last executing test programs: 2m39.621594305s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x601, 0x1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x2}, {0x130, 0x2, [@TCA_RED_PARMS={0x18, 0x1, {0x3e8, 0x64, 0x1f4}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)=@getqdisc={0x14, 0x26, 0x301, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x14}}, 0x0) 2m38.74593334s ago: executing program 2 (id=16): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x3) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x10}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x11, &(0x7f0000000100)={@local, @remote, @void, {@generic={0x3, "10106f"}}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @remote, @void, {@generic={0x4, "10100101"}}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0) 2m38.626207246s ago: executing program 4 (id=18): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2m38.461108467s ago: executing program 2 (id=19): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1000000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, ' \x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '0\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '@\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, 'P\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '`\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) 2m37.832876584s ago: executing program 2 (id=23): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c010000100001000000000000000000020000000000000000000000000000007f00000100000000000000000000000000000000000002000000000000000000000000000200000000000000000000000000000012343200320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000100111122227f0000010000000000000000000000000000080022000a000000"], 0x15c}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 2m37.79354163s ago: executing program 4 (id=24): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) write(r0, &(0x7f0000000100)="009c00011a2b3c4d0001000001000000", 0x10) 2m37.353702799s ago: executing program 2 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost / 2147483647 0 0 0 0\n\x00', 0x1f) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 2m37.026657269s ago: executing program 4 (id=29): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000000)="01000000", &(0x7f0000000040)=@tcp=r0}, 0x20) close(r1) sched_yield() nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) close(r0) 2m36.515214646s ago: executing program 4 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000002030100000000000000000000000000080001000300020000000000"], 0x20}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000002030100000000000000000000000000080001000100020000000000"], 0x20}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000203010000000000000000000000000008000200ffff000002000000"], 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 2m36.132523839s ago: executing program 2 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1 1 1\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x30, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x30}}, 0x0) 2m35.659990609s ago: executing program 4 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000040)={0x1c, 0x10, 0x1, 0x0, 0x0, {0x3}, [@typed={0x6, 0x1, 0x0, 0x0, @binary="1000"}]}, 0x1c}}, 0x0) 2m35.388412998s ago: executing program 4 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost 1 \\x00 2147483647 ./export_dir\n', 0x29) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./nfs_mnt\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 2m33.769746914s ago: executing program 3 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x74, 0x0, 0x1, 0x605, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3c}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x74}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000180)=@in={0x2, 0x2760, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)='CONNECT 10080\nDATA 10081\n', 0x1a, 0x0, &(0x7f0000000240)={0x2, 0x2760, @loopback}, 0x10) 2m33.612129884s ago: executing program 3 (id=37): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x800) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000010)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @broadcast}, 0x10) syz_emit_ethernet(0x1b, &(0x7f0000000020)={@local, @broadcast, @void, {@llc={0x4, {@llc={0x2, 0x3, 'c'}}}}}, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000040)={@local, @broadcast, @void, {@llc={0x4, {@llc={0x2, 0x2, "0002"}}}}}, 0x0) 2m33.517585924s ago: executing program 3 (id=38): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="0200", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001010101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000700)=@in={0x2, 0x1234, @loopback}, 0x10) recvfrom(r1, &(0x7f0000000900), 0x100, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 2m32.829959644s ago: executing program 3 (id=41): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200)}) landlock_restrict_self(0xffffffffffffffff, 0x0) 2m32.555469206s ago: executing program 3 (id=42): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x1000}}]}}) write$P9_RVERSION(r1, &(0x7f0000000300)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) write$P9_RATTACH(r1, &(0x7f0000000400)={0x13, 0x69, 0x1}, 0x13) write$P9_RSTAT(r1, &(0x7f0000000500)={0x0, 0x77, 0x1}, 0x13) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2m32.104667587s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='inet 2049\n\x00', 0xa) write(r0, &(0x7f0000000700)='tcp 2049\n\x00', 0x9) write(r0, &(0x7f0000000800)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='2\n\x00', 0x2) nanosleep(&(0x7f0000000b00)={0x0, 0x3b9aca00}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000c00)={0x2, 0x801, @loopback}, 0x10) sendto(r2, &(0x7f0000000d00)="000000010000000000000002000186a00000000200000001000000010000002000"/56, 0x38, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x3b9aca00}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001100)="1400000024000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001400)="1400000024000103010000000000000002010000", 0x14}], 0x1}, 0x0) 2m28.76283977s ago: executing program 0 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x200}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 2m28.61022753s ago: executing program 0 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/default/route_localnet\x00', 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 2m28.529431432s ago: executing program 0 (id=57): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @private=0xa010101}}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags=0x1}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r3, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010101}, 0x10) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e21, @private=0xa010101}, 0x10) r6 = accept(r4, 0x0, 0x0) recvmsg(r6, &(0x7f00000002c0), 0x0) 2m27.554041226s ago: executing program 0 (id=58): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2m27.55010283s ago: executing program 0 (id=59): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r2, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) recvmsg(r5, &(0x7f00000002c0), 0x0) (async) 2m26.665720783s ago: executing program 0 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./export\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost ./export 2147483647 0 0 0 0\n\x00', 0x26) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/file1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/file2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/file3\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./export/file4\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./export/file5\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./export/file6\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./export/file7\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./export/file8\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export/file9\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./export/file10\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a3000000030000001000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 2m22.112114239s ago: executing program 32 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) (async) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000500)="00000050123456780000000000000002000186a30000000400000001000000010000001400000000000000000000000000000000000000000000000000000000000000000000000000000001", 0x54, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000800)='nfsd 127.0.0.1 9999999 domain\n', 0x1e) close(r4) 2m21.067912014s ago: executing program 33 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1 1 1\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x30, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x30}}, 0x0) 2m20.125408007s ago: executing program 34 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost 1 \\x00 2147483647 ./export_dir\n', 0x29) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./nfs_mnt\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 2m16.551146193s ago: executing program 35 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='inet 2049\n\x00', 0xa) write(r0, &(0x7f0000000700)='tcp 2049\n\x00', 0x9) write(r0, &(0x7f0000000800)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='2\n\x00', 0x2) nanosleep(&(0x7f0000000b00)={0x0, 0x3b9aca00}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000c00)={0x2, 0x801, @loopback}, 0x10) sendto(r2, &(0x7f0000000d00)="000000010000000000000002000186a00000000200000001000000010000002000"/56, 0x38, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x3b9aca00}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001100)="1400000024000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001400)="1400000024000103010000000000000002010000", 0x14}], 0x1}, 0x0) 2m11.085795039s ago: executing program 36 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./export\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost ./export 2147483647 0 0 0 0\n\x00', 0x26) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/file1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/file2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/file3\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./export/file4\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./export/file5\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./export/file6\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./export/file7\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./export/file8\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export/file9\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./export/file10\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a3000000030000001000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 2m8.482126868s ago: executing program 6 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='localhost 1 \\x00000000 2147483647 ./export_dir\n', 0x2f) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000500)='./nfs_mnt\x00', &(0x7f0000000540)='nfs\x00', 0x0, &(0x7f0000000580)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000600)='./nfs_mnt\x00', &(0x7f0000000640)=@known='system.posix_acl_access\x00', &(0x7f0000000680)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 2m0.421928242s ago: executing program 7 (id=104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x1a0b, @loopback}, 0x10) accept(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000200)="505249564d53472078203a2001444343204348415420636861742031363834333030392031303235010a", 0x2d, 0x0, 0x0, 0x0) 2m0.199668751s ago: executing program 7 (id=106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 1m59.846324431s ago: executing program 7 (id=109): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) 1m59.545856874s ago: executing program 7 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0x35) 1m58.898818817s ago: executing program 7 (id=117): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200)}) landlock_restrict_self(0xffffffffffffffff, 0x0) 1m57.785723392s ago: executing program 7 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/gracetime\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='3\n\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1\n\x00', 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) 1m53.389374918s ago: executing program 37 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='localhost 1 \\x00000000 2147483647 ./export_dir\n', 0x2f) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000500)='./nfs_mnt\x00', &(0x7f0000000540)='nfs\x00', 0x0, &(0x7f0000000580)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000600)='./nfs_mnt\x00', &(0x7f0000000640)=@known='system.posix_acl_access\x00', &(0x7f0000000680)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 1m42.507384768s ago: executing program 38 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/gracetime\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='3\n\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1\n\x00', 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) 33.405820403s ago: executing program 1 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0073797a30300800450000300000400040113c237f0000017f00000112341234001c0000450000140000400040043c3f7f0000017f000001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 33.108580589s ago: executing program 1 (id=510): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x3210, @loopback}, 0x10) listen(r0, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="000008004500003c00000000408400007f0000017f00000104d2321000000000567b5bca0100001c11223344000080000005000500000001c001000811223344"], 0x40) 32.930376419s ago: executing program 9 (id=511): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010200010902370002010080320904000002ff00000007058102400000070502024000000904010002ff0000000705820240000007050102400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x2, &(0x7f0000000100)="0000000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x2c) connect(r1, &(0x7f0000000200)=@generic={0x8, '\x00\x00#\x00'}, 0x10) ioctl(r1, 0x80047437, &(0x7f0000000300)='\x00\x00\x00\x00') r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl(r2, 0x80047438, &(0x7f0000000300)='\x00\x00\x00\x00') ioctl(r1, 0x40046102, &(0x7f0000000500)="0100000000000000") syz_usb_ep_write(r0, 0x81, 0x35, &(0x7f0000000600)="0000023200112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677880000000000000028") nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 32.121647653s ago: executing program 1 (id=516): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000000)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r2, &(0x7f0000000040)=@in={0x2, 0x1f90, @loopback}, 0x10) 32.037772969s ago: executing program 1 (id=518): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) write(r0, &(0x7f0000000000)="2800000070000100000000000000000007000000010000001800018008000100000001000500060001000000", 0x28) 31.590087622s ago: executing program 1 (id=520): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='hel', 0x3}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) recvmsg(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001000), 0x100}], 0x1}, 0x40) close(r0) nanosleep(&(0x7f0000001200)={0x3}, 0x0) 30.724348716s ago: executing program 9 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@newtfilter={0x9c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_mpls={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x3}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x100}]}, {0x5, 0x6, '\x00'}, {0xc}, {0xc}}}]}]}}]}, 0x9c}}, 0x0) write(r1, &(0x7f0000000c00)="00008847000010014500001c00000000401100007f0000017f000001", 0x1c) 30.54207108s ago: executing program 1 (id=524): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) listen(r1, 0x10) r2 = socket$inet_tcp(0x2, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 29.418451453s ago: executing program 9 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newneigh={0x30, 0x1c, 0x605, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1, 0x80}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010101}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x64, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14}}, 0x14c}}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000640)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1f90, 0x1f90, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) 28.861863771s ago: executing program 9 (id=531): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x800) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x12}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x13}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000200)={@local, @local, @void, {@generic={0x3, "121373"}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @local, @void, {@generic={0x4, "12120101"}}}, 0x0) 28.757002173s ago: executing program 9 (id=533): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='hel', 0x3}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) recvmsg(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001000), 0x100}], 0x1}, 0x40) close(r0) nanosleep(&(0x7f0000001200)={0x3}, 0x0) 27.865496395s ago: executing program 9 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='./rec\x00', 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='5\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='1\n\x00', 0x2) 24.362110762s ago: executing program 5 (id=554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x2, 0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ffff0040950b901700010102030109022700010100a0320904000003ffff0000070581020002000705020200020007058303100008"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000250)={0x0, 0x1dcd6500}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x34}}, 0x0) 21.781365466s ago: executing program 5 (id=558): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) 21.16917052s ago: executing program 8 (id=559): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='hell', 0x4}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) recvmsg(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001000), 0x100}], 0x1}, 0x40) close(r0) nanosleep(&(0x7f0000001200)={0x3}, 0x0) 20.87467737s ago: executing program 5 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) accept(r2, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) accept(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10) 20.006150647s ago: executing program 8 (id=561): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00000001000000010000000100000001000000010101000000000001", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$rxrpc(r0, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) 19.48837567s ago: executing program 5 (id=562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000000)="01000000", &(0x7f0000000040)=@tcp=r0}, 0x20) close(r1) close(r0) 18.616588012s ago: executing program 8 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n', 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) 18.29778121s ago: executing program 5 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01\\x00\\x00\\x00 1000000000 0 0 0 krb5 \\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\x10 client\\n', 0x96) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r1, &(0x7f0000000300)="80000050000000010000000000000002000186a00000000300000000000000060000000100000018000000010000000000000004000000010000000200000004010000000000000600000000000000000000000400000000", 0x54) 18.260416248s ago: executing program 8 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200), 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x200}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 17.301532238s ago: executing program 8 (id=566): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r1, &(0x7f0000000100)="0000000100000004000000010000000100000001010100000000000200000000", 0x20, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) sendto$inet(r1, &(0x7f0000000400)="0000000100000004000000000000000100000002080000000000000200000000", 0x20, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 17.301309429s ago: executing program 5 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100005060000000000000000000000000000000000000000000000000b000300636f6e66696700001c00120009000100766c616e000000000c0002000600010001000000"], 0x48}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vlan0\x00'}) 15.587717038s ago: executing program 8 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) 14.223879518s ago: executing program 39 (id=524): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) listen(r1, 0x10) r2 = socket$inet_tcp(0x2, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 12.089621568s ago: executing program 40 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='./rec\x00', 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='5\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='1\n\x00', 0x2) 1.265134821s ago: executing program 41 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100005060000000000000000000000000000000000000000000000000b000300636f6e66696700001c00120009000100766c616e000000000c0002000600010001000000"], 0x48}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vlan0\x00'}) 0s ago: executing program 42 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.327750][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.73'. [ 123.396531][ T6145] lo speed is unknown, defaulting to 1000 [ 123.442665][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.665562][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.665694][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.755888][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.756009][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.820835][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.820895][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.832358][ T6011] veth0_vlan: entered promiscuous mode [ 123.971250][ T6011] veth1_vlan: entered promiscuous mode [ 124.021738][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.021758][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.265780][ T6011] veth0_macvtap: entered promiscuous mode [ 124.346845][ T6011] veth1_macvtap: entered promiscuous mode [ 124.563779][ T4915] Bluetooth: hci9: command tx timeout [ 124.760515][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.897019][ T6183] nfs: Bad value for 'source' [ 124.923582][ T4915] Bluetooth: hci8: command tx timeout [ 124.943769][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.046526][ T67] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.046930][ T67] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.047370][ T67] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.049781][ T67] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.081707][ T3272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.081725][ T3272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.195093][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.196422][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.196604][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.196839][ T6145] bridge_slave_0: entered allmulticast mode [ 126.199482][ T6145] bridge_slave_0: entered promiscuous mode [ 126.264868][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.265073][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.265397][ T6145] bridge_slave_1: entered allmulticast mode [ 126.269879][ T6145] bridge_slave_1: entered promiscuous mode [ 126.400809][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.422032][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.482846][ T3272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.482866][ T3272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.542387][ T6145] team0: Port device team_slave_0 added [ 126.603012][ T4915] Bluetooth: hci9: command tx timeout [ 126.632149][ T6145] team0: Port device team_slave_1 added [ 126.728710][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.728721][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.728734][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.791175][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.791187][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.791201][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.910478][ T6145] hsr_slave_0: entered promiscuous mode [ 126.911360][ T6145] hsr_slave_1: entered promiscuous mode [ 126.911917][ T6145] debugfs: 'hsr0' already exists in 'hsr' [ 126.911931][ T6145] Cannot create hsr debugfs directory [ 127.789180][ T6060] veth0_vlan: entered promiscuous mode [ 128.009861][ T6060] veth1_vlan: entered promiscuous mode [ 128.315122][ T6060] veth0_macvtap: entered promiscuous mode [ 128.419232][ T6060] veth1_macvtap: entered promiscuous mode [ 128.644958][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.683108][ T4915] Bluetooth: hci9: command tx timeout [ 128.710623][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.752759][ T3365] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.989108][ T3365] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.990459][ T3365] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.992107][ T3365] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.376928][ T6145] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 129.595610][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.016996][ T6145] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 130.125507][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.347718][ T6145] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 130.495793][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.539749][ T6145] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 130.642227][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.764288][ T4915] Bluetooth: hci9: command tx timeout [ 130.854981][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.855000][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.012863][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.013239][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.412057][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.512203][ T6145] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.539466][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.540421][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.617317][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.617421][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.932193][ T6277] bridge0: port 3(syz_tun) entered blocking state [ 131.932309][ T6277] bridge0: port 3(syz_tun) entered disabled state [ 131.932686][ T6277] syz_tun: entered allmulticast mode [ 131.996971][ T6277] syz_tun: entered promiscuous mode [ 132.006567][ T6277] bridge0: port 3(syz_tun) entered blocking state [ 132.006797][ T6277] bridge0: port 3(syz_tun) entered forwarding state [ 132.866054][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.866152][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.139929][ T6301] netlink: 88 bytes leftover after parsing attributes in process `syz.5.108'. [ 133.390371][ T6305] netlink: 56 bytes leftover after parsing attributes in process `syz.5.110'. [ 133.708821][ T6314] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 133.808586][ T6319] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.708210][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.088799][ T6353] bridge0: port 3(syz_tun) entered blocking state [ 135.089014][ T6353] bridge0: port 3(syz_tun) entered disabled state [ 135.089268][ T6353] syz_tun: entered allmulticast mode [ 135.092309][ T6353] syz_tun: entered promiscuous mode [ 135.093501][ T6353] bridge0: port 3(syz_tun) entered blocking state [ 135.093660][ T6353] bridge0: port 3(syz_tun) entered forwarding state [ 135.122199][ T6353] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 135.743169][ T6145] veth0_vlan: entered promiscuous mode [ 135.755025][ T6145] veth1_vlan: entered promiscuous mode [ 135.944477][ T6145] veth0_macvtap: entered promiscuous mode [ 136.021959][ T6145] veth1_macvtap: entered promiscuous mode [ 136.116011][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.139650][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.186532][ T1060] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.191392][ T155] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.191438][ T155] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.191481][ T155] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.960495][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.960521][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.071130][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.071149][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.296447][ T6392] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 138.252296][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.9.139'. [ 138.840989][ T6432] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 139.832115][ T5704] FAULT_INJECTION: forcing a failure. [ 139.832115][ T5704] name failslab, interval 1, probability 100, space 0, times 1 [ 139.832176][ T5704] CPU: 1 UID: 0 PID: 5704 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.832202][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.832218][ T5704] Call Trace: [ 139.832224][ T5704] [ 139.832231][ T5704] dump_stack_lvl+0xe8/0x150 [ 139.832277][ T5704] should_fail_ex+0x467/0x600 [ 139.832305][ T5704] should_failslab+0xa8/0x100 [ 139.832328][ T5704] kmem_cache_alloc_noprof+0xa4/0x650 [ 139.832343][ T5704] ? do_getname+0x2e/0x250 [ 139.832354][ T5704] ? do_getname+0x2e/0x250 [ 139.832366][ T5704] ? do_utimes+0x257/0x2c0 [ 139.832387][ T5704] do_getname+0x2e/0x250 [ 139.832398][ T5704] ? getname_flags+0x11/0x20 [ 139.832420][ T5704] do_sys_openat2+0xcc/0x200 [ 139.832437][ T5704] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.832449][ T5704] ? __x64_sys_utimensat+0x15e/0x240 [ 139.832471][ T5704] ? rcu_is_watching+0x15/0xb0 [ 139.832492][ T5704] __x64_sys_openat+0x138/0x170 [ 139.832511][ T5704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.832526][ T5704] do_syscall_64+0x174/0x580 [ 139.832544][ T5704] ? clear_bhb_loop+0x40/0x90 [ 139.832561][ T5704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.832575][ T5704] RIP: 0033:0x7fb0b4668c3a [ 139.832593][ T5704] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 139.832604][ T5704] RSP: 002b:00007ffc7a6b6da8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 139.832626][ T5704] RAX: ffffffffffffffda RBX: 00007ffc7a6b6de0 RCX: 00007fb0b4668c3a [ 139.832636][ T5704] RDX: 0000000000090800 RSI: 00007ffc7a6b71e0 RDI: 00000000ffffff9c [ 139.832646][ T5704] RBP: 0000000000000007 R08: 000055cc458ef030 R09: 0000000000000000 [ 139.832655][ T5704] R10: 0000000000000000 R11: 0000000000000206 R12: 000055cc458fcf10 [ 139.832664][ T5704] R13: 00007ffc7a6b79e0 R14: 00007ffc7a6b75e0 R15: 00007ffc7a6b71e0 [ 139.832686][ T5704] [ 139.832714][ T5704] FAULT_INJECTION: forcing a failure. [ 139.832714][ T5704] name failslab, interval 1, probability 100, space 0, times 99 [ 139.832733][ T5704] CPU: 1 UID: 0 PID: 5704 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.832748][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.832755][ T5704] Call Trace: [ 139.832761][ T5704] [ 139.832766][ T5704] dump_stack_lvl+0xe8/0x150 [ 139.832789][ T5704] should_fail_ex+0x467/0x600 [ 139.832813][ T5704] should_failslab+0xa8/0x100 [ 139.832831][ T5704] kmem_cache_alloc_noprof+0xa4/0x650 [ 139.832845][ T5704] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.832861][ T5704] ? do_getname+0x2e/0x250 [ 139.832872][ T5704] ? do_getname+0x2e/0x250 [ 139.832892][ T5704] do_getname+0x2e/0x250 [ 139.832903][ T5704] ? getname_flags+0x11/0x20 [ 139.832925][ T5704] vfs_fstatat+0x45/0x170 [ 139.832948][ T5704] __x64_sys_newfstatat+0x151/0x200 [ 139.832964][ T5704] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 139.832990][ T5704] ? rcu_is_watching+0x15/0xb0 [ 139.833015][ T5704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.833030][ T5704] do_syscall_64+0x174/0x580 [ 139.833047][ T5704] ? clear_bhb_loop+0x40/0x90 [ 139.833064][ T5704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.833077][ T5704] RIP: 0033:0x7fb0b4664b0a [ 139.833089][ T5704] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 139.833099][ T5704] RSP: 002b:00007ffc7a6b6498 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 139.833113][ T5704] RAX: ffffffffffffffda RBX: 000055cc458f1190 RCX: 00007fb0b4664b0a [ 139.833122][ T5704] RDX: 00007ffc7a6b64c0 RSI: 000055cc458f1190 RDI: 00000000ffffff9c [ 139.833131][ T5704] RBP: 000055cc458f11a8 R08: 000055cc458ef030 R09: 0000000000000000 [ 139.833148][ T5704] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc7a6b75e5 [ 139.833156][ T5704] R13: 00007ffc7a6b6550 R14: 000055cc072ae6d7 R15: 00007ffc7a6b75e0 [ 139.833177][ T5704] [ 139.834738][ T4955] FAULT_INJECTION: forcing a failure. [ 139.834738][ T4955] name failslab, interval 1, probability 100, space 0, times 99 [ 139.834767][ T4955] CPU: 0 UID: 0 PID: 4955 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.834789][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.834800][ T4955] Call Trace: [ 139.834807][ T4955] [ 139.834814][ T4955] dump_stack_lvl+0xe8/0x150 [ 139.834860][ T4955] should_fail_ex+0x467/0x600 [ 139.834894][ T4955] should_failslab+0xa8/0x100 [ 139.834919][ T4955] kmem_cache_alloc_node_noprof+0xae/0x670 [ 139.834940][ T4955] ? __alloc_skb+0x1d7/0x7a0 [ 139.834959][ T4955] ? __alloc_skb+0x1d7/0x7a0 [ 139.834984][ T4955] __alloc_skb+0x1d7/0x7a0 [ 139.835009][ T4955] alloc_skb_with_frags+0xc6/0x760 [ 139.835032][ T4955] ? kasan_save_track+0x4f/0x80 [ 139.835049][ T4955] ? kasan_save_track+0x3e/0x80 [ 139.835066][ T4955] ? kasan_save_free_info+0x40/0x50 [ 139.835092][ T4955] ? __kasan_slab_free+0x5c/0x80 [ 139.835109][ T4955] ? kfree+0x1c5/0x6c0 [ 139.835124][ T4955] ? syslog_print+0x57c/0x610 [ 139.835157][ T4955] ? do_syslog+0x583/0x7d0 [ 139.835177][ T4955] ? __x64_sys_syslog+0x7c/0x90 [ 139.835203][ T4955] sock_alloc_send_pskb+0x884/0x9a0 [ 139.835246][ T4955] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 139.835277][ T4955] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 139.835310][ T4955] unix_dgram_sendmsg+0x4da/0x17b0 [ 139.835341][ T4955] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.835367][ T4955] ? kfree+0x1c5/0x6c0 [ 139.835383][ T4955] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 139.835415][ T4955] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 139.835457][ T4955] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 139.835485][ T4955] sock_sendmsg_nosec+0x13a/0x180 [ 139.835525][ T4955] __sys_sendto+0x41e/0x5d0 [ 139.835548][ T4955] ? smack_privileged_cred+0x33c/0x380 [ 139.835582][ T4955] ? __pfx___sys_sendto+0x10/0x10 [ 139.835612][ T4955] ? ktime_get+0x1f5/0x220 [ 139.835642][ T4955] ? rcu_is_watching+0x15/0xb0 [ 139.835672][ T4955] __x64_sys_sendto+0xde/0x100 [ 139.835694][ T4955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.835714][ T4955] do_syscall_64+0x174/0x580 [ 139.835738][ T4955] ? clear_bhb_loop+0x40/0x90 [ 139.835762][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.835780][ T4955] RIP: 0033:0x7f359a3ef407 [ 139.835797][ T4955] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 139.835812][ T4955] RSP: 002b:00007fff23dcb4c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 139.835832][ T4955] RAX: ffffffffffffffda RBX: 00007f359a29fc80 RCX: 00007f359a3ef407 [ 139.835846][ T4955] RDX: 0000000000000055 RSI: 00007fff23dcb600 RDI: 0000000000000003 [ 139.835858][ T4955] RBP: 00007fff23dcba30 R08: 0000000000000000 R09: 0000000000000000 [ 139.835869][ T4955] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff23dcba48 [ 139.835881][ T4955] R13: 00007fff23dcb600 R14: 000000000000003a R15: 00007fff23dcb600 [ 139.835909][ T4955] [ 139.839459][ T4955] FAULT_INJECTION: forcing a failure. [ 139.839459][ T4955] name failslab, interval 1, probability 100, space 0, times 97 [ 139.839493][ T4955] CPU: 0 UID: 0 PID: 4955 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.839513][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.839524][ T4955] Call Trace: [ 139.839531][ T4955] [ 139.839538][ T4955] dump_stack_lvl+0xe8/0x150 [ 139.839568][ T4955] should_fail_ex+0x467/0x600 [ 139.839600][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.839630][ T4955] should_failslab+0xa8/0x100 [ 139.839654][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.839681][ T4955] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 139.839703][ T4955] ? sock_alloc_inode+0x2c/0x1a0 [ 139.839730][ T4955] ? sock_alloc_inode+0x2c/0x1a0 [ 139.839763][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.839791][ T4955] sock_alloc_inode+0x2c/0x1a0 [ 139.839819][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.839846][ T4955] alloc_inode+0x6a/0x1b0 [ 139.839867][ T4955] __sock_create+0x12d/0x9d0 [ 139.839894][ T4955] __sys_socket+0xd6/0x1b0 [ 139.839914][ T4955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.839934][ T4955] __x64_sys_socket+0x7a/0x90 [ 139.839952][ T4955] do_syscall_64+0x174/0x580 [ 139.839977][ T4955] ? clear_bhb_loop+0x40/0x90 [ 139.839999][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.840017][ T4955] RIP: 0033:0x7f359a46a707 [ 139.840034][ T4955] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 139.840049][ T4955] RSP: 002b:00007fff23dcb4d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 139.840070][ T4955] RAX: ffffffffffffffda RBX: 0000000000000055 RCX: 00007f359a46a707 [ 139.840083][ T4955] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 139.840094][ T4955] RBP: 00007f359a4f6560 R08: 0000000000000000 R09: 0000000000000000 [ 139.840105][ T4955] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 139.840116][ T4955] R13: 00007fff23dcb600 R14: 000000000000003a R15: 00007fff23dcb600 [ 139.840152][ T4955] [ 139.840161][ T4955] socket: no more sockets [ 139.840187][ T4955] FAULT_INJECTION: forcing a failure. [ 139.840187][ T4955] name failslab, interval 1, probability 100, space 0, times 96 [ 139.840209][ T4955] CPU: 0 UID: 0 PID: 4955 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.840228][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.840239][ T4955] Call Trace: [ 139.840245][ T4955] [ 139.840252][ T4955] dump_stack_lvl+0xe8/0x150 [ 139.840280][ T4955] should_fail_ex+0x467/0x600 [ 139.840314][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.840340][ T4955] should_failslab+0xa8/0x100 [ 139.840363][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.840389][ T4955] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 139.840409][ T4955] ? sock_alloc_inode+0x2c/0x1a0 [ 139.840434][ T4955] ? sock_alloc_inode+0x2c/0x1a0 [ 139.840466][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.840493][ T4955] sock_alloc_inode+0x2c/0x1a0 [ 139.840521][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.840546][ T4955] alloc_inode+0x6a/0x1b0 [ 139.840565][ T4955] __sock_create+0x12d/0x9d0 [ 139.840591][ T4955] __sys_socket+0xd6/0x1b0 [ 139.840610][ T4955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.840629][ T4955] __x64_sys_socket+0x7a/0x90 [ 139.840648][ T4955] do_syscall_64+0x174/0x580 [ 139.840671][ T4955] ? clear_bhb_loop+0x40/0x90 [ 139.840693][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.840712][ T4955] RIP: 0033:0x7f359a46a707 [ 139.840727][ T4955] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 139.840741][ T4955] RSP: 002b:00007fff23dcb4d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 139.840760][ T4955] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f359a46a707 [ 139.840773][ T4955] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 139.840783][ T4955] RBP: 00007f359a4f6560 R08: 0000000000000073 R09: 0000000000000001 [ 139.840795][ T4955] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 139.840806][ T4955] R13: 00007fff23dcb600 R14: 0000000000000053 R15: 00007fff23dcb600 [ 139.840834][ T4955] [ 139.840942][ T4955] socket: no more sockets [ 139.841050][ T4955] FAULT_INJECTION: forcing a failure. [ 139.841050][ T4955] name failslab, interval 1, probability 100, space 0, times 95 [ 139.841072][ T4955] CPU: 0 UID: 0 PID: 4955 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.841092][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.841102][ T4955] Call Trace: [ 139.841109][ T4955] [ 139.841116][ T4955] dump_stack_lvl+0xe8/0x150 [ 139.841152][ T4955] should_fail_ex+0x467/0x600 [ 139.841182][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.841209][ T4955] should_failslab+0xa8/0x100 [ 139.841232][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.841258][ T4955] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 139.841278][ T4955] ? sock_alloc_inode+0x2c/0x1a0 [ 139.841304][ T4955] ? sock_alloc_inode+0x2c/0x1a0 [ 139.841335][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.841363][ T4955] sock_alloc_inode+0x2c/0x1a0 [ 139.841389][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.841415][ T4955] alloc_inode+0x6a/0x1b0 [ 139.841434][ T4955] __sock_create+0x12d/0x9d0 [ 139.841460][ T4955] __sys_socket+0xd6/0x1b0 [ 139.841479][ T4955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.841498][ T4955] __x64_sys_socket+0x7a/0x90 [ 139.841518][ T4955] do_syscall_64+0x174/0x580 [ 139.841541][ T4955] ? clear_bhb_loop+0x40/0x90 [ 139.841564][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.841582][ T4955] RIP: 0033:0x7f359a46a707 [ 139.841598][ T4955] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 139.841612][ T4955] RSP: 002b:00007fff23dcb4d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 139.841629][ T4955] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f359a46a707 [ 139.841642][ T4955] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 139.841652][ T4955] RBP: 00007f359a4f6560 R08: 0000000000000073 R09: 0000000000000001 [ 139.841664][ T4955] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 139.841675][ T4955] R13: 00007fff23dcb600 R14: 0000000000000068 R15: 00007fff23dcb600 [ 139.841703][ T4955] [ 139.841711][ T4955] socket: no more sockets [ 139.841724][ T4955] FAULT_INJECTION: forcing a failure. [ 139.841724][ T4955] name failslab, interval 1, probability 100, space 0, times 94 [ 139.841745][ T4955] CPU: 0 UID: 0 PID: 4955 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.841765][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.841775][ T4955] Call Trace: [ 139.841786][ T4955] [ 139.841792][ T4955] dump_stack_lvl+0xe8/0x150 [ 139.841821][ T4955] should_fail_ex+0x467/0x600 [ 139.841851][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.841878][ T4955] should_failslab+0xa8/0x100 [ 139.841900][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.841927][ T4955] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 139.841947][ T4955] ? sock_alloc_inode+0x2c/0x1a0 [ 139.841972][ T4955] ? sock_alloc_inode+0x2c/0x1a0 [ 139.842007][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.842034][ T4955] sock_alloc_inode+0x2c/0x1a0 [ 139.842061][ T4955] ? __pfx_sock_alloc_inode+0x10/0x10 [ 139.842087][ T4955] alloc_inode+0x6a/0x1b0 [ 139.842106][ T4955] __sock_create+0x12d/0x9d0 [ 139.842138][ T4955] __sys_socket+0xd6/0x1b0 [ 139.842156][ T4955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.842176][ T4955] __x64_sys_socket+0x7a/0x90 [ 139.842195][ T4955] do_syscall_64+0x174/0x580 [ 139.842219][ T4955] ? clear_bhb_loop+0x40/0x90 [ 139.842241][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.842259][ T4955] RIP: 0033:0x7f359a46a707 [ 139.842274][ T4955] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 139.842289][ T4955] RSP: 002b:00007fff23dcb4d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 139.842306][ T4955] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f359a46a707 [ 139.842319][ T4955] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 139.842330][ T4955] RBP: 00007f359a4f6560 R08: 0000000000000073 R09: 0000000000000001 [ 139.842341][ T4955] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 139.842352][ T4955] R13: 00007fff23dcb600 R14: 0000000000000070 R15: 00007fff23dcb600 [ 139.842380][ T4955] [ 139.843070][ T4955] socket: no more sockets [ 140.212460][ T5613] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 140.245361][ T5613] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 140.251458][ T5613] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 140.418363][ T5613] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 140.451251][ T5613] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 140.855575][ T6461] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 141.565397][ T6474] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 141.996955][ T6457] lo speed is unknown, defaulting to 1000 [ 142.763170][ T5613] Bluetooth: hci10: command tx timeout [ 142.806828][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.806961][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.807094][ T6457] bridge_slave_0: entered allmulticast mode [ 142.808678][ T6457] bridge_slave_0: entered promiscuous mode [ 142.811956][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.812083][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.812373][ T6457] bridge_slave_1: entered allmulticast mode [ 142.815103][ T6457] bridge_slave_1: entered promiscuous mode [ 142.861242][ T6457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.866012][ T6457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.920274][ T6457] team0: Port device team_slave_0 added [ 142.922742][ T6457] team0: Port device team_slave_1 added [ 142.956892][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.956908][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.956930][ T6457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.958391][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.958400][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.958413][ T6457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.060456][ T6457] hsr_slave_0: entered promiscuous mode [ 143.061466][ T6457] hsr_slave_1: entered promiscuous mode [ 143.063505][ T6457] debugfs: 'hsr0' already exists in 'hsr' [ 143.063528][ T6457] Cannot create hsr debugfs directory [ 143.936053][ T5892] svc: failed to register lockdv1 RPC service (errno 512). [ 143.936506][ T5892] lockd_up: makesock failed, error=-512 [ 144.191818][ T6457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.267491][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.8.168'. [ 144.342623][ T6515] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 144.567964][ T6457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.679126][ T6519] tipc: Started in network mode [ 144.679144][ T6519] tipc: Node identity 887766554433221100ffeeddccbbaa99, cluster identity 4711 [ 144.843096][ T5613] Bluetooth: hci10: command tx timeout [ 144.899783][ T6457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.951281][ T6519] lo speed is unknown, defaulting to 1000 [ 145.208539][ T6457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.152048][ T6457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.209413][ T6457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.210404][ T6457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.269633][ T6457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.296206][ T6457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.335385][ T6457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.336327][ T6457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.378431][ T6457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.784829][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.866695][ T6457] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.981061][ T5613] Bluetooth: hci10: command tx timeout [ 147.089299][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.089510][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.164807][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.164936][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.950027][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.8.178'. [ 147.986305][ T5892] svc: failed to register nfsdv3 RPC service (errno 512). [ 147.987119][ T5892] svc: failed to register nfsaclv3 RPC service (errno 512). [ 147.987137][ T5892] failed to unregister tcp with rpcbind [ 148.013516][ T5892] svc: failed to register nfsdv3 RPC service (errno 97). [ 148.013539][ T5892] svc: failed to register nfsaclv3 RPC service (errno 97). [ 148.013551][ T5892] failed to unregister tcp with rpcbind [ 148.097277][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.115864][ T5601] svc: failed to register nfsdv3 RPC service (errno 512). [ 148.130166][ T5601] svc: failed to register nfsaclv3 RPC service (errno 512). [ 148.130186][ T5601] failed to unregister tcp with rpcbind [ 148.130470][ T5601] svc: failed to register nfsdv3 RPC service (errno 97). [ 148.130485][ T5601] svc: failed to register nfsaclv3 RPC service (errno 97). [ 148.130496][ T5601] failed to unregister tcp with rpcbind [ 148.200390][ T6555] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 148.338420][ T6457] veth0_vlan: entered promiscuous mode [ 148.480175][ T6457] veth1_vlan: entered promiscuous mode [ 148.665005][ T6457] veth0_macvtap: entered promiscuous mode [ 148.671160][ T6457] veth1_macvtap: entered promiscuous mode [ 148.728050][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.747747][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.768414][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.768700][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.768737][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.768768][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.003463][ T5613] Bluetooth: hci10: command tx timeout [ 149.565590][ T3396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.565610][ T3396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.668970][ T5905] svc: failed to register nfsdv3 RPC service (errno 512). [ 149.673877][ T5905] svc: failed to register nfsaclv3 RPC service (errno 512). [ 149.673898][ T5905] failed to unregister tcp with rpcbind [ 149.674399][ T5905] svc: failed to register nfsdv3 RPC service (errno 97). [ 149.674416][ T5905] svc: failed to register nfsaclv3 RPC service (errno 97). [ 149.674428][ T5905] failed to unregister tcp with rpcbind [ 149.974337][ T5946] NFSD: Failed to start, no listeners configured. [ 150.170954][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.170973][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.383927][ T151] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.056731][ T4915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.125486][ T4915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.146134][ T4915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.188565][ T1060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.189500][ T4915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.215044][ T4915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.559151][ T151] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.998773][ T5979] svc: failed to register nfsdv3 RPC service (errno 111). [ 152.028448][ T5979] svc: failed to register nfsaclv3 RPC service (errno 111). [ 152.028469][ T5979] failed to unregister tcp with rpcbind [ 152.028755][ T5979] svc: failed to register nfsdv3 RPC service (errno 97). [ 152.028769][ T5979] svc: failed to register nfsaclv3 RPC service (errno 97). [ 152.028780][ T5979] failed to unregister tcp with rpcbind [ 153.635939][ T5613] Bluetooth: hci1: command tx timeout [ 154.566859][ T1060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.712372][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.187'. [ 155.645183][ T5613] Bluetooth: hci1: command tx timeout [ 155.713498][ T6605] bridge0: port 3(syz_tun) entered blocking state [ 155.713622][ T6605] bridge0: port 3(syz_tun) entered disabled state [ 155.713970][ T6605] syz_tun: entered allmulticast mode [ 155.717334][ T6605] syz_tun: entered promiscuous mode [ 155.718205][ T6605] bridge0: port 3(syz_tun) entered blocking state [ 155.757354][ T6605] bridge0: port 3(syz_tun) entered forwarding state [ 156.884536][ T6612] NFSD: Unable to initialize client recovery tracking! (-110) [ 156.884554][ T6612] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 156.884565][ T6612] NFSD: starting 90-second grace period (net f0000b4e) [ 157.324873][ T6645] rdma_rxe: rxe_newlink: failed to add veth0 [ 157.398134][ T6648] netlink: 48 bytes leftover after parsing attributes in process `syz.8.203'. [ 157.723130][ T5613] Bluetooth: hci1: command tx timeout [ 158.009608][ T6665] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 158.824398][ T55] rpcbind: server 127.0.0.1 not responding, timed out [ 159.683921][ T1060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.803585][ T5613] Bluetooth: hci1: command tx timeout [ 161.951529][ T1060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.079664][ T6720] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 162.480714][ T6571] lo speed is unknown, defaulting to 1000 [ 162.927536][ T55] rpcbind: server 127.0.0.1 not responding, timed out [ 164.184835][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.8.234'. [ 164.244124][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.8.234'. [ 164.548856][ T6752] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 164.694950][ T5878] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 165.012622][ T6750] svc: failed to register lockdv1 RPC service (errno 111). [ 165.034708][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 165.113705][ T5878] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.113734][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.113754][ T5878] usb 10-1: SerialNumber: syz [ 165.269111][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 165.269142][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 165.269161][ T9] usb 2-1: Product: syz [ 165.269174][ T9] usb 2-1: Manufacturer: syz [ 165.523993][ T6765] FAULT_INJECTION: forcing a failure. [ 165.523993][ T6765] name fail_futex, interval 1, probability 0, space 0, times 1 [ 165.524024][ T6765] CPU: 1 UID: 0 PID: 6765 Comm: syz.8.241 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.524042][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.524051][ T6765] Call Trace: [ 165.524058][ T6765] [ 165.524065][ T6765] dump_stack_lvl+0xe8/0x150 [ 165.524095][ T6765] should_fail_ex+0x467/0x600 [ 165.524125][ T6765] get_futex_key+0x1b3/0x1580 [ 165.524151][ T6765] ? __pfx_get_futex_key+0x10/0x10 [ 165.524170][ T6765] ? debug_object_free+0x29c/0x340 [ 165.524191][ T6765] futex_wake+0x119/0x600 [ 165.524215][ T6765] ? __pfx_futex_wait+0x10/0x10 [ 165.524236][ T6765] ? __pfx_futex_wake+0x10/0x10 [ 165.524260][ T6765] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 165.524286][ T6765] ? ktime_get+0x45/0x220 [ 165.524305][ T6765] do_futex+0x458/0x4e0 [ 165.524330][ T6765] ? __pfx_do_futex+0x10/0x10 [ 165.524350][ T6765] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.524371][ T6765] ? ktime_get+0x45/0x220 [ 165.524391][ T6765] __se_sys_futex+0x3a8/0x450 [ 165.524418][ T6765] ? __pfx___se_sys_futex+0x10/0x10 [ 165.524441][ T6765] ? rcu_is_watching+0x15/0xb0 [ 165.524471][ T6765] ? __x64_sys_futex+0x21/0xf0 [ 165.524492][ T6765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.524510][ T6765] do_syscall_64+0x174/0x580 [ 165.524531][ T6765] ? trace_irq_disable+0x3b/0x140 [ 165.524548][ T6765] ? clear_bhb_loop+0x40/0x90 [ 165.524571][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.524588][ T6765] RIP: 0033:0x7f671ba1de99 [ 165.524606][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.524621][ T6765] RSP: 002b:00007fffab48ff78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.524642][ T6765] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f671ba1de99 [ 165.524656][ T6765] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f671bca5fa8 [ 165.524667][ T6765] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 165.524678][ T6765] R10: 00007f671bca5fa0 R11: 0000000000000246 R12: 0000000000000000 [ 165.524689][ T6765] R13: 00007f671bca5fac R14: 00007f671bca5fa8 R15: 00007f671bca5fa0 [ 165.524719][ T6765] [ 165.524968][ T6765] FAULT_INJECTION: forcing a failure. [ 165.524968][ T6765] name fail_futex, interval 1, probability 0, space 0, times 0 [ 165.524994][ T6765] CPU: 1 UID: 0 PID: 6765 Comm: syz.8.241 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.525015][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.525026][ T6765] Call Trace: [ 165.525032][ T6765] [ 165.525039][ T6765] dump_stack_lvl+0xe8/0x150 [ 165.525072][ T6765] should_fail_ex+0x467/0x600 [ 165.525106][ T6765] get_futex_key+0x1b3/0x1580 [ 165.525139][ T6765] ? __pfx_get_futex_key+0x10/0x10 [ 165.525161][ T6765] ? debug_object_free+0x29c/0x340 [ 165.525193][ T6765] futex_wake+0x119/0x600 [ 165.525223][ T6765] ? __pfx_futex_wait+0x10/0x10 [ 165.525251][ T6765] ? __pfx_futex_wake+0x10/0x10 [ 165.525281][ T6765] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 165.525315][ T6765] ? ktime_get+0x45/0x220 [ 165.525336][ T6765] do_futex+0x458/0x4e0 [ 165.525365][ T6765] ? __pfx_do_futex+0x10/0x10 [ 165.525388][ T6765] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.525410][ T6765] ? ktime_get+0x45/0x220 [ 165.525433][ T6765] __se_sys_futex+0x3a8/0x450 [ 165.525464][ T6765] ? __pfx___se_sys_futex+0x10/0x10 [ 165.525488][ T6765] ? rcu_is_watching+0x15/0xb0 [ 165.525523][ T6765] ? __x64_sys_futex+0x21/0xf0 [ 165.525547][ T6765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.525568][ T6765] do_syscall_64+0x174/0x580 [ 165.525590][ T6765] ? trace_irq_disable+0x3b/0x140 [ 165.525609][ T6765] ? clear_bhb_loop+0x40/0x90 [ 165.525633][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.525651][ T6765] RIP: 0033:0x7f671ba1de99 [ 165.525668][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.525682][ T6765] RSP: 002b:00007fffab48ff78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.525702][ T6765] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f671ba1de99 [ 165.525715][ T6765] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f671bca5fa8 [ 165.525727][ T6765] RBP: 0000000000000085 R08: 0000000000000020 R09: 0000000000000000 [ 165.525745][ T6765] R10: 00007f671bca5fa0 R11: 0000000000000246 R12: 0000000000000000 [ 165.525758][ T6765] R13: 00007f671bca5fac R14: 00007f671bca5fa8 R15: 00007f671bca5fa0 [ 165.525787][ T6765] [ 165.618042][ T6765] FAULT_INJECTION: forcing a failure. [ 165.618042][ T6765] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.618075][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.8.241 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.618097][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.618108][ T6765] Call Trace: [ 165.618115][ T6765] [ 165.618125][ T6765] dump_stack_lvl+0xe8/0x150 [ 165.618167][ T6765] should_fail_ex+0x467/0x600 [ 165.618202][ T6765] _copy_from_user+0x2d/0xb0 [ 165.618227][ T6765] get_timespec64+0x96/0x1b0 [ 165.618250][ T6765] ? __pfx_get_timespec64+0x10/0x10 [ 165.618281][ T6765] __se_sys_clock_nanosleep+0x1ce/0x3b0 [ 165.618311][ T6765] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 165.618346][ T6765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.618367][ T6765] do_syscall_64+0x174/0x580 [ 165.618390][ T6765] ? trace_irq_disable+0x3b/0x140 [ 165.618409][ T6765] ? clear_bhb_loop+0x40/0x90 [ 165.618432][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.618451][ T6765] RIP: 0033:0x7f671b9de6ce [ 165.618468][ T6765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.618482][ T6765] RSP: 002b:00007fffab48fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 165.618502][ T6765] RAX: ffffffffffffffda RBX: 000055557bb68500 RCX: 00007f671b9de6ce [ 165.618516][ T6765] RDX: 00007fffab48ff50 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.618527][ T6765] RBP: 00007f671bca7da0 R08: 0000000000000000 R09: 0000000000000000 [ 165.618539][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000288ea [ 165.618550][ T6765] R13: 00007f671bca609c R14: 0000000000028653 R15: 00007f671bca6090 [ 165.618579][ T6765] [ 166.381941][ T9] speedtch 2-1:1.0: speedtch_bind: wrong device class 0 [ 166.381973][ T9] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 166.507601][ T5878] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 166.731328][ T9] usb 2-1: USB disconnect, device number 2 [ 166.737170][ T5878] usb 10-1: USB disconnect, device number 2 [ 167.679574][ T1060] bridge_slave_1: left allmulticast mode [ 167.679744][ T1060] bridge_slave_1: left promiscuous mode [ 167.756330][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.909718][ T6787] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 168.022857][ T6750] svc: failed to register nfsdv3 RPC service (errno 512). [ 168.024062][ T6750] svc: failed to register nfsaclv3 RPC service (errno 512). [ 168.024080][ T6750] failed to unregister udp with rpcbind [ 168.055390][ T6750] svc: failed to register nfsdv3 RPC service (errno 97). [ 168.055412][ T6750] svc: failed to register nfsaclv3 RPC service (errno 97). [ 168.055425][ T6750] failed to unregister udp with rpcbind [ 168.110810][ T1060] bridge_slave_0: left allmulticast mode [ 168.110833][ T1060] bridge_slave_0: left promiscuous mode [ 168.110994][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.222248][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.247'. [ 168.279311][ T6791] netlink: 36 bytes leftover after parsing attributes in process `syz.5.247'. [ 169.103920][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.165443][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.185142][ T1060] bond0 (unregistering): Released all slaves [ 169.246471][ T6772] tipc: New replicast peer: 127.0.0.1 [ 169.305185][ T6772] tipc: Enabled bearer , priority 10 [ 169.748811][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.249'. [ 169.827112][ T6808] syz.9.251 uses obsolete (PF_INET,SOCK_PACKET) [ 172.085962][ T6845] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 172.198106][ T6630] tipc: Node number set to 3439324893 [ 172.412108][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 172.874684][ T6850] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 173.904958][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 175.021400][ T6890] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 177.575846][ T6943] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 177.649449][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.681632][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.681923][ T6571] bridge_slave_0: entered allmulticast mode [ 177.727470][ T6571] bridge_slave_0: entered promiscuous mode [ 177.745321][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.745388][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.745586][ T6571] bridge_slave_1: entered allmulticast mode [ 177.875962][ T6571] bridge_slave_1: entered promiscuous mode [ 178.685710][ T1060] hsr_slave_0: left promiscuous mode [ 178.728486][ T1060] hsr_slave_1: left promiscuous mode [ 178.731912][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.773033][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.936803][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.936829][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.745326][ C1] tipc: RX(887766554433221100ffeeddccbbaa99): key[1] is activated [ 179.933397][ T1060] veth1_macvtap: left promiscuous mode [ 179.933670][ T1060] veth0_macvtap: left promiscuous mode [ 179.933845][ T1060] veth1_vlan: left promiscuous mode [ 179.934055][ T1060] veth0_vlan: left promiscuous mode [ 180.789399][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 180.851274][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 181.051172][ T6996] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 181.201562][ T6979] tipc: Enabled bearer , priority 10 [ 181.205530][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 181.459968][ T6571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.958220][ T6976] tipc: Disabling bearer [ 182.352694][ T6571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.346123][ T6571] team0: Port device team_slave_0 added [ 183.459833][ T6571] team0: Port device team_slave_1 added [ 183.594201][ T7028] bridge0: port 3(syz_tun) entered blocking state [ 183.594339][ T7028] bridge0: port 3(syz_tun) entered disabled state [ 183.594576][ T7028] syz_tun: entered allmulticast mode [ 183.597373][ T7028] syz_tun: entered promiscuous mode [ 183.597946][ T7028] bridge0: port 3(syz_tun) entered blocking state [ 183.598321][ T7028] bridge0: port 3(syz_tun) entered forwarding state [ 183.652058][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.652074][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.652097][ T6571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.664680][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.664695][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.665694][ T6571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.111256][ T6571] hsr_slave_0: entered promiscuous mode [ 184.124507][ T6571] hsr_slave_1: entered promiscuous mode [ 184.128939][ T6571] debugfs: 'hsr0' already exists in 'hsr' [ 184.128965][ T6571] Cannot create hsr debugfs directory [ 184.492172][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.9.309'. [ 184.768819][ T7056] openvswitch: netlink: Message has 4 unknown bytes. [ 189.454373][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 190.099760][ T7151] netlink: 84 bytes leftover after parsing attributes in process `syz.1.336'. [ 190.100530][ T7151] netlink: 68 bytes leftover after parsing attributes in process `syz.1.336'. [ 190.308333][ T7150] NFSD: Failed to start, no listeners configured. [ 191.947089][ T7176] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 192.758702][ T7157] NFSD: Failed to start, no listeners configured. [ 192.876776][ T7193] netlink: 108 bytes leftover after parsing attributes in process `syz.1.347'. [ 192.885683][ T1060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.452222][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.452294][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.321427][ T7235] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 195.322118][ T7235] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 195.388049][ T1060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.840776][ T7247] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 196.122277][ T7246] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 196.160973][ T7246] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 196.777165][ T1060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.853515][ T7273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.365'. [ 197.507420][ T7298] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 197.570523][ T1060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.673045][ T7261] NFSD: Unable to initialize client recovery tracking! (-110) [ 197.673062][ T7261] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 197.673073][ T7261] NFSD: starting 90-second grace period (net f00007ec) [ 198.321270][ T6571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.351290][ T6571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.766669][ T6571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.841487][ T6571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.856170][ T6571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.039607][ T6571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.040966][ T6571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.191303][ T6571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.971585][ T1060] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.247616][ T6571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.334021][ T6571] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.372163][ T3396] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.372372][ T3396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.638105][ T1060] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.675858][ T7382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 200.747580][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 200.761880][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.806371][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.928400][ T7390] netlink: 7 bytes leftover after parsing attributes in process `syz.9.389'. [ 200.928421][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.389'. [ 200.928510][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.389'. [ 200.928527][ T7390] netlink: 7 bytes leftover after parsing attributes in process `syz.9.389'. [ 201.441990][ T1060] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.099085][ T1060] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.309784][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 202.491828][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.395'. [ 202.738438][ T7446] netlink: 108 bytes leftover after parsing attributes in process `syz.5.398'. [ 202.758511][ T7447] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 202.872446][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.8.400'. [ 202.875661][ T7450] netlink: 44 bytes leftover after parsing attributes in process `syz.8.400'. [ 202.879253][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.8.400'. [ 202.897159][ T7450] netlink: 44 bytes leftover after parsing attributes in process `syz.8.400'. [ 202.897545][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.8.400'. [ 202.912148][ T7450] netlink: 44 bytes leftover after parsing attributes in process `syz.8.400'. [ 202.912629][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.8.400'. [ 203.518571][ T7471] rdma_rxe: rxe_newlink: failed to add lo [ 204.187681][ T6571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.425594][ T7494] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 204.447518][ T7496] tipc: Enabling of bearer rejected, already enabled [ 204.685383][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 205.338776][ T7503] svc: failed to register lockdv1 RPC service (errno 512). [ 205.824089][ T7538] openvswitch: netlink: Key 8 has unexpected len 12 expected 40 [ 205.861964][ T1060] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.314134][ T7503] svc: failed to register nfsdv3 RPC service (errno 512). [ 206.314350][ T7503] svc: failed to register nfsaclv3 RPC service (errno 512). [ 206.314364][ T7503] failed to unregister tcp with rpcbind [ 206.320549][ T7503] svc: failed to register nfsdv3 RPC service (errno 97). [ 206.320564][ T7503] svc: failed to register nfsaclv3 RPC service (errno 97). [ 206.320571][ T7503] failed to unregister tcp with rpcbind [ 206.363493][ T7551] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 206.389766][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 206.405985][ T6571] veth0_vlan: entered promiscuous mode [ 206.645919][ T7558] netlink: 32 bytes leftover after parsing attributes in process `syz.9.428'. [ 206.922765][ T1060] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.172421][ T6571] veth1_vlan: entered promiscuous mode [ 207.299625][ T7574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 207.301866][ T7574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 207.358378][ T7573] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 207.771671][ T1060] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.825713][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.441'. [ 207.826363][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.441'. [ 207.992127][ T7580] tipc: Started in network mode [ 207.992156][ T7580] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 207.992450][ T7580] tipc: Enabled bearer , priority 0 [ 208.061975][ T7588] svc: failed to register lockdv1 RPC service (errno 111). [ 208.109940][ T6571] veth0_macvtap: entered promiscuous mode [ 208.197689][ T6571] veth1_macvtap: entered promiscuous mode [ 208.287236][ T6571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.430227][ T6571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.489703][ T7610] netlink: 104 bytes leftover after parsing attributes in process `syz.1.445'. [ 208.858999][ T7626] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 208.884031][ T1060] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.968376][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.143756][ T7588] svc: failed to register nfsdv3 RPC service (errno 512). [ 209.147770][ T7588] svc: failed to register nfsaclv3 RPC service (errno 512). [ 209.147791][ T7588] failed to unregister tcp with rpcbind [ 209.190715][ T7588] svc: failed to register nfsdv3 RPC service (errno 97). [ 209.190732][ T7588] svc: failed to register nfsaclv3 RPC service (errno 97). [ 209.190738][ T7588] failed to unregister tcp with rpcbind [ 209.217563][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.222786][ T36] tipc: Node number set to 43690 [ 209.241202][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 209.248595][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.267142][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.249285][ T7661] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 211.774307][ T7676] smc: net device lo applied user defined pnetid SYZ0 [ 211.877745][ T7674] rdma_rxe: rxe_newlink: failed to add lo [ 212.080997][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.083993][ T4915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.087247][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.101111][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.115543][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.772026][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 212.838392][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 213.349200][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 213.579845][ T7717] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 214.283348][ T5613] Bluetooth: hci0: command tx timeout [ 214.287327][ T7739] netlink: 132 bytes leftover after parsing attributes in process `syz.9.477'. [ 214.552619][ T1060] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.595612][ T7743] netlink: 84 bytes leftover after parsing attributes in process `syz.9.478'. [ 214.645654][ T6060] svc: failed to register nfsdv3 RPC service (errno 111). [ 214.647731][ T6060] svc: failed to register nfsaclv3 RPC service (errno 111). [ 214.647750][ T6060] failed to unregister tcp with rpcbind [ 214.671058][ T6060] svc: failed to register nfsdv3 RPC service (errno 97). [ 214.671080][ T6060] svc: failed to register nfsaclv3 RPC service (errno 97). [ 214.671090][ T6060] failed to unregister tcp with rpcbind [ 215.511749][ T7769] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 215.532976][ T5719] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 215.706864][ T1060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.893803][ T7681] lo speed is unknown, defaulting to 1000 [ 216.289645][ T5719] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 216.289682][ T5719] usb 6-1: can't read configurations, error -71 [ 216.364840][ T5613] Bluetooth: hci0: command tx timeout [ 216.635046][ T7790] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 216.756962][ T1060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.219296][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 217.277511][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 217.509039][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.9.493'. [ 217.512479][ T7810] bridge0: port 4(veth0) entered blocking state [ 217.512605][ T7810] bridge0: port 4(veth0) entered disabled state [ 217.512821][ T7810] veth0: entered allmulticast mode [ 217.535646][ T7810] veth0: entered promiscuous mode [ 217.553238][ T7810] bridge0: port 4(veth0) entered blocking state [ 217.553348][ T7810] bridge0: port 4(veth0) entered forwarding state [ 217.558551][ T7813] bridge0: port 5(veth1) entered blocking state [ 217.558692][ T7813] bridge0: port 5(veth1) entered disabled state [ 217.558874][ T7813] veth1: entered allmulticast mode [ 217.560816][ T7813] veth1: entered promiscuous mode [ 217.561376][ T7813] bridge0: port 5(veth1) entered blocking state [ 217.561461][ T7813] bridge0: port 5(veth1) entered forwarding state [ 217.677749][ T7820] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 217.817463][ T1060] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.905099][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'. [ 218.103653][ T7822] 8021q: VLANs not supported on lo [ 218.443244][ T5613] Bluetooth: hci0: command tx timeout [ 219.062023][ T5740] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 219.221066][ T5740] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 219.414870][ T7857] tipc: New replicast peer: 127.0.0.1 [ 219.415441][ T7857] tipc: Enabled bearer , priority 10 [ 219.483936][ T5608] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 219.575554][ T7867] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 219.768062][ T7843] ceph: No mds server is up or the cluster is laggy [ 220.027866][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 220.483028][ T5726] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 220.525707][ T5613] Bluetooth: hci0: command tx timeout [ 220.644772][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 220.696080][ T5726] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 220.696122][ T5726] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 220.696158][ T5726] usb 10-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 220.696180][ T5726] usb 10-1: config 1 interface 1 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 220.720669][ T5726] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 220.720699][ T5726] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 220.720718][ T5726] usb 10-1: Product: syz [ 220.720731][ T5726] usb 10-1: Manufacturer: syz [ 220.908487][ T7883] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 220.908825][ T7883] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 221.123900][ T7897] bridge0: port 4(dummy0) entered blocking state [ 221.125860][ T7897] bridge0: port 4(dummy0) entered disabled state [ 221.126464][ T7897] dummy0: entered allmulticast mode [ 221.165597][ T7897] dummy0: entered promiscuous mode [ 221.219483][ T7897] bridge0: port 4(dummy0) entered blocking state [ 221.219682][ T7897] bridge0: port 4(dummy0) entered forwarding state [ 221.235922][ T7900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.518'. [ 221.653209][ T5726] usb 10-1: selecting invalid altsetting 1 [ 221.653231][ T5726] speedtch 10-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 221.653501][ T5726] speedtch 10-1:1.0: usbatm_usb_probe: bind failed: -22! [ 221.653556][ T5726] speedtch 10-1:1.0: probe with driver speedtch failed with error -22 [ 222.001677][ T5726] usb 10-1: selecting invalid altsetting 1 [ 222.001700][ T5726] speedtch 10-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 222.076885][ T7926] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 222.125706][ T5726] speedtch 10-1:1.1: usbatm_usb_probe: bind failed: -22! [ 222.125790][ T5726] speedtch 10-1:1.1: probe with driver speedtch failed with error -22 [ 222.151928][ T5726] usb 10-1: USB disconnect, device number 3 [ 222.483013][ T1060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.605468][ T7937] rdma_rxe: rxe_newlink: failed to add lo [ 222.798079][ T7940] smc: removing ib device syz0 [ 222.974164][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 223.230819][ T7940] smbdirect: ib_dev[syz0] removed [ 223.553330][ T7952] rdma_rxe: rxe_newlink: failed to add veth0 [ 223.856986][ T1060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.901216][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.8.530'. [ 223.924475][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.924745][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.924980][ T7681] bridge_slave_0: entered allmulticast mode [ 223.967478][ T7681] bridge_slave_0: entered promiscuous mode [ 224.003014][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.003128][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.003414][ T7681] bridge_slave_1: entered allmulticast mode [ 224.011202][ T7681] bridge_slave_1: entered promiscuous mode [ 224.158156][ T7964] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 224.158528][ T7964] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 224.602553][ T1060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.688364][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.747471][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.908373][ T7972] tipc: Started in network mode [ 224.908388][ T7972] tipc: Node identity 1000001, cluster identity 4711 [ 224.908395][ T7972] tipc: Node number set to 16777217 [ 224.975732][ T7975] tipc: New replicast peer: 127.0.0.1 [ 225.001930][ T7975] tipc: Enabled bearer , priority 10 [ 225.457699][ T1060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.763236][ T7681] team0: Port device team_slave_0 added [ 226.037774][ T7681] team0: Port device team_slave_1 added [ 226.654828][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 226.688844][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.688857][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.688875][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.745375][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.745392][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.745415][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.425816][ T8033] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 227.988490][ T7681] hsr_slave_0: entered promiscuous mode [ 227.991821][ T7681] hsr_slave_1: entered promiscuous mode [ 228.003385][ T7681] debugfs: 'hsr0' already exists in 'hsr' [ 228.003412][ T7681] Cannot create hsr debugfs directory [ 228.240809][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.8.553'. [ 228.367602][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.552'. [ 228.459825][ T8049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.552'. [ 228.873090][ T5740] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 229.045761][ T5740] usb 6-1: not running at top speed; connect to a high speed hub [ 229.046918][ T5740] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.046947][ T5740] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 229.049483][ T5740] usb 6-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 229.049509][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.049527][ T5740] usb 6-1: Product: syz [ 229.049540][ T5740] usb 6-1: Manufacturer: syz [ 229.049554][ T5740] usb 6-1: SerialNumber: syz [ 229.222453][ T36] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 229.228590][ T36] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 229.273369][ T8056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 229.273517][ T8056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 229.510161][ T36] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 229.612450][ T1060] bridge_slave_1: left allmulticast mode [ 229.612486][ T1060] bridge_slave_1: left promiscuous mode [ 229.644612][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.866108][ T1060] bridge_slave_0: left allmulticast mode [ 229.870388][ T1060] bridge_slave_0: left promiscuous mode [ 229.870642][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.926063][ T8062] ceph: No mds server is up or the cluster is laggy [ 229.997171][ T5740] ax88179_178a 6-1:1.0: probe with driver ax88179_178a failed with error -71 [ 230.023681][ T36] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 230.136421][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.137354][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.137925][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.138473][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.139087][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.139709][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.140252][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.140803][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.141343][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.511012][ T5740] usb 6-1: USB disconnect, device number 4 [ 231.465887][ T1060] bridge_slave_1: left allmulticast mode [ 231.465920][ T1060] bridge_slave_1: left promiscuous mode [ 231.466146][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.440478][ C1] net_ratelimit: 1627 callbacks suppressed [ 232.440500][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.441223][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.441847][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.442562][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.501186][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.516089][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.516736][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.517368][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.518045][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.518679][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 232.995049][ T1060] bridge_slave_0: left allmulticast mode [ 232.995175][ T1060] bridge_slave_0: left promiscuous mode [ 233.019119][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.403023][ T1060] bridge_slave_1: left allmulticast mode [ 235.403054][ T1060] bridge_slave_1: left promiscuous mode [ 235.403249][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.333477][ T4915] Bluetooth: hci5: command 0x0406 tx timeout [ 237.445341][ C1] net_ratelimit: 2951 callbacks suppressed [ 237.445361][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 237.446007][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 237.446635][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 237.447294][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 237.447927][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 237.448503][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 237.449284][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 237.449967][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 237.450607][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 237.451293][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 238.566646][ T1060] bridge_slave_0: left allmulticast mode [ 238.566679][ T1060] bridge_slave_0: left promiscuous mode [ 238.566901][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.354425][ T1060] bridge_slave_1: left allmulticast mode [ 240.354458][ T1060] bridge_slave_1: left promiscuous mode [ 240.354684][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.510347][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.571848][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.606580][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.620757][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.621639][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.006097][ T1060] bridge_slave_0: left allmulticast mode [ 242.006131][ T1060] bridge_slave_0: left promiscuous mode [ 242.006370][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.445439][ T59] Bluetooth: hci8: command 0x0406 tx timeout [ 242.456792][ C1] net_ratelimit: 3252 callbacks suppressed [ 242.456809][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 242.458595][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 242.459712][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 242.461387][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 242.462505][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 242.469451][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 242.470661][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 242.473484][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 242.474720][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 242.476634][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 242.773029][ T5611] Bluetooth: hci1: command tx timeout [ 242.979157][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.997156][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.000573][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.050463][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.064023][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.026810][ T1060] bridge_slave_1: left allmulticast mode [ 244.026844][ T1060] bridge_slave_1: left promiscuous mode [ 244.027105][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.843147][ T5613] Bluetooth: hci1: command tx timeout [ 245.186769][ T1060] bridge_slave_0: left allmulticast mode [ 245.186806][ T1060] bridge_slave_0: left promiscuous mode [ 245.187067][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.242994][ T5613] Bluetooth: hci2: command tx timeout [ 246.125815][ T1060] bridge_slave_1: left allmulticast mode [ 246.125851][ T1060] bridge_slave_1: left promiscuous mode [ 246.206952][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.371511][ T1060] bridge_slave_0: left allmulticast mode [ 246.371549][ T1060] bridge_slave_0: left promiscuous mode [ 246.371787][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.923325][ T5613] Bluetooth: hci1: command tx timeout [ 247.331182][ T5613] Bluetooth: hci2: command tx timeout [ 247.463687][ C0] net_ratelimit: 3422 callbacks suppressed [ 247.463708][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.464141][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.464863][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.465421][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 247.466129][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.466739][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 247.467486][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.468005][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.468646][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.469309][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 247.565712][ T5613] Bluetooth: hci9: command 0x0406 tx timeout [ 249.005280][ T5611] Bluetooth: hci1: command tx timeout [ 249.408889][ T5611] Bluetooth: hci2: command tx timeout [ 251.485592][ T5611] Bluetooth: hci2: command tx timeout [ 252.473529][ C0] net_ratelimit: 5291 callbacks suppressed [ 252.473552][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.474062][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 252.474913][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.475313][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 252.476351][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.476634][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.477616][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.478906][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.481722][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.482597][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 253.254688][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.420245][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.424811][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.434731][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.614131][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.154557][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.161942][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.192809][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.198280][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.200922][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.742806][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.757329][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.885328][ T5611] Bluetooth: hci3: command tx timeout [ 256.423049][ T5611] Bluetooth: hci4: command tx timeout [ 257.483257][ C0] net_ratelimit: 4843 callbacks suppressed [ 257.483279][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.484421][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.485602][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.486748][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.488058][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.489191][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.489198][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.490324][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.490515][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 257.491668][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.963455][ T5611] Bluetooth: hci3: command tx timeout [ 258.443013][ T5611] Bluetooth: hci4: command tx timeout [ 258.735092][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.058945][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.142651][ T1060] bond0 (unregistering): Released all slaves [ 260.044738][ T5611] Bluetooth: hci3: command tx timeout [ 260.538286][ T5611] Bluetooth: hci4: command tx timeout [ 261.607011][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.744381][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.841845][ T1060] bond0 (unregistering): Released all slaves [ 262.136709][ T5611] Bluetooth: hci3: command tx timeout [ 262.493935][ C1] net_ratelimit: 5812 callbacks suppressed [ 262.493956][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.493993][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.495280][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 262.495314][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.496556][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.496556][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 262.497843][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.497853][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.499186][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.499185][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 262.612965][ T5611] Bluetooth: hci4: command tx timeout [ 267.507866][ C1] net_ratelimit: 5554 callbacks suppressed [ 267.507887][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.508087][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.509378][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.510463][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.511440][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.512265][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.515290][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.516415][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.517535][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.518646][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.920767][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.458154][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.490203][ T1060] bond0 (unregistering): Released all slaves [ 272.513254][ C1] net_ratelimit: 5720 callbacks suppressed [ 272.513277][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.513662][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.514561][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 272.514921][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.515826][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 272.516117][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.517202][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.517252][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.518477][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 272.518484][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.346507][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.087738][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.155403][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.156650][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.157969][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.902158][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.225322][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.242971][ T5613] Bluetooth: hci6: command tx timeout [ 277.345244][ T1060] bond0 (unregistering): Released all slaves [ 277.524316][ C0] net_ratelimit: 5842 callbacks suppressed [ 277.524335][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.525310][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.526214][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.527139][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.528070][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.528959][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.529896][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.530795][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.531869][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.532413][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.333529][ T5613] Bluetooth: hci6: command tx timeout [ 281.328864][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.460217][ T5613] Bluetooth: hci6: command tx timeout [ 282.533452][ C0] net_ratelimit: 6133 callbacks suppressed [ 282.533474][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.533911][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.534772][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.536124][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.537354][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.538578][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.539834][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 282.539885][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.541127][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 282.541182][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.676353][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.042382][ T1060] bond0 (unregistering): Released all slaves [ 283.546022][ T5613] Bluetooth: hci6: command tx timeout [ 285.349811][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.465483][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.531341][ T1060] bond0 (unregistering): Released all slaves [ 285.826994][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 286.077267][ T6457] tipc: Resetting bearer [ 287.477756][ T6457] bridge0: port 3(syz_tun) entered disabled state [ 287.546488][ C1] net_ratelimit: 5164 callbacks suppressed [ 287.546510][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 287.550092][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 287.551402][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.555733][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.559181][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.560444][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.561731][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.566521][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.568790][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.569971][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.366211][ T6457] syz_tun (unregistering): left allmulticast mode [ 289.366247][ T6457] syz_tun (unregistering): left promiscuous mode [ 289.366342][ T6457] bridge0: port 3(syz_tun) entered disabled state [ 290.685231][ T6457] tipc: Disabling bearer [ 292.553882][ C0] net_ratelimit: 5134 callbacks suppressed [ 292.553905][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.554851][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.555791][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.556768][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.557899][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.559081][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.560249][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.561393][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.562560][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.563869][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.839951][ T8107] bridge0: port 3(syz_tun) entered disabled state [ 296.617184][ T8107] syz_tun (unregistering): left allmulticast mode [ 296.617220][ T8107] syz_tun (unregistering): left promiscuous mode [ 296.617318][ T8107] bridge0: port 3(syz_tun) entered disabled state [ 297.566097][ C1] net_ratelimit: 6681 callbacks suppressed [ 297.566120][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 297.567374][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.568621][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 297.570120][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 297.571219][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.572255][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 297.573453][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 297.574485][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.574782][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.575442][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 299.301885][ T8110] bridge0: port 3(syz_tun) entered disabled state [ 301.609807][ T8110] syz_tun (unregistering): left allmulticast mode [ 301.609836][ T8110] syz_tun (unregistering): left promiscuous mode [ 301.609905][ T8110] bridge0: port 3(syz_tun) entered disabled state [ 302.282351][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.385716][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.387862][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.394903][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.399238][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.573325][ C1] net_ratelimit: 6079 callbacks suppressed [ 302.573348][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.573848][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.574569][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 302.574900][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.575822][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.575872][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 302.576829][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.577047][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.577746][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.578241][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 303.281969][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.330354][ T1060] tipc: Disabling bearer [ 303.336288][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.340002][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.495491][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.538233][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.677133][ T1060] tipc: Left network mode [ 304.924685][ T5613] Bluetooth: hci0: command tx timeout [ 305.710756][ T1060] tipc: Disabling bearer [ 305.710914][ T1060] tipc: Left network mode [ 306.128776][ T5613] Bluetooth: hci5: command tx timeout [ 307.003158][ T5613] Bluetooth: hci0: command tx timeout [ 307.583209][ C1] net_ratelimit: 5553 callbacks suppressed [ 307.583232][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 307.583445][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.584333][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.584543][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.585452][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 307.585705][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.586606][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 307.586773][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.587749][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.587862][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.233069][ T5613] Bluetooth: hci5: command tx timeout [ 309.099057][ T5613] Bluetooth: hci0: command tx timeout [ 310.294466][ T5613] Bluetooth: hci5: command tx timeout [ 311.189193][ T5613] Bluetooth: hci0: command tx timeout [ 311.261250][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 312.363342][ T5613] Bluetooth: hci5: command tx timeout [ 312.597532][ C0] net_ratelimit: 5596 callbacks suppressed [ 312.597555][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.598686][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.599875][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.600988][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.602070][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.607297][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.608403][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.609437][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.609809][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.619921][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.936482][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.020445][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.036085][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.037333][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.038407][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.304632][ T5613] Bluetooth: hci1: command tx timeout [ 317.389905][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.389981][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.603003][ C1] net_ratelimit: 6271 callbacks suppressed [ 317.603024][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.604381][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 317.605543][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 317.606124][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.606668][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.607719][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 317.608533][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 317.609319][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.610196][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 317.611246][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 318.019669][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.047562][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.064035][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.069433][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.095185][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.373468][ T5611] Bluetooth: hci1: command tx timeout [ 320.123345][ T5611] Bluetooth: hci2: command tx timeout [ 320.453827][ T5611] Bluetooth: hci1: command tx timeout [ 322.203006][ T5611] Bluetooth: hci2: command tx timeout [ 322.552993][ T5611] Bluetooth: hci1: command tx timeout [ 322.613719][ C1] net_ratelimit: 6273 callbacks suppressed [ 322.613740][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.613935][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.614902][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 322.615126][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.616069][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 322.616198][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.617222][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.617292][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.618491][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.618820][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 324.282963][ T5611] Bluetooth: hci2: command tx timeout [ 326.362938][ T5611] Bluetooth: hci2: command tx timeout [ 327.623478][ C1] net_ratelimit: 7134 callbacks suppressed [ 327.623501][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 327.624671][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 327.625789][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.626849][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 327.627648][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.627952][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 327.628708][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.629070][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.630221][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 327.631127][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 332.632868][ C0] net_ratelimit: 6944 callbacks suppressed [ 332.632889][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.633840][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.633914][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.634770][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.635014][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 332.635784][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.636061][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 332.636747][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.637739][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.638703][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.598593][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.642831][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.644062][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.690999][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.703119][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.843062][ T5611] Bluetooth: hci3: command tx timeout [ 337.647163][ C0] net_ratelimit: 6186 callbacks suppressed [ 337.647186][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.649118][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.650051][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.650959][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.651659][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.652344][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.653240][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.654039][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.654821][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.655603][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.923442][ T5611] Bluetooth: hci3: command tx timeout [ 341.002912][ T5611] Bluetooth: hci3: command tx timeout [ 342.653592][ C0] net_ratelimit: 7879 callbacks suppressed [ 342.653616][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.654577][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.655512][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.656532][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.657495][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.658466][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.659332][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.660219][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.661108][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.661995][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.112974][ T5611] Bluetooth: hci3: command tx timeout [ 343.428769][ T8138] syz-executor (8138) used greatest stack depth: 16384 bytes left [ 347.663042][ C0] net_ratelimit: 7175 callbacks suppressed [ 347.663107][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.663473][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 347.664190][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.664796][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.665120][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.665367][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.666610][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.667138][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.667934][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 347.668151][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.133658][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 352.673748][ C1] net_ratelimit: 6361 callbacks suppressed [ 352.673770][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.674100][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.675809][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 352.675876][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.677040][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.677381][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.677598][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.678813][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.678850][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.680544][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.683522][ C0] net_ratelimit: 6063 callbacks suppressed [ 357.683543][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.683690][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.684175][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.684989][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.685204][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.686785][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 357.687775][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.688097][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.688276][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.689296][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.201632][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.201773][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.202069][ T8182] bridge_slave_0: entered allmulticast mode [ 358.277053][ T8182] bridge_slave_0: entered promiscuous mode [ 358.824528][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.824652][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.824971][ T8182] bridge_slave_1: entered allmulticast mode [ 358.827815][ T8182] bridge_slave_1: entered promiscuous mode [ 362.110390][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.144749][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.148797][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.160431][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.189011][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.695917][ C0] net_ratelimit: 5516 callbacks suppressed [ 362.695940][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.697542][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.698978][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.700421][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.701189][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 362.701886][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.703478][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 362.703841][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 362.704635][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.706160][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 364.131686][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.315710][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.328782][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.343102][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.353522][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.372906][ T5611] Bluetooth: hci4: command tx timeout [ 366.446442][ T5611] Bluetooth: hci4: command tx timeout [ 366.523150][ T5613] Bluetooth: hci6: command tx timeout [ 366.919937][ T8186] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 367.702899][ C0] net_ratelimit: 4903 callbacks suppressed [ 367.702922][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.704493][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.705945][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.709256][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.710831][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.712025][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.713309][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.714501][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.715712][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.716893][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.533285][ T5613] Bluetooth: hci4: command tx timeout [ 368.603323][ T5613] Bluetooth: hci6: command tx timeout [ 370.756358][ T5613] Bluetooth: hci4: command tx timeout [ 370.756396][ T5613] Bluetooth: hci6: command tx timeout [ 372.713207][ C0] net_ratelimit: 5700 callbacks suppressed [ 372.713229][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.713333][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 372.713863][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 372.714919][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.722463][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.763569][ T5611] Bluetooth: hci6: command tx timeout [ 372.782937][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 372.784017][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 372.784532][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 372.785628][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.788565][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 376.051197][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.117849][ T4915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.121584][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.122758][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.312580][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.560125][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.601308][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.610969][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.636531][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.651528][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.723616][ C1] net_ratelimit: 5943 callbacks suppressed [ 377.723638][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 377.725168][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 377.726115][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 377.726583][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 377.726706][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.727621][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.729164][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.729640][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 377.731094][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 377.731896][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 378.363065][ T5611] Bluetooth: hci0: command tx timeout [ 378.827883][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.853943][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.914648][ T5611] Bluetooth: hci5: command tx timeout [ 380.449475][ T5611] Bluetooth: hci0: command tx timeout [ 380.922950][ T5611] Bluetooth: hci5: command tx timeout [ 381.803234][ T38] INFO: task syz.9.536:7981 blocked for more than 143 seconds. [ 381.803260][ T38] Not tainted syzkaller #0 [ 381.803270][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.803279][ T38] task:syz.9.536 state:D stack:28424 pid:7981 tgid:7978 ppid:6145 task_flags:0x400040 flags:0x00080002 [ 381.803371][ T38] Call Trace: [ 381.803445][ T38] [ 381.803525][ T38] __schedule+0x16dc/0x5500 [ 381.803714][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 381.803807][ T38] ? __pfx___schedule+0x10/0x10 [ 381.803826][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 381.803894][ T38] rt_mutex_schedule+0x76/0xf0 [ 381.803992][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 381.804029][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 381.804061][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 381.804092][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 381.804122][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 381.804163][ T38] ? write_threads+0x3a0/0x5a0 [ 381.804276][ T38] ? write_threads+0x3a0/0x5a0 [ 381.804309][ T38] ? write_threads+0x3a0/0x5a0 [ 381.804335][ T38] mutex_lock_nested+0x168/0x1d0 [ 381.804370][ T38] write_threads+0x3a0/0x5a0 [ 381.804397][ T38] ? __might_fault+0xaf/0x130 [ 381.804476][ T38] ? __pfx_write_threads+0x10/0x10 [ 381.804522][ T38] ? _copy_from_user+0x94/0xb0 [ 381.804637][ T38] ? simple_transaction_get+0x130/0x170 [ 381.804700][ T38] nfsctl_transaction_write+0x112/0x160 [ 381.804731][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 381.804760][ T38] vfs_write+0x29f/0xbb0 [ 381.804850][ T38] ? __pfx_vfs_write+0x10/0x10 [ 381.804877][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.804901][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 381.804925][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 381.804949][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 381.804976][ T38] ? fdget_pos+0x252/0x320 [ 381.805054][ T38] ksys_write+0x156/0x270 [ 381.805081][ T38] ? __pfx_ksys_write+0x10/0x10 [ 381.805115][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.805163][ T38] do_syscall_64+0x174/0x580 [ 381.805214][ T38] ? trace_irq_disable+0x3b/0x140 [ 381.805280][ T38] ? clear_bhb_loop+0x40/0x90 [ 381.805305][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.805359][ T38] RIP: 0033:0x7f14e29fde99 [ 381.805385][ T38] RSP: 002b:00007f14e0c35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 381.805412][ T38] RAX: ffffffffffffffda RBX: 00007f14e2c86090 RCX: 00007f14e29fde99 [ 381.805427][ T38] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000006 [ 381.805440][ T38] RBP: 00007f14e2a93eaf R08: 0000000000000000 R09: 0000000000000000 [ 381.805453][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.805465][ T38] R13: 00007f14e2c86128 R14: 00007f14e2c86090 R15: 00007ffe8c7ea378 [ 381.805502][ T38] [ 381.805560][ T38] [ 381.805560][ T38] Showing all locks held in the system: [ 381.805602][ T38] 3 locks held by rcuc/0/20: [ 381.805642][ T38] 5 locks held by rcuc/1/28: [ 381.805654][ T38] 1 lock held by khungtaskd/38: [ 381.805664][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 381.805769][ T38] 2 locks held by kworker/u8:7/161: [ 381.805780][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.805923][ T38] #1: ffffc900039c7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.805978][ T38] 5 locks held by kworker/u8:9/1060: [ 381.806003][ T38] 3 locks held by kworker/u8:11/3272: [ 381.806015][ T38] 3 locks held by kworker/u8:17/3396: [ 381.806025][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.806073][ T38] #1: ffffc9000ec87c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.806122][ T38] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 381.806264][ T38] 2 locks held by dhcpcd/5260: [ 381.806275][ T38] #0: ffffffff8f592c38 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x7f0 [ 381.806391][ T38] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 381.806495][ T38] 2 locks held by getty/5357: [ 381.806505][ T38] #0: ffff8880366550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 381.806630][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 381.806719][ T38] 3 locks held by kworker/1:6/5734: [ 381.806731][ T38] 3 locks held by kworker/0:6/5740: [ 381.806742][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.806792][ T38] #1: ffffc90005107c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.806842][ T38] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 381.806940][ T38] 3 locks held by syz.9.536/7979: [ 381.806952][ T38] #0: ffff88803c70c128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 381.806999][ T38] #1: ffff88803b87c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 381.807054][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 381.807107][ T38] 3 locks held by syz.9.536/7981: [ 381.807118][ T38] #0: ffff888039731528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 381.807165][ T38] #1: ffff88803b87c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 381.807218][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 381.807269][ T38] 2 locks held by kworker/u8:19/8143: [ 381.807280][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.807329][ T38] #1: ffffc90004407c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.807380][ T38] 1 lock held by syz-executor/8244: [ 381.807390][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 381.807527][ T38] 2 locks held by syz-executor/8278: [ 381.807538][ T38] #0: ffffffff8f5a3240 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 381.807622][ T38] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 381.807731][ T38] 1 lock held by syz-executor/8324: [ 381.807742][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 381.807789][ T38] 1 lock held by syz-executor/8331: [ 381.807800][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 381.807846][ T38] 1 lock held by modprobe/8362: [ 381.807857][ T38] 2 locks held by modprobe/8364: [ 381.807869][ T38] [ 381.807873][ T38] ============================================= [ 381.807873][ T38] [ 381.807888][ T38] NMI backtrace for cpu 0 [ 381.807934][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.807961][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 381.807973][ T38] Call Trace: [ 381.807980][ T38] [ 381.807989][ T38] dump_stack_lvl+0xe8/0x150 [ 381.808062][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 381.808105][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.808195][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 381.808254][ T38] sys_info+0x135/0x170 [ 381.808281][ T38] watchdog+0xfd7/0x1030 [ 381.808341][ T38] ? watchdog+0x1c7/0x1030 [ 381.808365][ T38] kthread+0x388/0x470 [ 381.808419][ T38] ? __pfx_watchdog+0x10/0x10 [ 381.808434][ T38] ? __pfx_kthread+0x10/0x10 [ 381.808464][ T38] ret_from_fork+0x514/0xb70 [ 381.808563][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 381.808592][ T38] ? __switch_to+0xc89/0x1420 [ 381.808666][ T38] ? __pfx_kthread+0x10/0x10 [ 381.808697][ T38] ret_from_fork_asm+0x1a/0x30 [ 381.808755][ T38] [ 381.808768][ T38] Sending NMI from CPU 0 to CPUs 1: [ 381.808798][ C1] NMI backtrace for cpu 1 [ 381.808813][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.808833][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 381.808844][ C1] RIP: 0010:_raw_spin_lock_irqsave+0x6/0x60 [ 381.808868][ C1] Code: 5a f6 48 83 c4 08 48 89 df 5b e9 35 cf 5a f6 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 <53> 49 89 fe 9c 5b fa f7 c3 00 02 00 00 74 05 e8 06 ca 86 f6 bf 01 [ 381.808883][ C1] RSP: 0018:ffffc90000a2ee60 EFLAGS: 00000297 [ 381.808898][ C1] RAX: 0000000000000000 RBX: ffff8880b8746520 RCX: 0000000000000246 [ 381.808911][ C1] RDX: 0000000000000100 RSI: ffffffff8bca7760 RDI: ffff8880b87464d0 [ 381.808923][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000100 [ 381.808934][ C1] R10: dffffc0000000000 R11: ffffed1008168880 R12: dffffc0000000000 [ 381.808947][ C1] R13: ffff88801d2b5d00 R14: ffff8880b87464d0 R15: 1ffff110170e8ca4 [ 381.808961][ C1] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 381.808975][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.808987][ C1] CR2: 00007f076143fe9c CR3: 00000000753a4000 CR4: 00000000003526f0 [ 381.809003][ C1] Call Trace: [ 381.809009][ C1] [ 381.809016][ C1] rt_spin_trylock+0x56/0x2b0 [ 381.809034][ C1] kmem_cache_alloc_noprof+0x186/0x650 [ 381.809104][ C1] ? skb_clone+0x212/0x3a0 [ 381.809195][ C1] ? skb_clone+0x212/0x3a0 [ 381.809220][ C1] skb_clone+0x212/0x3a0 [ 381.809242][ C1] br_flood+0x3c3/0x8d0 [ 381.809313][ C1] br_handle_frame_finish+0x1175/0x1990 [ 381.809339][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 381.809359][ C1] ? ret_from_fork+0x514/0xb70 [ 381.809389][ C1] ? __lock_acquire+0x643/0x2ce0 [ 381.809435][ C1] ? nf_hook_slow+0x176/0x220 [ 381.809504][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 381.809524][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 381.809608][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 381.809630][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 381.809651][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 381.809677][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 381.809699][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 381.809723][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 381.809746][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 381.809767][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 381.809791][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 381.809813][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 381.809836][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 381.809855][ C1] br_handle_frame+0x1282/0x1520 [ 381.809880][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 381.809901][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 381.809921][ C1] ? __lock_acquire+0x683/0x2ce0 [ 381.809941][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 381.809960][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 381.809990][ C1] ? __lock_acquire+0x683/0x2ce0 [ 381.810012][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 381.810038][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 381.810065][ C1] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 381.810096][ C1] ? process_backlog+0x261/0xc50 [ 381.810113][ C1] ? process_backlog+0x261/0xc50 [ 381.810129][ C1] ? rt_spin_unlock+0x157/0x200 [ 381.810158][ C1] ? process_backlog+0x261/0xc50 [ 381.810173][ C1] process_backlog+0x351/0xc50 [ 381.810198][ C1] __napi_poll+0xae/0x550 [ 381.810224][ C1] net_rx_action+0x621/0xd70 [ 381.810246][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 381.810261][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 381.810285][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 381.810362][ C1] handle_softirqs+0x1d9/0x6c0 [ 381.810423][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 381.810443][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 381.810462][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 381.810545][ C1] rcu_cpu_kthread+0x99f/0x1480 [ 381.810647][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 381.810688][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 381.810710][ C1] ? schedule+0x90/0x2b0 [ 381.810732][ C1] smpboot_thread_fn+0x57c/0xa80 [ 381.810838][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 381.810864][ C1] kthread+0x388/0x470 [ 381.810891][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 381.810914][ C1] ? __pfx_kthread+0x10/0x10 [ 381.810939][ C1] ret_from_fork+0x514/0xb70 [ 381.810969][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 381.810995][ C1] ? __switch_to+0xc89/0x1420 [ 381.811020][ C1] ? __pfx_kthread+0x10/0x10 [ 381.811045][ C1] ret_from_fork_asm+0x1a/0x30 [ 381.811078][ C1] [ 381.811813][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 381.811833][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.811856][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 381.811868][ T38] Call Trace: [ 381.811877][ T38] [ 381.811885][ T38] vpanic+0x56c/0xa60 [ 381.811912][ T38] ? __pfx_vpanic+0x10/0x10 [ 381.811941][ T38] panic+0xc5/0xd0 [ 381.811960][ T38] ? __pfx_panic+0x10/0x10 [ 381.811984][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 381.812009][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 381.812047][ T38] watchdog+0x1030/0x1030 [ 381.812073][ T38] ? watchdog+0x1c7/0x1030 [ 381.812097][ T38] kthread+0x388/0x470 [ 381.812127][ T38] ? __pfx_watchdog+0x10/0x10 [ 381.812143][ T38] ? __pfx_kthread+0x10/0x10 [ 381.812174][ T38] ret_from_fork+0x514/0xb70 [ 381.812206][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 381.812235][ T38] ? __switch_to+0xc89/0x1420 [ 381.812264][ T38] ? __pfx_kthread+0x10/0x10 [ 381.812294][ T38] ret_from_fork_asm+0x1a/0x30 [ 381.812328][ T38] [ 381.812671][ T38] Kernel Offset: disabled