered promiscuous mode [ 108.451890][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 108.467212][ T6136] lo speed is unknown, defaulting to 1000 [ 108.483946][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 108.515679][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 108.536342][ T6170] ksmbd: Unknown IPC event: 1, ignore. [ 108.563914][ T6170] nbd: must specify at least one socket [ 108.584942][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.619782][ T5940] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 109.632470][ T6167] NFSD: Unable to initialize client recovery tracking! (-110) [ 109.640108][ T6180] ceph: No mds server is up or the cluster is laggy [ 109.658694][ T6167] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 109.675365][ T6167] NFSD: starting 90-second grace period (net f000048f) [ 110.283017][ T30] ------------[ cut here ]------------ [ 110.289156][ T30] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 110.289176][ T30] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#1: kworker/1:2/30 [ 110.307999][ T30] Modules linked in: [ 110.312025][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 110.322521][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.335998][ T30] Workqueue: ceph-msgr ceph_con_workfn [ 110.341487][ T30] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 110.349135][ T30] Code: 45 31 e4 e9 3f d1 ff ff e8 08 c6 32 f6 90 0f 0b 90 e9 cd d3 ff ff e8 fa c5 32 f6 90 0f 0b 90 e9 dd e6 ff ff e8 ec c5 32 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 110.368809][ T30] RSP: 0018:ffffc90000a67180 EFLAGS: 00010293 [ 110.375007][ T30] RAX: ffffffff8b944ef4 RBX: 0000000000000001 RCX: ffff88801e6b3e00 [ 110.383078][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 110.391148][ T30] RBP: ffffc90000a67a78 R08: ffff88801e6b3e00 R09: 0000000000000009 [ 110.399230][ T30] R10: 000000000000000d R11: 0000000000000000 R12: ffff888052ecc418 [ 110.407284][ T30] R13: fffff5200014ce70 R14: dffffc0000000000 R15: 0000000000000000 [ 110.415402][ T30] FS: 0000000000000000(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 110.425672][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.433105][ T30] CR2: 000000110c4022f8 CR3: 0000000054c5a000 CR4: 0000000000350ef0 [ 110.441088][ T30] Call Trace: [ 110.444394][ T30] [ 110.447326][ T30] ? __tcp_push_pending_frames+0xd1/0x380 [ 110.453139][ T30] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 110.458885][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.464825][ T30] ? reacquire_held_locks+0x104/0x190 [ 110.470207][ T30] ? release_sock+0x2f/0x260 [ 110.474843][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.480497][ T30] ? tcp_sendmsg+0x39/0x50 [ 110.485004][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 110.490399][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.496084][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 110.501345][ T30] ? __pfx_inet_sendmsg+0x10/0x10 [ 110.506511][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.512155][ T30] ? rcu_is_watching+0x15/0xb0 [ 110.516953][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.523793][ T30] ? sock_sendmsg_nosec+0xc2/0x180 [ 110.528932][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.535450][ T30] ? sock_sendmsg+0x1ca/0x2d0 [ 110.540161][ T30] ? __pfx_sock_sendmsg+0x10/0x10 [ 110.545280][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.550945][ T30] ? iov_iter_kvec+0xb8/0x180 [ 110.555683][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.561332][ T30] ? ceph_con_flag_clear+0x38/0x50 [ 110.566520][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.572177][ T30] ? ceph_con_v1_try_write+0x3808/0x3dc0 [ 110.577895][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.583570][ T30] ? __lock_acquire+0x683/0x2cf0 [ 110.588541][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.594240][ T30] ? __lock_acquire+0x683/0x2cf0 [ 110.599255][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.604952][ T30] ? __mutex_trylock_common+0x15f/0x270 [ 110.610509][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 110.616449][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.622081][ T30] ? rcu_is_watching+0x15/0xb0 [ 110.628107][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.634749][ T30] ? trace_contention_end+0x3d/0x140 [ 110.640055][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.645736][ T30] ? __mutex_lock+0x30d/0x1550 [ 110.650520][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.656234][ T30] ? __lock_acquire+0x683/0x2cf0 [ 110.661217][ T30] ? rcu_is_watching+0x15/0xb0 [ 110.666051][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.671699][ T30] ? ceph_con_workfn+0x3b/0x14a0 [ 110.676683][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 110.681717][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.687380][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 110.692458][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 110.697940][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.703665][ T30] ceph_con_workfn+0x208/0x14a0 [ 110.708538][ T30] ? rcu_is_watching+0x15/0xb0 [ 110.713353][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 110.719098][ T30] process_scheduled_works+0xa8e/0x14e0 [ 110.724778][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.732004][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.738513][ T30] ? assign_work+0x3cf/0x5d0 [ 110.743172][ T30] worker_thread+0xa47/0xfb0 [ 110.747904][ T30] kthread+0x388/0x470 [ 110.751998][ T30] ? __pfx_worker_thread+0x10/0x10 [ 110.757196][ T30] ? __pfx_kthread+0x10/0x10 [ 110.761858][ T30] ret_from_fork+0x514/0xb70 [ 110.766528][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 110.771666][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.777363][ T30] ? __switch_to+0xc89/0x1420 [ 110.782061][ T30] ? __pfx_kthread+0x10/0x10 [ 110.786720][ T30] ret_from_fork_asm+0x1a/0x30 [ 110.791600][ T30] [ 110.794673][ T30] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.801972][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 110.811584][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.821618][ T30] Workqueue: ceph-msgr ceph_con_workfn [ 110.827093][ T30] Call Trace: [ 110.830360][ T30] [ 110.833301][ T30] vpanic+0x56c/0xa60 [ 110.837321][ T30] ? __pfx__printk+0x10/0x10 [ 110.841899][ T30] ? __pfx_vpanic+0x10/0x10 [ 110.846409][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 110.851704][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 110.856936][ T30] panic+0xc5/0xd0 [ 110.860665][ T30] ? __pfx_panic+0x10/0x10 [ 110.865092][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 110.870023][ T30] __warn+0x315/0x4c0 [ 110.873995][ T30] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 110.879548][ T30] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 110.885269][ T30] __report_bug+0x276/0x570 [ 110.890215][ T30] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 110.895769][ T30] ? __pfx___report_bug+0x10/0x10 [ 110.900799][ T30] ? tcp_recvmsg+0x213/0x7f0 [ 110.905387][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 110.910666][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.916321][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 110.921522][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.927147][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.932775][ T30] ? tcp_recvmsg+0x288/0x7f0 [ 110.937371][ T30] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 110.942920][ T30] report_bug+0x16a/0x220 [ 110.947252][ T30] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 110.952835][ T30] ? ceph_con_v1_try_read+0x3337/0x6eb0 [ 110.958381][ T30] handle_bug+0x9c/0x200 [ 110.962626][ T30] exc_invalid_op+0x1a/0x50 [ 110.967130][ T30] asm_exc_invalid_op+0x1a/0x20 [ 110.971971][ T30] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 110.978157][ T30] Code: 45 31 e4 e9 3f d1 ff ff e8 08 c6 32 f6 90 0f 0b 90 e9 cd d3 ff ff e8 fa c5 32 f6 90 0f 0b 90 e9 dd e6 ff ff e8 ec c5 32 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 110.997779][ T30] RSP: 0018:ffffc90000a67180 EFLAGS: 00010293 [ 111.003845][ T30] RAX: ffffffff8b944ef4 RBX: 0000000000000001 RCX: ffff88801e6b3e00 [ 111.011807][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 111.019764][ T30] RBP: ffffc90000a67a78 R08: ffff88801e6b3e00 R09: 0000000000000009 [ 111.027839][ T30] R10: 000000000000000d R11: 0000000000000000 R12: ffff888052ecc418 [ 111.035809][ T30] R13: fffff5200014ce70 R14: dffffc0000000000 R15: 0000000000000000 [ 111.043786][ T30] ? ceph_con_v1_try_read+0x3334/0x6eb0 [ 111.049348][ T30] ? __tcp_push_pending_frames+0xd1/0x380 [ 111.055196][ T30] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 111.060926][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.066553][ T30] ? reacquire_held_locks+0x104/0x190 [ 111.072004][ T30] ? release_sock+0x2f/0x260 [ 111.076591][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.082223][ T30] ? tcp_sendmsg+0x39/0x50 [ 111.086641][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 111.091923][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.097645][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 111.102847][ T30] ? __pfx_inet_sendmsg+0x10/0x10 [ 111.107864][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.113491][ T30] ? rcu_is_watching+0x15/0xb0 [ 111.118247][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.123878][ T30] ? sock_sendmsg_nosec+0xc2/0x180 [ 111.128997][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.134709][ T30] ? sock_sendmsg+0x1ca/0x2d0 [ 111.139402][ T30] ? __pfx_sock_sendmsg+0x10/0x10 [ 111.144442][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.150089][ T30] ? iov_iter_kvec+0xb8/0x180 [ 111.154774][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.160402][ T30] ? ceph_con_flag_clear+0x38/0x50 [ 111.165509][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.171135][ T30] ? ceph_con_v1_try_write+0x3808/0x3dc0 [ 111.176780][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.182409][ T30] ? __lock_acquire+0x683/0x2cf0 [ 111.187360][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.193074][ T30] ? __lock_acquire+0x683/0x2cf0 [ 111.198148][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.203774][ T30] ? __mutex_trylock_common+0x15f/0x270 [ 111.209316][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 111.215204][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.220834][ T30] ? rcu_is_watching+0x15/0xb0 [ 111.225593][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.231229][ T30] ? trace_contention_end+0x3d/0x140 [ 111.236518][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.242146][ T30] ? __mutex_lock+0x30d/0x1550 [ 111.246936][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.252566][ T30] ? __lock_acquire+0x683/0x2cf0 [ 111.257516][ T30] ? rcu_is_watching+0x15/0xb0 [ 111.262270][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.267907][ T30] ? ceph_con_workfn+0x3b/0x14a0 [ 111.272850][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 111.277886][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.283607][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.288671][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.294043][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.299766][ T30] ceph_con_workfn+0x208/0x14a0 [ 111.304624][ T30] ? rcu_is_watching+0x15/0xb0 [ 111.309383][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 111.315100][ T30] process_scheduled_works+0xa8e/0x14e0 [ 111.320674][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 111.326657][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.332290][ T30] ? assign_work+0x3cf/0x5d0 [ 111.336881][ T30] worker_thread+0xa47/0xfb0 [ 111.341506][ T30] kthread+0x388/0x470 [ 111.345588][ T30] ? __pfx_worker_thread+0x10/0x10 [ 111.350700][ T30] ? __pfx_kthread+0x10/0x10 [ 111.355299][ T30] ret_from_fork+0x514/0xb70 [ 111.359897][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 111.365012][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.370639][ T30] ? __switch_to+0xc89/0x1420 [ 111.375327][ T30] ? __pfx_kthread+0x10/0x10 [ 111.379923][ T30] ret_from_fork_asm+0x1a/0x30 [ 111.384694][ T30] [ 111.387917][ T30] Kernel Offset: disabled [ 111.392227][ T30] Rebooting in 86400 seconds..