last executing test programs: 3.625483289s ago: executing program 4 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='3\n', 0x2) write(r1, &(0x7f0000000200)='4\n', 0x2) write(r1, &(0x7f0000000240)='5\n', 0x2) write(r1, &(0x7f0000000280)='6\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='-2 -3\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1\n', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x801, @loopback}, 0x10) 2.960915905s ago: executing program 1 (id=101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x15c, 0x10, 0x5, 0x1, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x1234, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x0, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x0, 0x4, {0x1, 0x1194, 0x1194, @in=@empty}}, @XFRMA_IF_ID={0x0, 0x22, 0x1}]}, 0x15c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.564214347s ago: executing program 1 (id=107): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ed) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) 2.419017486s ago: executing program 0 (id=109): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) write(r1, &(0x7f0000000100)='hello', 0x5) write(r2, &(0x7f0000000140)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @empty, @empty, {[], {{0x4e23, 0x4e22, 0x1, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 2.233975989s ago: executing program 0 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca2000002800000001010000010100000200"/50, 0x32) write(r0, &(0x7f0000000600)="ffffffffffff00000000000188ca2000002800000002010000010100000200"/50, 0x32) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x3e8, 0x1}}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='hello world', 0xb}], 0x1}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x989680}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff00000000000188ca200000280000000001000001010000020000000000000000000000000000000100010000", 0x32) 2.084286454s ago: executing program 2 (id=113): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @rand_addr=0xa000001}}) ioctl$sock_ifreq(r0, 0x8914, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r3, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @rand_addr=0xa000001}, 0x10) listen(0xffffffffffffffff, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e21, @rand_addr=0xa000001}, 0x10) r5 = accept(0xffffffffffffffff, 0x0, 0x0) recvmsg(r5, &(0x7f00000002c0), 0x0) 1.970720534s ago: executing program 3 (id=114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000100001000000000000000000"], 0x10}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 1.912552733s ago: executing program 1 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='3\n', 0x2) close(r4) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2, "0000000104000001e000000101020304"}}}}}, 0x0) 1.843915789s ago: executing program 2 (id=116): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x257, @loopback}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000020)={0x2, 0x257, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000200)='\x00\x00\x00\x00', &(0x7f0000000240)=@udp=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18120000000000000000000000000000b703000000000000b70400000000000085000000340000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x20) sendto(r1, &(0x7f0000000700)='hello', 0x5, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/8, 0x8}], 0x1}, 0x0) 1.764466602s ago: executing program 0 (id=117): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='vers\x00', &(0x7f0000000100)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='port\x00', &(0x7f0000000180)='0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountport\x00', &(0x7f0000000200)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.710771566s ago: executing program 4 (id=118): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000)="726177000000000000000000000000000000000000000000000000000000000500000003000000b800000000000000ffffffffffffffff0000000068000000ffffffff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b800000000000000000000000000000000004800200043540000000000000000000000000000000000000000000000000000000066747000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048005000000000000000000000000000000000002800"/369, 0x118) 1.663359561s ago: executing program 3 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x74, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x74}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x2f, 0x40, @remote, @local, {[], "00086558000000000011223344556677"}}}}}, 0x0) 1.572630157s ago: executing program 5 (id=120): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1', 0x1) bind(r0, &(0x7f0000000a00)=@in={0x2, 0x4e23, @loopback}, 0x10) listen(r0, 0x5) r2 = socket(0x2, 0x3, 0x84) sendto$inet(r2, &(0x7f0000000b00)="10e24e2300000000a301bd9b010000380102030400010000000a000a00000000800200240102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20", 0x44, 0x0, &(0x7f0000000c00)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000f00)=""/1, 0x100}], 0x1}, 0x40) 1.557389062s ago: executing program 2 (id=121): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="13881388000000001234567806000004", 0x10}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) 1.49383368s ago: executing program 0 (id=122): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='hello', 0x5}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) recvmsg(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001000), 0x100}], 0x1}, 0x40) nanosleep(&(0x7f0000001100)={0x0, 0x5f5e100}, 0x0) close(r0) nanosleep(&(0x7f0000001200)={0x3}, 0x0) 1.334464244s ago: executing program 3 (id=123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) bind(r1, &(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xc0, 0xa8, 0x1, 0x1}}, 0x10) listen(r1, 0x5) write(r0, &(0x7f0000000300)="00000800450000540000400040840000c0a80102c0a8010110e24e230000000000000000010000380102030400010000000a000a00000000800200240102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20", 0x58) 1.294994168s ago: executing program 4 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 1.252990226s ago: executing program 1 (id=125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000400)="00010203040506070809", 0xa, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.252635368s ago: executing program 2 (id=126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newsa={0x104, 0x10, 0x601, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x3c}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0x9, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x104}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@dstopts={0x11, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x18) sendto$inet6(r1, &(0x7f0000000300)="1122334455667788", 0x8, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) 1.136306029s ago: executing program 5 (id=127): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 1.006336282s ago: executing program 5 (id=128): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @rand_addr=0xa000001}}) ioctl$sock_ifreq(r0, 0x8914, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r3, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @rand_addr=0xa000001}, 0x10) listen(0xffffffffffffffff, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e21, @rand_addr=0xa000001}, 0x10) r5 = accept(0xffffffffffffffff, 0x0, 0x0) recvmsg(r5, &(0x7f00000002c0), 0x0) 993.308338ms ago: executing program 1 (id=129): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000080)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='clientaddr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 964.618676ms ago: executing program 4 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e}]}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000c1800020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 909.225455ms ago: executing program 2 (id=131): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x1) 801.573124ms ago: executing program 3 (id=132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000002900010000000000000000000a01010100000000000000000000000012340000020032000a0101030000000000000000000000000a01010400000000000000000000000000000000000000000a0101010000000000000000000000000a010102000000000000000000000000000000000000000002002020320000000000000000000000000000000200000002000000"], 0x94}}, 0x0) 727.746812ms ago: executing program 5 (id=133): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x18) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcdef"}, {0x10, 0x110, 0x3}], 0x28}, 0x0) 588.198504ms ago: executing program 2 (id=134): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) accept(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x7, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000340)="01000000", &(0x7f0000000380)=@tcp=r2}, 0x20) write(r2, &(0x7f0000000700)='hello world\x00', 0xc) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) 587.993041ms ago: executing program 1 (id=135): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg$sock(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='bye', 0x3}], 0x1}, 0x0) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 550.396939ms ago: executing program 5 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/rxrpc/idle_conn_expiry\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n\x00', 0x2) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000240)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x1c) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r1) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 524.077394ms ago: executing program 4 (id=137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}]}]}], {0x14, 0xb, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x114}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0xb, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x54}}, 0x0) 468.931571ms ago: executing program 3 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x200}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendto(r3, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000003000)='\x00', 0x2710, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000800), 0x4) 413.028127ms ago: executing program 0 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='3\n', 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2, "0000000104000001e000000101020304"}}}}}, 0x0) 247.207587ms ago: executing program 4 (id=140): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0102030405060708"}, {0x10, 0x110, 0x3}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000350)='hello_rxrpc', 0xb}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0102030405060708"}], 0x18}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/100, 0x64}], 0x1, &(0x7f0000000b00)=""/100, 0x64}, 0x0) 121.130733ms ago: executing program 3 (id=141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000800)=""/100, 0x64) write(r2, &(0x7f0000000900)='ceph v2\n\x00'/28, 0x1c) shutdown(r2, 0x2) close(r2) close(r0) nanosleep(&(0x7f0000000a00)={0x2}, 0x0) 76.615626ms ago: executing program 0 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x32, 0x0, 0x0) 0s ago: executing program 5 (id=143): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x1}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x2}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x3}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x4}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x5}], 0x28}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 91.232202][ T188] cfg80211: failed to load regulatory.db [ 92.783492][ T5606] cgroup: Unknown subsys name 'net' [ 92.901863][ T5606] cgroup: Unknown subsys name 'cpuset' [ 92.912732][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.752221][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.460862][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.473081][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.487368][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.495514][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.507193][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.516589][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.524011][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.529272][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.531955][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.539570][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.555810][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.555964][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.563788][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.570469][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.577530][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.585981][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.600255][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.601368][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.607879][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.615244][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.621961][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.630473][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.640651][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.644969][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.649953][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.664323][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.667907][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.675908][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.680464][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.686224][ T4936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.716562][ T5637] Bluetooth: hci2: command tx timeout [ 99.724131][ T4936] Bluetooth: hci4: command tx timeout [ 99.788919][ T5637] Bluetooth: hci0: command tx timeout [ 99.795303][ T5631] Bluetooth: hci5: command tx timeout [ 99.795461][ T51] Bluetooth: hci1: command tx timeout [ 99.804958][ T4936] Bluetooth: hci3: command tx timeout [ 100.321359][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.328762][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.336216][ T5630] bridge_slave_0: entered allmulticast mode [ 100.344236][ T5630] bridge_slave_0: entered promiscuous mode [ 100.370139][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.377832][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.385368][ T5628] bridge_slave_0: entered allmulticast mode [ 100.393878][ T5628] bridge_slave_0: entered promiscuous mode [ 100.409598][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.416946][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.424170][ T5625] bridge_slave_0: entered allmulticast mode [ 100.432105][ T5625] bridge_slave_0: entered promiscuous mode [ 100.442216][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.449596][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.457811][ T5630] bridge_slave_1: entered allmulticast mode [ 100.465440][ T5630] bridge_slave_1: entered promiscuous mode [ 100.491570][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.498856][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.506144][ T5628] bridge_slave_1: entered allmulticast mode [ 100.514154][ T5628] bridge_slave_1: entered promiscuous mode [ 100.534775][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.542015][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.549440][ T5625] bridge_slave_1: entered allmulticast mode [ 100.557236][ T5625] bridge_slave_1: entered promiscuous mode [ 100.687032][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.694325][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.701693][ T5627] bridge_slave_0: entered allmulticast mode [ 100.709420][ T5627] bridge_slave_0: entered promiscuous mode [ 100.755336][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.772657][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.779964][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.788646][ T5627] bridge_slave_1: entered allmulticast mode [ 100.796429][ T5627] bridge_slave_1: entered promiscuous mode [ 100.806676][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.826119][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.840275][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.878243][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.923657][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.991117][ T5628] team0: Port device team_slave_0 added [ 101.039070][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.046402][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.054014][ T5626] bridge_slave_0: entered allmulticast mode [ 101.062257][ T5626] bridge_slave_0: entered promiscuous mode [ 101.073093][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.084703][ T5628] team0: Port device team_slave_1 added [ 101.090762][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.098196][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.105374][ T5629] bridge_slave_0: entered allmulticast mode [ 101.113355][ T5629] bridge_slave_0: entered promiscuous mode [ 101.136174][ T5630] team0: Port device team_slave_0 added [ 101.142743][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.150841][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.158159][ T5626] bridge_slave_1: entered allmulticast mode [ 101.165811][ T5626] bridge_slave_1: entered promiscuous mode [ 101.176661][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.198882][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.206071][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.213449][ T5629] bridge_slave_1: entered allmulticast mode [ 101.221138][ T5629] bridge_slave_1: entered promiscuous mode [ 101.230966][ T5625] team0: Port device team_slave_0 added [ 101.239282][ T5630] team0: Port device team_slave_1 added [ 101.313616][ T5625] team0: Port device team_slave_1 added [ 101.359734][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.366903][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.393042][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.433253][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.440498][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.467563][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.482441][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.494334][ T5627] team0: Port device team_slave_0 added [ 101.501114][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.508154][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.534410][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.548793][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.571382][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.578504][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.604646][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.618655][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.630643][ T5627] team0: Port device team_slave_1 added [ 101.648501][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.658348][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.665368][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.691353][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.773745][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.780934][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.786621][ T4936] Bluetooth: hci4: command tx timeout [ 101.807273][ T51] Bluetooth: hci2: command tx timeout [ 101.813390][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.845877][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.852936][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.878998][ T51] Bluetooth: hci3: command tx timeout [ 101.879044][ T51] Bluetooth: hci5: command tx timeout [ 101.879317][ T51] Bluetooth: hci0: command tx timeout [ 101.886690][ T4936] Bluetooth: hci1: command tx timeout [ 101.890156][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.942437][ T5626] team0: Port device team_slave_0 added [ 101.949353][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.957703][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.983727][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.997734][ T5629] team0: Port device team_slave_0 added [ 102.047798][ T5626] team0: Port device team_slave_1 added [ 102.065501][ T5629] team0: Port device team_slave_1 added [ 102.090943][ T5630] hsr_slave_0: entered promiscuous mode [ 102.098123][ T5630] hsr_slave_1: entered promiscuous mode [ 102.111670][ T5628] hsr_slave_0: entered promiscuous mode [ 102.118419][ T5628] hsr_slave_1: entered promiscuous mode [ 102.124744][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 102.131071][ T5628] Cannot create hsr debugfs directory [ 102.197742][ T5625] hsr_slave_0: entered promiscuous mode [ 102.204381][ T5625] hsr_slave_1: entered promiscuous mode [ 102.211037][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 102.216803][ T5625] Cannot create hsr debugfs directory [ 102.227323][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.234334][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.260662][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.337473][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.344516][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.370596][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.383634][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.390707][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.416975][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.458149][ T5627] hsr_slave_0: entered promiscuous mode [ 102.464689][ T5627] hsr_slave_1: entered promiscuous mode [ 102.471115][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 102.477027][ T5627] Cannot create hsr debugfs directory [ 102.501678][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.508890][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.534991][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.745448][ T5626] hsr_slave_0: entered promiscuous mode [ 102.752334][ T5626] hsr_slave_1: entered promiscuous mode [ 102.759208][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 102.764942][ T5626] Cannot create hsr debugfs directory [ 102.883382][ T5629] hsr_slave_0: entered promiscuous mode [ 102.890032][ T5629] hsr_slave_1: entered promiscuous mode [ 102.896315][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 102.902326][ T5629] Cannot create hsr debugfs directory [ 103.435927][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.449632][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.459137][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.471711][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.480591][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.491311][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.500680][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.511703][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.598939][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.609815][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.624743][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.637894][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.651419][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.663084][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.672673][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.682516][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.768545][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.783497][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.803835][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.814326][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.825788][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.839347][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.864213][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.871024][ T4936] Bluetooth: hci4: command tx timeout [ 103.876747][ T4936] Bluetooth: hci2: command tx timeout [ 103.885705][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.957993][ T4936] Bluetooth: hci1: command tx timeout [ 103.963486][ T51] Bluetooth: hci0: command tx timeout [ 103.964441][ T5637] Bluetooth: hci3: command tx timeout [ 103.974492][ T5631] Bluetooth: hci5: command tx timeout [ 103.986063][ T5627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.997991][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.018848][ T5627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.030013][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.039214][ T5627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.050512][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.070929][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.079348][ T5627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.094022][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.242306][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.258334][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.269884][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.277914][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.288668][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.297504][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.310420][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.330963][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.341569][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.368202][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.375438][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.446938][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.454122][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.498005][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.519002][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.531462][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.540015][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.551605][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.576685][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.588754][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.612159][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.622312][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.680501][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.709040][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.762237][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.769432][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.798792][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.805971][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.851970][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.864500][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.906386][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.913604][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.950414][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.957692][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.033734][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.072642][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.079899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.137900][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.145107][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.180715][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.301724][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.366222][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.373470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.404126][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.444301][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.451665][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.606120][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.679404][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.686729][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.758521][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.765710][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.956529][ T5631] Bluetooth: hci2: command tx timeout [ 105.962045][ T5637] Bluetooth: hci4: command tx timeout [ 106.030310][ T5637] Bluetooth: hci0: command tx timeout [ 106.035806][ T5631] Bluetooth: hci1: command tx timeout [ 106.035841][ T51] Bluetooth: hci5: command tx timeout [ 106.044075][ T5637] Bluetooth: hci3: command tx timeout [ 106.265850][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.644141][ T5628] veth0_vlan: entered promiscuous mode [ 106.745397][ T5628] veth1_vlan: entered promiscuous mode [ 106.832072][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.961974][ T5628] veth0_macvtap: entered promiscuous mode [ 107.000049][ T5628] veth1_macvtap: entered promiscuous mode [ 107.127496][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.175361][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.205903][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.244185][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.292171][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.319958][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.353451][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.380816][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.672089][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.841336][ T5630] veth0_vlan: entered promiscuous mode [ 107.921114][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.938717][ T5630] veth1_vlan: entered promiscuous mode [ 107.959632][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.992038][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.070082][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.078587][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.097756][ T5626] veth0_vlan: entered promiscuous mode [ 108.178889][ T5626] veth1_vlan: entered promiscuous mode [ 108.207828][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.209426][ T5625] veth0_vlan: entered promiscuous mode [ 108.252238][ T5630] veth0_macvtap: entered promiscuous mode [ 108.272994][ T5629] veth0_vlan: entered promiscuous mode [ 108.330328][ T5630] veth1_macvtap: entered promiscuous mode [ 108.364449][ T5625] veth1_vlan: entered promiscuous mode [ 108.379575][ T5629] veth1_vlan: entered promiscuous mode [ 108.395796][ T5627] veth0_vlan: entered promiscuous mode [ 108.432497][ T5627] veth1_vlan: entered promiscuous mode [ 108.458348][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.483858][ T5626] veth0_macvtap: entered promiscuous mode [ 108.514055][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.529560][ T5626] veth1_macvtap: entered promiscuous mode [ 108.541212][ T5625] veth0_macvtap: entered promiscuous mode [ 108.569552][ T5625] veth1_macvtap: entered promiscuous mode [ 108.593567][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.602583][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.624453][ T5629] veth0_macvtap: entered promiscuous mode [ 108.633705][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.643170][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.664999][ T5627] veth0_macvtap: entered promiscuous mode [ 108.683607][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.703148][ T5627] veth1_macvtap: entered promiscuous mode [ 108.717330][ T5629] veth1_macvtap: entered promiscuous mode [ 108.740860][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.760544][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.809506][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.817718][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.827258][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.849689][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.858705][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.882521][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.920196][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.938750][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.961837][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.971027][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.000080][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.008975][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.036641][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.049654][ T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.058498][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.077877][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.084443][ T1040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.090834][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.107391][ T1040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.141801][ T1040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.155968][ T1040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.183420][ T1040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.196027][ T1040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.284948][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.297087][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.483138][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.504728][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.551296][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.581678][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.622741][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.647700][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.748457][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.779120][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.883598][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.914586][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.018379][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.059510][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.100720][ T5785] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.163830][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.198740][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.317193][ T5785] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.365787][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.395607][ T5785] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.411347][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.460381][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.518571][ T5785] usb 1-1: SerialNumber: syz [ 110.640550][ T5870] NFSD: Failed to start, no listeners configured. [ 111.345198][ T5785] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 111.367685][ T5785] usb 1-1: USB disconnect, device number 2 [ 111.545194][ T5895] tipc: Started in network mode [ 111.550875][ T5895] tipc: Node identity 5e47b41924e2, cluster identity 4711 [ 111.558365][ T5895] tipc: Enabled bearer , priority 0 [ 111.683176][ T5894] tipc: Disabling bearer [ 111.817754][ T5897] lo speed is unknown, defaulting to 1000 [ 111.827914][ T5897] lo speed is unknown, defaulting to 1000 [ 111.835417][ T5897] lo speed is unknown, defaulting to 1000 [ 111.937400][ T5899] smc: net device lo applied user defined pnetid SYZ0 [ 112.095027][ T78] FAULT_INJECTION: forcing a failure. [ 112.095027][ T78] name failslab, interval 1, probability 100, space 0, times 1 [ 112.095624][ T5904] FAULT_INJECTION: forcing a failure. [ 112.095624][ T5904] name failslab, interval 1, probability 100, space 0, times 1 [ 112.108304][ T78] CPU: 0 UID: 0 PID: 78 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 112.108351][ T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.108379][ T78] Workqueue: ipv6_addrconf addrconf_dad_work [ 112.108428][ T78] Call Trace: [ 112.108439][ T78] [ 112.108452][ T78] dump_stack_lvl+0x100/0x190 [ 112.108498][ T78] should_fail_ex.cold+0x5/0xa [ 112.108512][ C1] FAULT_INJECTION: forcing a failure. [ 112.108512][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 112.108541][ T78] should_failslab+0xc2/0x120 [ 112.108581][ T78] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 112.108650][ T78] ? __alloc_skb+0x140/0x710 [ 112.108702][ T78] __alloc_skb+0x140/0x710 [ 112.108744][ T78] ? __alloc_skb+0x5b7/0x710 [ 112.108786][ T78] ? __pfx___alloc_skb+0x10/0x10 [ 112.108833][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.108882][ T78] __neigh_notify+0xe6/0x350 [ 112.108938][ T78] neigh_cleanup_and_release+0x97/0x2d0 [ 112.108993][ T78] neigh_remove_one+0x1fb/0x280 [ 112.109028][ T78] ___neigh_create+0x1b71/0x2940 [ 112.109088][ T78] ? __pfx____neigh_create+0x10/0x10 [ 112.109121][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.109163][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.109209][ T78] ip6_finish_output2+0xffa/0x1ce0 [ 112.109271][ T78] __ip6_finish_output+0x357/0xdf0 [ 112.109325][ T78] ip6_output+0x2aa/0xa60 [ 112.109372][ T78] ? __pfx_ip6_output+0x10/0x10 [ 112.109423][ T78] ? __pfx_ip6_finish_output+0x10/0x10 [ 112.109469][ T78] ? ndisc_send_skb+0xbba/0x1bf0 [ 112.109517][ T78] ? ndisc_send_skb+0xbba/0x1bf0 [ 112.109562][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.109609][ T78] ? __pfx_ip6_output+0x10/0x10 [ 112.109653][ T78] ndisc_send_skb+0xa85/0x1bf0 [ 112.109709][ T78] ? __pfx_ndisc_send_skb+0x10/0x10 [ 112.109763][ T78] ? __pfx_dst_output+0x10/0x10 [ 112.109809][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.109864][ T78] ? ndisc_alloc_skb+0x319/0x530 [ 112.109910][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.109952][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.109993][ T78] ? __asan_memcpy+0x3c/0x60 [ 112.110048][ T78] ndisc_send_rs+0x129/0x680 [ 112.110110][ T78] addrconf_dad_completed+0x47f/0xff0 [ 112.110164][ T78] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 112.110213][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.110263][ T78] ? addrconf_dad_work+0x83c/0x1360 [ 112.110304][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.110344][ T78] addrconf_dad_work+0x83c/0x1360 [ 112.110394][ T78] ? __pfx_addrconf_dad_work+0x10/0x10 [ 112.110439][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.110484][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.110524][ T78] ? rcu_is_watching+0x12/0xc0 [ 112.110581][ T78] process_one_work+0xa23/0x1940 [ 112.110635][ T78] ? __pfx_process_one_work+0x10/0x10 [ 112.110666][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.110720][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.110768][ T78] worker_thread+0x5ef/0xe50 [ 112.110817][ T78] ? kthread+0x13a/0x450 [ 112.110868][ T78] ? __pfx_worker_thread+0x10/0x10 [ 112.110899][ T78] kthread+0x370/0x450 [ 112.110951][ T78] ? __pfx_kthread+0x10/0x10 [ 112.111007][ T78] ret_from_fork+0x72b/0xd50 [ 112.111055][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 112.111108][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.111148][ T78] ? __switch_to+0x800/0x10f0 [ 112.111202][ T78] ? __switch_to_asm+0x39/0x70 [ 112.111249][ T78] ? __pfx_kthread+0x10/0x10 [ 112.111305][ T78] ret_from_fork_asm+0x1a/0x30 [ 112.111378][ T78] [ 112.111395][ C1] CPU: 1 UID: 0 PID: 5904 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 112.111438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.111459][ C1] Call Trace: [ 112.111470][ C1] [ 112.111482][ C1] dump_stack_lvl+0x100/0x190 [ 112.111526][ C1] should_fail_ex.cold+0x5/0xa [ 112.111570][ C1] should_failslab+0xc2/0x120 [ 112.111621][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 112.111691][ C1] ? __alloc_skb+0x140/0x710 [ 112.111752][ C1] __alloc_skb+0x140/0x710 [ 112.111802][ C1] ? __alloc_skb+0x5b7/0x710 [ 112.111854][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 112.111908][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.111958][ C1] ? __lock_acquire+0x49f/0x1a40 [ 112.112004][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.112062][ C1] __netdev_alloc_skb+0x7a/0x960 [ 112.112123][ C1] hsr_init_skb+0x122/0x670 [ 112.112198][ C1] send_hsr_supervision_frame+0x138/0xbc0 [ 112.112271][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 112.112336][ C1] hsr_announce+0x169/0x3e0 [ 112.112399][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 112.112460][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.112519][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 112.112579][ C1] call_timer_fn+0x19a/0x610 [ 112.112628][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 112.112661][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.112711][ C1] ? __run_timers+0x747/0xb00 [ 112.112752][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.112798][ C1] ? rcu_is_watching+0x12/0xc0 [ 112.112858][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 112.112915][ C1] __run_timers+0x757/0xb00 [ 112.112969][ C1] ? __pfx___run_timers+0x10/0x10 [ 112.113016][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.113071][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.113117][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 112.113162][ C1] run_timer_base+0x114/0x190 [ 112.113201][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 112.113241][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.113295][ C1] run_timer_softirq+0x1a/0x50 [ 112.113335][ C1] handle_softirqs+0x1ea/0x9b0 [ 112.113390][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 112.113437][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.113481][ C1] ? _raw_spin_unlock+0x28/0x50 [ 112.113519][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.113565][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 112.113638][ C1] __irq_exit_rcu+0x162/0x210 [ 112.113685][ C1] irq_exit_rcu+0x9/0x30 [ 112.113729][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 112.113775][ C1] [ 112.113787][ C1] [ 112.113801][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.113844][ C1] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 112.113904][ C1] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 18 ae 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 a6 a8 21 00 48 85 ed 0f 85 27 01 00 00 f8 ad 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 112.113941][ C1] RSP: 0018:ffffc9000462f280 EFLAGS: 00000283 [ 112.113970][ C1] RAX: 000000000004a2b5 RBX: 0000000000000060 RCX: ffffc90005cc9000 [ 112.113994][ C1] RDX: 0000000000080000 RSI: ffffffff81e89244 RDI: ffff88802870be00 [ 112.114020][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 112.114043][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920008c5e52 [ 112.114066][ C1] R13: 0000000000000200 R14: ffff88801eba9f00 R15: ffffc9000462f348 [ 112.114105][ C1] ? vprintk_emit+0x674/0x6b0 [ 112.114171][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 112.114242][ C1] _printk+0xcf/0x110 [ 112.114279][ C1] ? __pfx__printk+0x10/0x10 [ 112.114314][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.114371][ C1] ? __pfx____ratelimit+0x10/0x10 [ 112.114434][ C1] should_fail_ex+0x4e4/0x640 [ 112.114492][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.114545][ C1] should_failslab+0xc2/0x120 [ 112.114589][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 112.114652][ C1] ? __alloc_skb+0x5b7/0x710 [ 112.114700][ C1] ? __alloc_skb+0x140/0x710 [ 112.114757][ C1] __alloc_skb+0x140/0x710 [ 112.114803][ C1] ? __alloc_skb+0x5b7/0x710 [ 112.114851][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 112.114903][ C1] ? __pfx_widen_string+0x10/0x10 [ 112.114947][ C1] alloc_skb_with_frags+0xdd/0x760 [ 112.115005][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.115052][ C1] ? widen_string+0xdb/0x2f0 [ 112.115087][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.115135][ C1] ? __pfx_widen_string+0x10/0x10 [ 112.115176][ C1] sock_alloc_send_pskb+0x801/0x980 [ 112.115231][ C1] ? format_decode+0x1ad/0xdd0 [ 112.115272][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 112.115319][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.115366][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.115412][ C1] ? put_dec_trunc8+0x28b/0x370 [ 112.115472][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.115523][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.115569][ C1] ? __lock_acquire+0x49f/0x1a40 [ 112.115625][ C1] __ip_append_data+0x20d3/0x44d0 [ 112.115681][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 112.115724][ C1] ? find_held_lock+0x2b/0x80 [ 112.115794][ C1] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 112.115854][ C1] ? __pfx___ip_append_data+0x10/0x10 [ 112.115897][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.115945][ C1] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 112.116016][ C1] ip_make_skb+0x28b/0x310 [ 112.116069][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 112.116119][ C1] ? __pfx_ip_make_skb+0x10/0x10 [ 112.116166][ C1] ? ip_route_output_key_hash+0x14c/0x2b0 [ 112.116252][ C1] ? udp_sendmsg+0x171c/0x2720 [ 112.116295][ C1] udp_sendmsg+0x171c/0x2720 [ 112.116356][ C1] ? __pfx_udp_sendmsg+0x10/0x10 [ 112.116404][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.116458][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.116507][ C1] ? __pfx___might_resched+0x10/0x10 [ 112.116559][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.116614][ C1] ? aa_sk_perm+0x309/0xaa0 [ 112.116671][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 112.116734][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.116780][ C1] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 112.116822][ C1] ? __pfx_udp_sendmsg+0x10/0x10 [ 112.116868][ C1] inet_sendmsg+0x105/0x140 [ 112.116924][ C1] __sys_sendto+0x453/0x4e0 [ 112.116971][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 112.117027][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 112.117088][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.117177][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.117225][ C1] ? xfd_validate_state+0x129/0x190 [ 112.117284][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 112.117332][ C1] ? do_syscall_64+0x90/0x870 [ 112.117378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.117424][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 112.117472][ C1] do_syscall_64+0x115/0x870 [ 112.117525][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.117564][ C1] RIP: 0033:0x7f603b39de99 [ 112.117600][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.117636][ C1] RSP: 002b:00007f603c2fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 112.117671][ C1] RAX: ffffffffffffffda RBX: 00007f603b625fa0 RCX: 00007f603b39de99 [ 112.117696][ C1] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 112.117721][ C1] RBP: 00007f603b433eaf R08: 0000200000000300 R09: 0000000000000010 [ 112.117745][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.117768][ C1] R13: 00007f603b626038 R14: 00007f603b625fa0 R15: 00007ffcb21892e8 [ 112.117817][ C1] [ 112.117884][ C1] hsr0: HSR: Could not send supervision frame [ 112.312260][ T5883] NFSD: Unable to initialize client recovery tracking! (-110) [ 112.317577][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 112.317622][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.317644][ T5904] Call Trace: [ 112.317655][ T5904] [ 112.317669][ T5904] dump_stack_lvl+0x100/0x190 [ 112.317717][ T5904] should_fail_ex.cold+0x5/0xa [ 112.317752][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.317803][ T5904] should_failslab+0xc2/0x120 [ 112.317842][ T5904] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 112.317902][ T5904] ? __alloc_skb+0x5b7/0x710 [ 112.317948][ T5904] ? __alloc_skb+0x140/0x710 [ 112.318001][ T5904] __alloc_skb+0x140/0x710 [ 112.318045][ T5904] ? __alloc_skb+0x5b7/0x710 [ 112.318099][ T5904] ? __pfx___alloc_skb+0x10/0x10 [ 112.318149][ T5904] ? __pfx_widen_string+0x10/0x10 [ 112.318192][ T5904] alloc_skb_with_frags+0xdd/0x760 [ 112.318244][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.318288][ T5904] ? widen_string+0xdb/0x2f0 [ 112.318320][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.318366][ T5904] ? __pfx_widen_string+0x10/0x10 [ 112.318405][ T5904] sock_alloc_send_pskb+0x801/0x980 [ 112.318457][ T5904] ? format_decode+0x1ad/0xdd0 [ 112.318497][ T5904] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 112.318542][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.318585][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.318628][ T5904] ? put_dec_trunc8+0x28b/0x370 [ 112.318685][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.318734][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.318777][ T5904] ? __lock_acquire+0x49f/0x1a40 [ 112.318826][ T5904] __ip_append_data+0x20d3/0x44d0 [ 112.318881][ T5904] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 112.318922][ T5904] ? find_held_lock+0x2b/0x80 [ 112.318988][ T5904] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 112.319045][ T5904] ? __pfx___ip_append_data+0x10/0x10 [ 112.319089][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.319135][ T5904] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 112.319203][ T5904] ip_make_skb+0x28b/0x310 [ 112.319253][ T5904] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 112.319300][ T5904] ? __pfx_ip_make_skb+0x10/0x10 [ 112.319343][ T5904] ? ip_route_output_key_hash+0x14c/0x2b0 [ 112.319426][ T5904] ? udp_sendmsg+0x171c/0x2720 [ 112.319470][ T5904] udp_sendmsg+0x171c/0x2720 [ 112.319530][ T5904] ? __pfx_udp_sendmsg+0x10/0x10 [ 112.319573][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.319623][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.319670][ T5904] ? __pfx___might_resched+0x10/0x10 [ 112.319721][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.319765][ T5904] ? aa_sk_perm+0x309/0xaa0 [ 112.319818][ T5904] ? __pfx_aa_sk_perm+0x10/0x10 [ 112.319878][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.319921][ T5904] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 112.319962][ T5904] ? __pfx_udp_sendmsg+0x10/0x10 [ 112.320006][ T5904] inet_sendmsg+0x105/0x140 [ 112.320060][ T5904] __sys_sendto+0x453/0x4e0 [ 112.320111][ T5904] ? __pfx_inet_sendmsg+0x10/0x10 [ 112.320163][ T5904] ? __pfx___sys_sendto+0x10/0x10 [ 112.320222][ T5904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.320288][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.320331][ T5904] ? xfd_validate_state+0x129/0x190 [ 112.320423][ T5904] __x64_sys_sendto+0xe0/0x1c0 [ 112.320477][ T5904] ? do_syscall_64+0x90/0x870 [ 112.320524][ T5904] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.320568][ T5904] ? lockdep_hardirqs_on+0x78/0x100 [ 112.320612][ T5904] do_syscall_64+0x115/0x870 [ 112.320663][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.320701][ T5904] RIP: 0033:0x7f603b39de99 [ 112.320731][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.320764][ T5904] RSP: 002b:00007f603c2fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 112.320798][ T5904] RAX: ffffffffffffffda RBX: 00007f603b625fa0 RCX: 00007f603b39de99 [ 112.320822][ T5904] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 112.320844][ T5904] RBP: 00007f603b433eaf R08: 0000200000000300 R09: 0000000000000010 [ 112.320867][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.320889][ T5904] R13: 00007f603b626038 R14: 00007f603b625fa0 R15: 00007ffcb21892e8 [ 112.320936][ T5904] [ 112.907295][ T5785] lo speed is unknown, defaulting to 1000 [ 112.933751][ T5883] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 112.945573][ T5897] infiniband syz0: set active [ 112.968841][ T5883] NFSD: starting 90-second grace period (net f00004e3) [ 113.097388][ T5897] infiniband syz0: added lo [ 113.159616][ T5906] netlink: 'syz.2.18': attribute type 37 has an invalid length. [ 113.194331][ T5897] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 113.831095][ T5897] infiniband syz0: Couldn't open port 1 [ 113.852268][ T5897] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 113.882266][ T5897] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 113.904933][ T5897] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 113.941135][ T5910] loop0: detected capacity change from 0 to 64 [ 113.973141][ T5897] RDS/IB: syz0: added [ 113.984937][ T5897] smc: adding ib device syz0 with port count 1 [ 114.004527][ T5897] smc: ib device syz0 port 1 has no pnetid [ 114.025415][ T29] lo speed is unknown, defaulting to 1000 [ 114.052788][ T5897] lo speed is unknown, defaulting to 1000 [ 114.350327][ T5897] lo speed is unknown, defaulting to 1000 [ 114.565693][ T5897] lo speed is unknown, defaulting to 1000 [ 114.826223][ T5897] lo speed is unknown, defaulting to 1000 [ 115.061867][ T5897] lo speed is unknown, defaulting to 1000 [ 115.275326][ T5897] lo speed is unknown, defaulting to 1000 [ 116.506063][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 116.518549][ T5925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23'. [ 120.886517][ T5919] NFSD: Unable to initialize client recovery tracking! (-110) [ 120.894006][ T5919] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 120.902996][ T5919] NFSD: starting 90-second grace period (net f00005b3) [ 121.236006][ T5943] bridge0: port 3(dummy0) entered blocking state [ 121.246245][ T5943] bridge0: port 3(dummy0) entered disabled state [ 121.258614][ T5943] dummy0: entered allmulticast mode [ 121.270534][ T5943] dummy0: entered promiscuous mode [ 121.278057][ T5943] bridge0: port 3(dummy0) entered blocking state [ 121.285487][ T5943] bridge0: port 3(dummy0) entered forwarding state [ 121.591046][ T5950] Zero length message leads to an empty skb [ 121.679380][ T5952] rdma_rxe: rxe_newlink: failed to add lo [ 122.103923][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35'. [ 122.175934][ T5959] rdma_rxe: rxe_newlink: failed to add veth0 [ 122.207235][ T5959] smc: removing ib device syz0 [ 122.231867][ T5959] smbdirect: ib_dev[syz0] removed [ 122.376605][ T5933] NFSD: Unable to initialize client recovery tracking! (-110) [ 122.409430][ T5933] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 122.420490][ T5933] NFSD: starting 90-second grace period (net f00003cb) [ 122.658684][ T5628] svc: failed to register nfsdv3 RPC service (errno 111). [ 122.670257][ T5628] svc: failed to register nfsaclv3 RPC service (errno 111). [ 122.677735][ T5628] failed to unregister tcp with rpcbind [ 122.683806][ T5628] svc: failed to register nfsdv3 RPC service (errno 97). [ 122.692146][ T5628] svc: failed to register nfsaclv3 RPC service (errno 97). [ 122.699894][ T5628] failed to unregister tcp with rpcbind [ 122.809219][ T5626] svc: failed to register nfsdv3 RPC service (errno 111). [ 122.836186][ T5626] svc: failed to register nfsaclv3 RPC service (errno 111). [ 122.878329][ T5626] failed to unregister tcp with rpcbind [ 122.901431][ T5626] svc: failed to register nfsdv3 RPC service (errno 97). [ 122.935365][ T5626] svc: failed to register nfsaclv3 RPC service (errno 97). [ 122.957294][ T5626] failed to unregister tcp with rpcbind [ 123.081876][ T5630] svc: failed to register nfsdv3 RPC service (errno 111). [ 123.099014][ T5630] svc: failed to register nfsaclv3 RPC service (errno 111). [ 123.128264][ T5630] failed to unregister tcp with rpcbind [ 123.143603][ T5630] svc: failed to register nfsdv3 RPC service (errno 97). [ 123.160809][ T5630] svc: failed to register nfsaclv3 RPC service (errno 97). [ 123.178515][ T5630] failed to unregister tcp with rpcbind [ 123.431928][ T29] IPVS: starting estimator thread 0... [ 123.439628][ T5979] bridge0: port 3(dummy0) entered blocking state [ 123.446535][ T5979] bridge0: port 3(dummy0) entered disabled state [ 123.453173][ T5979] dummy0: entered allmulticast mode [ 123.476300][ T5979] dummy0: entered promiscuous mode [ 123.483728][ T5979] bridge0: port 3(dummy0) entered blocking state [ 123.490319][ T5979] bridge0: port 3(dummy0) entered forwarding state [ 123.537375][ T5983] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.818858][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41'. [ 123.863171][ T10] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 123.888335][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 123.903347][ T752] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.158649][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 124.174291][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 124.406512][ T5963] NFSD: Unable to initialize client recovery tracking! (-110) [ 124.427138][ T5963] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 124.453351][ T5963] NFSD: starting 90-second grace period (net f00004d7) [ 124.615617][ T5988] ceph: No mds server is up or the cluster is laggy [ 124.669417][ T5771] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 125.708136][ T6013] smc: net device dummy0 applied user defined pnetid SYZ0 [ 126.097438][ T5969] NFSD: Unable to initialize client recovery tracking! (-110) [ 126.107099][ T5969] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 126.116653][ T5969] NFSD: starting 90-second grace period (net f00005b3) [ 126.120460][ T6031] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 126.386083][ T6027] NFSD: Failed to start, no listeners configured. [ 126.761007][ T6032] svc: failed to register lockdv1 RPC service (errno 111). [ 126.776738][ T6032] lockd_up: makesock failed, error=-111 [ 126.890867][ T6038] infiniband syz0: set active [ 126.908686][ T6038] infiniband syz0: added veth0 [ 126.934254][ T6038] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 126.950220][ T6038] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 126.968453][ T6038] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 127.021107][ T6038] RDS/IB: syz0: added [ 127.026199][ T6038] smc: adding ib device syz0 with port count 1 [ 127.033283][ T6038] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 127.066157][ T6032] svc: failed to register nfsdv3 RPC service (errno 512). [ 127.083949][ T6032] svc: failed to register nfsaclv3 RPC service (errno 512). [ 127.101910][ T6032] failed to unregister tcp with rpcbind [ 127.116846][ T6032] svc: failed to register nfsdv3 RPC service (errno 97). [ 127.135840][ T6032] svc: failed to register nfsaclv3 RPC service (errno 97). [ 127.143772][ T6032] failed to unregister tcp with rpcbind [ 127.590793][ T6053] NFSD: Failed to start, no listeners configured. [ 128.188031][ T6076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.69'. [ 128.225321][ T6076] openvswitch: netlink: Message has 4 unknown bytes. [ 128.285486][ T6078] FAULT_INJECTION: forcing a failure. [ 128.285486][ T6078] name fail_futex, interval 1, probability 0, space 0, times 1 [ 128.326050][ T6078] CPU: 1 UID: 0 PID: 6078 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT(full) [ 128.326096][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 128.326117][ T6078] Call Trace: [ 128.326128][ T6078] [ 128.326146][ T6078] dump_stack_lvl+0x100/0x190 [ 128.326193][ T6078] should_fail_ex.cold+0x5/0xa [ 128.326228][ T6078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.326279][ T6078] get_futex_key+0x1d2/0x14f0 [ 128.326335][ T6078] ? __pfx_get_futex_key+0x10/0x10 [ 128.326398][ T6078] futex_wake+0xf4/0x5e0 [ 128.326450][ T6078] ? futex_wait+0x11e/0x370 [ 128.326513][ T6078] ? __pfx_futex_wake+0x10/0x10 [ 128.326596][ T6078] do_futex+0x2b2/0x440 [ 128.326647][ T6078] ? __pfx_do_futex+0x10/0x10 [ 128.326696][ T6078] ? ktime_get+0x22c/0x320 [ 128.326734][ T6078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.326777][ T6078] ? lockdep_hardirqs_on+0x78/0x100 [ 128.326822][ T6078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.326873][ T6078] __x64_sys_futex+0x34f/0x4d0 [ 128.326930][ T6078] ? __pfx___x64_sys_futex+0x10/0x10 [ 128.326992][ T6078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.327045][ T6078] do_syscall_64+0x115/0x870 [ 128.327097][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.327135][ T6078] RIP: 0033:0x7f7315d9de99 [ 128.327165][ T6078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.327199][ T6078] RSP: 002b:00007fffd0419478 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.327233][ T6078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7315d9de99 [ 128.327256][ T6078] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7316025fa8 [ 128.327279][ T6078] RBP: 0000000000001b11 R08: 0000000000000020 R09: 0000000000000000 [ 128.327301][ T6078] R10: 00007f7316025fa0 R11: 0000000000000246 R12: 0000000000000000 [ 128.327323][ T6078] R13: 00007f7316025fac R14: 00007f7316025fa8 R15: 00007f7316025fa0 [ 128.327370][ T6078] [ 128.952275][ T6092] syz.2.74 uses obsolete (PF_INET,SOCK_PACKET) [ 129.214771][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 129.362363][ T5640] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 129.536743][ T6081] NFSD: Unable to initialize client recovery tracking! (-110) [ 129.568281][ T6081] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 129.596473][ T6081] NFSD: starting 90-second grace period (net f00003cc) [ 129.628337][ T5785] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 130.155038][ T5640] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 130.169051][ T6099] ceph: No mds server is up or the cluster is laggy [ 130.260204][ T6113] bridge0: port 3(syz_tun) entered blocking state [ 130.287878][ T6113] bridge0: port 3(syz_tun) entered disabled state [ 130.307912][ T6113] syz_tun: entered allmulticast mode [ 130.366751][ T6113] syz_tun: entered promiscuous mode [ 130.387370][ T6113] bridge0: port 3(syz_tun) entered blocking state [ 130.393987][ T6113] bridge0: port 3(syz_tun) entered forwarding state [ 130.448112][ T6113] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 130.513846][ T6073] rdma_rxe: rxe_newlink: failed to add lo [ 130.739348][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 131.091652][ T5751] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 131.104172][ T6115] ceph: No mds server is up or the cluster is laggy [ 131.252341][ T6142] tipc: Started in network mode [ 131.290423][ T6142] tipc: Node identity 1000001, cluster identity 4711 [ 131.343864][ T6142] tipc: Node number set to 16777217 [ 131.468216][ T6138] tipc: Enabled bearer , priority 1 [ 131.521776][ T6137] tipc: Disabling bearer [ 131.631770][ T6160] bridge0: port 3(syz_tun) entered blocking state [ 131.668611][ T6160] bridge0: port 3(syz_tun) entered disabled state [ 131.704016][ T6160] syz_tun: entered allmulticast mode [ 131.737942][ T6160] syz_tun: entered promiscuous mode [ 131.753795][ T6160] bridge0: port 3(syz_tun) entered blocking state [ 131.760556][ T6160] bridge0: port 3(syz_tun) entered forwarding state [ 131.841958][ T6160] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 132.022362][ T6168] netlink: 108 bytes leftover after parsing attributes in process `syz.1.101'. [ 132.193626][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.204260][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.343883][ T6179] rdma_rxe: rxe_newlink: failed to add veth0 [ 132.611063][ T6191] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 132.706949][ T6146] NFSD: Unable to initialize client recovery tracking! (-110) [ 132.718869][ T6146] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 132.752635][ T6146] NFSD: starting 90-second grace period (net f00003cb) [ 132.782370][ T6193] tipc: Enabled bearer , priority 1 [ 132.824715][ T6192] tipc: Resetting bearer [ 132.864693][ T6192] tipc: Disabling bearer [ 133.090948][ T6203] bridge0: port 3(syz_tun) entered blocking state [ 133.119427][ T6203] bridge0: port 3(syz_tun) entered disabled state [ 133.159226][ T6203] syz_tun: entered allmulticast mode [ 133.235011][ T6203] syz_tun: entered promiscuous mode [ 133.255861][ T6203] bridge0: port 3(syz_tun) entered blocking state [ 133.262532][ T6203] bridge0: port 3(syz_tun) entered forwarding state [ 133.398202][ T6203] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 134.114586][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 134.165172][ T6239] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.540742][ T6260] bridge0: port 3(syz_tun) entered blocking state [ 134.578342][ T6260] bridge0: port 3(syz_tun) entered disabled state [ 134.601116][ T6260] syz_tun: entered allmulticast mode [ 134.614105][ T6260] syz_tun: entered promiscuous mode [ 134.620501][ T6260] bridge0: port 3(syz_tun) entered blocking state [ 134.627128][ T6260] bridge0: port 3(syz_tun) entered forwarding state [ 134.652305][ T6260] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 134.885625][ T5640] ------------[ cut here ]------------ [ 134.892284][ T5640] !iov_iter_count(&con->v2.in_iter) [ 134.892307][ T5640] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x1727/0x4780, CPU#1: kworker/1:3/5640 [ 134.909413][ T5640] Modules linked in: [ 134.913571][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 134.923160][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.933333][ T5640] Workqueue: ceph-msgr ceph_con_workfn [ 134.939069][ T5640] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 134.945292][ T5640] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff 13 90 f5 4c 8b 64 24 28 e8 0a 12 8a f6 90 <0f> 0b 90 bb c3 ff ff ff e8 fc 11 8a f6 49 8d 7f 30 48 b8 00 00 00 [ 134.965418][ T5640] RSP: 0018:ffffc900039ff978 EFLAGS: 00010293 [ 134.971869][ T5640] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b802501 [ 134.980322][ T5640] RDX: ffff888077911f00 RSI: ffffffff8b802d16 RDI: ffff888077911f00 [ 134.989116][ T5640] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 134.998688][ T5640] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200073ff3e [ 135.007927][ T5640] R13: ffffc900039ffab0 R14: ffff88805208c698 R15: ffff88805208c418 [ 135.015932][ T5640] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 135.025206][ T5640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.031884][ T5640] CR2: 000000110c34a1d7 CR3: 0000000076dc8000 CR4: 0000000000350ef0 [ 135.040001][ T5640] Call Trace: [ 135.043294][ T5640] [ 135.046244][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.051971][ T5640] ? lock_acquire+0x1b9/0x370 [ 135.056708][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.062469][ T5640] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 135.068628][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.074477][ T5640] ? rcu_is_watching+0x12/0xc0 [ 135.079417][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.085123][ T5640] ? trace_contention_end+0x126/0x160 [ 135.090580][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.097264][ T5640] ? __mutex_lock+0x26d/0x1bd0 [ 135.102083][ T5640] ? ceph_con_workfn+0x48/0x13e0 [ 135.107771][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.113441][ T5640] ? register_lock_class+0x40/0x560 [ 135.118768][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.124461][ T5640] ? do_raw_spin_lock+0x128/0x260 [ 135.129575][ T5640] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.134822][ T5640] ? debug_object_deactivate+0x2e4/0x3b0 [ 135.140589][ T5640] ceph_con_workfn+0x360/0x13e0 [ 135.145495][ T5640] process_one_work+0xa23/0x1940 [ 135.150836][ T5640] ? __pfx_process_one_work+0x10/0x10 [ 135.156228][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.161972][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.167717][ T5640] worker_thread+0x5ef/0xe50 [ 135.172357][ T5640] ? __pfx_worker_thread+0x10/0x10 [ 135.177548][ T5640] ? kthread+0x13a/0x450 [ 135.181952][ T5640] ? __pfx_worker_thread+0x10/0x10 [ 135.187159][ T5640] kthread+0x370/0x450 [ 135.191322][ T5640] ? __pfx_kthread+0x10/0x10 [ 135.196941][ T5640] ret_from_fork+0x72b/0xd50 [ 135.201576][ T5640] ? __pfx_ret_from_fork+0x10/0x10 [ 135.207481][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.213206][ T5640] ? rcu_is_watching+0x12/0xc0 [ 135.218066][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.223952][ T5640] ? __switch_to+0x800/0x10f0 [ 135.228840][ T5640] ? __switch_to_asm+0x39/0x70 [ 135.233679][ T5640] ? __pfx_kthread+0x10/0x10 [ 135.238383][ T5640] ret_from_fork_asm+0x1a/0x30 [ 135.243229][ T5640] [ 135.246259][ T5640] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.253552][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 135.263036][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.273106][ T5640] Workqueue: ceph-msgr ceph_con_workfn [ 135.278594][ T5640] Call Trace: [ 135.281871][ T5640] [ 135.284824][ T5640] dump_stack_lvl+0x100/0x190 [ 135.289545][ T5640] vpanic+0x552/0x970 [ 135.293546][ T5640] ? __pfx_vpanic+0x10/0x10 [ 135.298122][ T5640] panic+0xd1/0xe0 [ 135.301868][ T5640] ? __pfx_panic+0x10/0x10 [ 135.306315][ T5640] ? check_panic_on_warn+0x1f/0x90 [ 135.311472][ T5640] check_panic_on_warn.cold+0x19/0x34 [ 135.316869][ T5640] ? ceph_con_v2_try_read+0x1727/0x4780 [ 135.322425][ T5640] __warn.cold+0x191/0x318 [ 135.326948][ T5640] __report_bug+0x30f/0x440 [ 135.331469][ T5640] ? ceph_con_v2_try_read+0x1727/0x4780 [ 135.337027][ T5640] ? __pfx___report_bug+0x10/0x10 [ 135.342070][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.347736][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.353388][ T5640] ? __local_bh_enable_ip+0x9e/0x120 [ 135.358691][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.364368][ T5640] ? lockdep_hardirqs_on+0x78/0x100 [ 135.369586][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.375233][ T5640] ? __local_bh_enable_ip+0x9e/0x120 [ 135.380745][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.386399][ T5640] ? tcp_recvmsg+0x1f8/0x630 [ 135.391024][ T5640] ? ceph_con_v2_try_read+0x1727/0x4780 [ 135.396587][ T5640] report_bug+0xb2/0x220 [ 135.400862][ T5640] ? ceph_con_v2_try_read+0x1727/0x4780 [ 135.406423][ T5640] handle_bug+0x16a/0x2a0 [ 135.410822][ T5640] exc_invalid_op+0x17/0x50 [ 135.415354][ T5640] asm_exc_invalid_op+0x1a/0x20 [ 135.420214][ T5640] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 135.426386][ T5640] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff 13 90 f5 4c 8b 64 24 28 e8 0a 12 8a f6 90 <0f> 0b 90 bb c3 ff ff ff e8 fc 11 8a f6 49 8d 7f 30 48 b8 00 00 00 [ 135.446007][ T5640] RSP: 0018:ffffc900039ff978 EFLAGS: 00010293 [ 135.452127][ T5640] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b802501 [ 135.460100][ T5640] RDX: ffff888077911f00 RSI: ffffffff8b802d16 RDI: ffff888077911f00 [ 135.468080][ T5640] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 135.476063][ T5640] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200073ff3e [ 135.484046][ T5640] R13: ffffc900039ffab0 R14: ffff88805208c698 R15: ffff88805208c418 [ 135.492034][ T5640] ? ceph_con_v2_try_read+0xf11/0x4780 [ 135.497510][ T5640] ? ceph_con_v2_try_read+0x1726/0x4780 [ 135.503078][ T5640] ? ceph_con_v2_try_read+0x1726/0x4780 [ 135.508672][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.514322][ T5640] ? lock_acquire+0x1b9/0x370 [ 135.519012][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.524841][ T5640] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 135.530569][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.536224][ T5640] ? rcu_is_watching+0x12/0xc0 [ 135.541103][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.546760][ T5640] ? trace_contention_end+0x126/0x160 [ 135.552150][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.557803][ T5640] ? __mutex_lock+0x26d/0x1bd0 [ 135.562589][ T5640] ? ceph_con_workfn+0x48/0x13e0 [ 135.567542][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.573195][ T5640] ? register_lock_class+0x40/0x560 [ 135.578409][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.584058][ T5640] ? do_raw_spin_lock+0x128/0x260 [ 135.589123][ T5640] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.594377][ T5640] ? debug_object_deactivate+0x2e4/0x3b0 [ 135.600057][ T5640] ceph_con_workfn+0x360/0x13e0 [ 135.604938][ T5640] process_one_work+0xa23/0x1940 [ 135.609913][ T5640] ? __pfx_process_one_work+0x10/0x10 [ 135.615294][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.620956][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.626611][ T5640] worker_thread+0x5ef/0xe50 [ 135.631222][ T5640] ? __pfx_worker_thread+0x10/0x10 [ 135.636341][ T5640] ? kthread+0x13a/0x450 [ 135.640610][ T5640] ? __pfx_worker_thread+0x10/0x10 [ 135.645727][ T5640] kthread+0x370/0x450 [ 135.649823][ T5640] ? __pfx_kthread+0x10/0x10 [ 135.654449][ T5640] ret_from_fork+0x72b/0xd50 [ 135.659065][ T5640] ? __pfx_ret_from_fork+0x10/0x10 [ 135.664239][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.669931][ T5640] ? rcu_is_watching+0x12/0xc0 [ 135.674743][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.680404][ T5640] ? __switch_to+0x800/0x10f0 [ 135.685117][ T5640] ? __switch_to_asm+0x39/0x70 [ 135.689906][ T5640] ? __pfx_kthread+0x10/0x10 [ 135.694534][ T5640] ret_from_fork_asm+0x1a/0x30 [ 135.699345][ T5640] [ 135.702609][ T5640] Kernel Offset: disabled [ 135.706927][ T5640] Rebooting in 86400 seconds..