last executing test programs: 14.172511422s ago: executing program 4 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x0, 0x0, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x0, 0x0, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x0, 0x0, 0x0, 0x0, [@NFTA_HOOK_HOOKNUM={0x0, 0x0, 0x0, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x0, 0x0, 0x0, 0x0, 0x64}, @NFTA_HOOK_DEV={0x0, 0x0, 'lo\x00'}]}, @NFTA_CHAIN_TYPE={0x0, 0x0, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x0, 0x0, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x0, 0x0, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x0, @masq={{0x0, 0x0}, @val={0x0, 0x0, 0x0, 0x0, [@NFTA_MASQ_FLAGS={0x0, 0x0, 0x0}]}}}]}]}], {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000400)="1234", 0x4, 0x0, &(0x7f0000000500)={0x2, 0x1234, @remote={0xac, 0x14, 0x14, 0x2}}, 0x10) 14.0534991s ago: executing program 4 (id=102): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xac140000}, @RTA_OIF={0x8, 0x4, 0x1}]}, 0x2c}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f0000000100)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0xac140001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xac140000}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv4_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xac140000}, @RTA_OIF={0x8, 0x4, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xac140000}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 13.4290245s ago: executing program 4 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r1, &(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xc0, 0xa8, 0x1, 0x1}}, 0x10) listen(r1, 0x5) write(r0, &(0x7f0000000300)="00000800450000540000400040840000c0a80102c0a8010110e24e230000000000000000010000380102030400010000000a000a00000000800200240102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20", 0x58) 13.140012069s ago: executing program 4 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 11.943758761s ago: executing program 4 (id=129): syz_emit_ethernet(0x26, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}}}}}, 0x0) 11.222802972s ago: executing program 4 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000010000500000000000000000000000000010000000100000001000000", 0x20) write(r0, &(0x7f0000000100)="600000001800050400000000000000000a8000000000000000000000000000001400010020010db8000100000000000000000001080004000100000006001500030000002000160010000100010203040506070805000800010000000500070000000000", 0x60) write(r0, &(0x7f0000000200)="300000001a00010000000000000000000a80000000000000000000001400010020010db8000100000000000000000001", 0x30) 10.367195087s ago: executing program 32 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000010000500000000000000000000000000010000000100000001000000", 0x20) write(r0, &(0x7f0000000100)="600000001800050400000000000000000a8000000000000000000000000000001400010020010db8000100000000000000000001080004000100000006001500030000002000160010000100010203040506070805000800010000000500070000000000", 0x60) write(r0, &(0x7f0000000200)="300000001a00010000000000000000000a80000000000000000000001400010020010db8000100000000000000000001", 0x30) 8.49314649s ago: executing program 3 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x3}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xe}, {0x54, 0x2, [@TCA_CGROUP_ACT={0x50, 0x1, [@m_sample={0x4c, 0x1, 0x0, 0x0, {{0xe}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x1, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x3, 0x20000000, 0x1, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x5}}}]}]}}]}, 0x90}}, 0x0) write(r0, &(0x7f0000000400)="0000000008004500001c00000000401176cc0a0000010a0000021234123400080000", 0x22) 7.913752741s ago: executing program 2 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x204e, @local}}, {0x14, 0x2, @in={0x2, 0x214e, @remote}}}}]}]}, 0x54}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x3e8, 0x1, 0x3e8}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x11) bind$inet(r3, &(0x7f0000000200)={0x2, 0x214e, @local}, 0x10) sendto$inet(r3, &(0x7f0000000300)="4e00002800000000000000000100000200000000000000000100000201000001", 0x28, 0x0, &(0x7f0000000400)={0x2, 0x204e, @loopback}, 0x10) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x40, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="4e01002800000000000000000100000200000000000000000100000201000001", 0x28, 0x0, &(0x7f0000000400)={0x2, 0x204e, @loopback}, 0x10) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x40, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="4e02002800000000000000000100000200000000000000000100000201000001", 0x28, 0x0, &(0x7f0000000400)={0x2, 0x204e, @loopback}, 0x10) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x40, 0x0, 0x0) 6.01023603s ago: executing program 2 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0800010073797a30000000025c000000120a010400000000000000000200000a0800010073797a30000000020800020073797a300000000208000300000000073c000400080001000200000005000200110000002800038024000100140001001e0000000a0002003c00000000000000140000001100010000000000000000000200000a"], 0xa4}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000130a010000000000000000000200000a0800010073797a30000000020800020073797a30000000020800030000000007"], 0x28}}, 0x0) 5.894954156s ago: executing program 3 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) close(r4) 5.607395243s ago: executing program 2 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x30}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x18, &(0x7f0000000700)=@raw=[@generic={0xbf, 0x2, 0x1}, @generic={0xb7, 0x3}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0x7b, 0xa, 0x3, 0xffc8}, @generic={0x7b, 0xa, 0x3, 0xffd0}, @generic={0x7b, 0xa, 0x3, 0xffd8}, @generic={0x7b, 0xa, 0x3, 0xffe0}, @generic={0x7b, 0xa, 0x3, 0xffe8}, @generic={0x7b, 0xa, 0x3, 0xfff0}, @generic={0x7b, 0xa, 0x3, 0xfff8}, @generic={0xb7, 0x3, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x3, 0xffc8}, @generic={0xb7, 0x3, 0x0, 0x0, 0xa010100}, @generic={0x63, 0xa, 0x3, 0xffcc}, @generic={0xbf, 0x1, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x10, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789abcdef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.426991796s ago: executing program 2 (id=175): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0xd, 0x4, 0x18, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, {[{{@ip={@remote={0xac, 0x14, 0x14, 0x2}, @remote={0xac, 0x14, 0x14, 0x1}, 0x0, 0x0, 'lo\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @MASQUERADE={0x28, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @empty, @empty}}}}, {{@uncond, 0x0, 0x70, 0x98}, @SNAT0={0x28, 'SNAT\x00', 0x0, {0x1, {0x1, @empty, @empty}}}}, {{@uncond, 0x0, 0x70, 0x98}, @DNAT0={0x28, 'DNAT\x00', 0x0, {0x1, {0x1, @empty, @empty}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REDIRECT={0x28, 'REDIRECT\x00', 0x0, {0x1, {0x1, @empty, @empty}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x240) sendto$inet(r0, &(0x7f0000000100)="1234", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1234, @remote={0xac, 0x14, 0x14, 0x2}}, 0x10) 4.238651681s ago: executing program 2 (id=176): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x40, 0x10, 0x601, 0x0, 0x0, "", [@generic='\x00'/16, @typed={0x0, 0x3, 0x0, 0x0, @str='veth0\x00'}, @typed={0x0, 0x1f, 0x0, 0x0, @u32=0x4}]}, 0x40}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0\x00'}) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)={0x34, 0x24, 0x601, 0x0, 0x0, "", [@generic='\x00'/20, @typed={0x0, 0x1, 0x0, 0x0, @str='cake_mq\x00'}, @typed={0x0, 0x0, 0x0, 0x0, @u32=0x1}]}, 0x34}], 0x1}, 0x0) 3.899148435s ago: executing program 2 (id=177): unshare(0x40000000) r0 = socket$rds(0x15, 0x5, 0x0) close(r0) unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 3.894755957s ago: executing program 3 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x32}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00112233445566778899aabb08004500001c00000000401100000101010101010102"], 0x22) 3.730910011s ago: executing program 1 (id=179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0xbb06, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000020)={0x2, 0xbb06, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000100)="009c00011a2b3c4d0001000001000000000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="009c00011a2b3c4d0002000001000100000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="00a800011a2b3c4d0007000012340001000000010000000100010001000100000000", 0x22, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000400)="002000011a2b3c4d00080000567812340100"/32, 0x20, 0x0, 0x0, 0x0) 3.617270854s ago: executing program 1 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) write(r1, &(0x7f0000000100)='hello', 0x5) write(r2, &(0x7f0000000140)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x1, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 3.42271794s ago: executing program 1 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x0, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x10, 0x20}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x0, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 3.114965764s ago: executing program 1 (id=182): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b7000000010000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) 2.125896195s ago: executing program 1 (id=186): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000000000000100100000100000001000000000000001000000000000000100100000e000000"], 0x28}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="1234567800000100000000010000000100000001010100000000000100000000", 0x20, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) sendto$inet(r1, &(0x7f0000000300)="1234567800000100000000000000000000000002070100000000000100000000", 0x20, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) 2.111720265s ago: executing program 5 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r3, &(0x7f0000000400)="45000014000000004004fde27f0000017f000001", 0x14, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000400)="45000014000000004004fde27f0000017f000001", 0x14, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000400)="45000014000000004004fde27f0000017f000001", 0x14, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) recvfrom(r2, &(0x7f0000000600)=""/256, 0x100, 0x0, 0x0, 0x0) 1.764989737s ago: executing program 1 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a) close(r3) close(0xffffffffffffffff) 1.54273096s ago: executing program 0 (id=191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x1234, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) 1.463590793s ago: executing program 3 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs/nfs_dns\x00', 0x10000, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/gssd\x00', 0x10000, 0x0) getdents64(r1, &(0x7f0000000400), 0x1000) 1.375858825s ago: executing program 0 (id=193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000020)=0x1, 0x4) 1.331235612s ago: executing program 3 (id=194): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='bye', 0x3}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 1.167010103s ago: executing program 0 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/default/forwarding\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/inet_peer_threshold\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) close(r3) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010104, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) 1.081457295s ago: executing program 3 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) write(0xffffffffffffffff, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) 1.076454842s ago: executing program 0 (id=197): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0x60, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x150}}, 0x0) 967.093625ms ago: executing program 5 (id=198): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @dev}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @dev}, 0x10) syz_emit_ethernet(0x13, &(0x7f0000000040)={@dev, @remote, @void, {@llc={0x4, {@llc={0x2, 0x2, "0202", 'S'}}}}}, 0x0) 810.465754ms ago: executing program 0 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/default/forwarding\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/inet_peer_threshold\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) close(r3) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010101, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010103, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010104, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010105, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010106, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010107, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010108, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 742.615427ms ago: executing program 5 (id=200): syz_emit_ethernet(0x35, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e10102"}}}}, 0x0) 545.615149ms ago: executing program 5 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}}, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x0, 0x0, {0x0}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}]}]}}, 0x0}, 0x0) 270.78535ms ago: executing program 5 (id=202): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newpolicy={0xfc, 0x13, 0x1, 0x2, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x1234, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) 85.755533ms ago: executing program 5 (id=203): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000e00)=@in={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000140)='\x00\x00\x00\x00', &(0x7f0000000180)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240)="01000000", &(0x7f0000000280)=@udp=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) sendto(r1, &(0x7f0000000700)='hello world', 0xb, 0x0, &(0x7f0000000800)=@in={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) 0s ago: executing program 0 (id=204): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)='ceph v2\n\x00\x00\x00', 0xb) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) close(r2) close(r0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 91.292704][ T29] cfg80211: failed to load regulatory.db [ 93.004243][ T5607] cgroup: Unknown subsys name 'net' [ 93.124241][ T5607] cgroup: Unknown subsys name 'cpuset' [ 93.133851][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.832502][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.480357][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.501036][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.509460][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.521684][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.531907][ T5646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.539950][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.547874][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.555676][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.563901][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.572047][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.580359][ T5646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.589550][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.590090][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.599197][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.611158][ T5646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.611465][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.624777][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.626987][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.641432][ T5646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.649433][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.663083][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.675706][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.682880][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.682898][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.698383][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.709017][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.709854][ T5652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.725156][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.735039][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.742784][ T5652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.650774][ T5652] Bluetooth: hci0: command tx timeout [ 100.730143][ T5652] Bluetooth: hci4: command tx timeout [ 100.809490][ T4936] Bluetooth: hci3: command tx timeout [ 100.816020][ T5652] Bluetooth: hci5: command tx timeout [ 100.822641][ T5644] Bluetooth: hci2: command tx timeout [ 100.828853][ T5636] Bluetooth: hci1: command tx timeout [ 101.173019][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.180310][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.187753][ T5627] bridge_slave_0: entered allmulticast mode [ 101.195786][ T5627] bridge_slave_0: entered promiscuous mode [ 101.245568][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.253143][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.260704][ T5627] bridge_slave_1: entered allmulticast mode [ 101.269074][ T5627] bridge_slave_1: entered promiscuous mode [ 101.406121][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.471363][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.488112][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.495498][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.505728][ T5630] bridge_slave_0: entered allmulticast mode [ 101.513616][ T5630] bridge_slave_0: entered promiscuous mode [ 101.574077][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.581580][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.588828][ T5630] bridge_slave_1: entered allmulticast mode [ 101.596768][ T5630] bridge_slave_1: entered promiscuous mode [ 101.619165][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.626347][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.633789][ T5628] bridge_slave_0: entered allmulticast mode [ 101.641609][ T5628] bridge_slave_0: entered promiscuous mode [ 101.715652][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.722925][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.730657][ T5628] bridge_slave_1: entered allmulticast mode [ 101.738936][ T5628] bridge_slave_1: entered promiscuous mode [ 101.760419][ T5627] team0: Port device team_slave_0 added [ 101.766204][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.773561][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.781180][ T5631] bridge_slave_0: entered allmulticast mode [ 101.789669][ T5631] bridge_slave_0: entered promiscuous mode [ 101.830191][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.837500][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.845019][ T5632] bridge_slave_0: entered allmulticast mode [ 101.852666][ T5632] bridge_slave_0: entered promiscuous mode [ 101.863244][ T5627] team0: Port device team_slave_1 added [ 101.868990][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.876160][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.883422][ T5631] bridge_slave_1: entered allmulticast mode [ 101.891458][ T5631] bridge_slave_1: entered promiscuous mode [ 101.902201][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.932732][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.940108][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.949737][ T5632] bridge_slave_1: entered allmulticast mode [ 101.958369][ T5632] bridge_slave_1: entered promiscuous mode [ 101.994172][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.027880][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.104366][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.143079][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.150250][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.177382][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.193399][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.205333][ T5630] team0: Port device team_slave_0 added [ 102.240443][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.250965][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.257969][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.284239][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.300006][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.311962][ T5630] team0: Port device team_slave_1 added [ 102.317851][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.325157][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.332660][ T5629] bridge_slave_0: entered allmulticast mode [ 102.341522][ T5629] bridge_slave_0: entered promiscuous mode [ 102.353426][ T5628] team0: Port device team_slave_0 added [ 102.362310][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.408936][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.416614][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.424161][ T5629] bridge_slave_1: entered allmulticast mode [ 102.432987][ T5629] bridge_slave_1: entered promiscuous mode [ 102.442628][ T5628] team0: Port device team_slave_1 added [ 102.543327][ T5632] team0: Port device team_slave_0 added [ 102.552080][ T5631] team0: Port device team_slave_0 added [ 102.558625][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.565810][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.592380][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.631171][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.638158][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.664376][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.690822][ T5632] team0: Port device team_slave_1 added [ 102.698737][ T5631] team0: Port device team_slave_1 added [ 102.717846][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.724915][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.752887][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.763794][ T5636] Bluetooth: hci0: command tx timeout [ 102.777281][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.797994][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.805569][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.832883][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.844792][ T5636] Bluetooth: hci4: command tx timeout [ 102.858424][ T5627] hsr_slave_0: entered promiscuous mode [ 102.865654][ T5627] hsr_slave_1: entered promiscuous mode [ 102.889410][ T5636] Bluetooth: hci1: command tx timeout [ 102.889749][ T5644] Bluetooth: hci2: command tx timeout [ 102.895770][ T5636] Bluetooth: hci5: command tx timeout [ 102.901748][ T5652] Bluetooth: hci3: command tx timeout [ 102.922056][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.954428][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.961718][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.988122][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.033148][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.040264][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.066487][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.078865][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.086102][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.112711][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.180005][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.187156][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.214601][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.241604][ T5630] hsr_slave_0: entered promiscuous mode [ 103.248481][ T5630] hsr_slave_1: entered promiscuous mode [ 103.255102][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 103.261009][ T5630] Cannot create hsr debugfs directory [ 103.269176][ T5629] team0: Port device team_slave_0 added [ 103.313458][ T5629] team0: Port device team_slave_1 added [ 103.326420][ T5628] hsr_slave_0: entered promiscuous mode [ 103.333171][ T5628] hsr_slave_1: entered promiscuous mode [ 103.339721][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 103.346119][ T5628] Cannot create hsr debugfs directory [ 103.477480][ T5632] hsr_slave_0: entered promiscuous mode [ 103.484458][ T5632] hsr_slave_1: entered promiscuous mode [ 103.490911][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 103.496640][ T5632] Cannot create hsr debugfs directory [ 103.503588][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.510984][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.537187][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.615047][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.622343][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.649380][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.667756][ T5631] hsr_slave_0: entered promiscuous mode [ 103.674525][ T5631] hsr_slave_1: entered promiscuous mode [ 103.681398][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 103.687573][ T5631] Cannot create hsr debugfs directory [ 103.960194][ T5629] hsr_slave_0: entered promiscuous mode [ 103.966750][ T5629] hsr_slave_1: entered promiscuous mode [ 103.973183][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 103.978911][ T5629] Cannot create hsr debugfs directory [ 104.494864][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.508687][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.517168][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.527342][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.535538][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.546811][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.571772][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.583195][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.678578][ T5628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.690272][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.698572][ T5628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.708574][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.717380][ T5628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.732025][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.740501][ T5628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.750552][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.809576][ T5652] Bluetooth: hci0: command tx timeout [ 104.889809][ T5652] Bluetooth: hci4: command tx timeout [ 104.907569][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.920329][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.932116][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.943030][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.953285][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.964167][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.972380][ T5652] Bluetooth: hci3: command tx timeout [ 104.975153][ T5644] Bluetooth: hci2: command tx timeout [ 104.983443][ T4936] Bluetooth: hci1: command tx timeout [ 104.989121][ T5652] Bluetooth: hci5: command tx timeout [ 104.999226][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.012243][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.033569][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.153541][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.166529][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.179215][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.188027][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.198533][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.206797][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.218439][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.227565][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.238080][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.264929][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.272423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.337235][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.344459][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.482893][ T5631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.493417][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.502473][ T5631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.513356][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.534849][ T5631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.545701][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.561500][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.588796][ T5631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.602264][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.756150][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.813420][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.828041][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.858360][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.873590][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.886682][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.894868][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.923091][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.933225][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.948380][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.973273][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.980494][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.001353][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.014173][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.103460][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.134328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.141557][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.195130][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.202377][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.253299][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.377369][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.473554][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.480835][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.556826][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.564154][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.596591][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.654917][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.768427][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.814332][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.861103][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.868363][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.890699][ T5652] Bluetooth: hci0: command tx timeout [ 106.951820][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.959111][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.970662][ T5652] Bluetooth: hci4: command tx timeout [ 107.049666][ T4936] Bluetooth: hci1: command tx timeout [ 107.051411][ T5644] Bluetooth: hci3: command tx timeout [ 107.055148][ T5652] Bluetooth: hci5: command tx timeout [ 107.060861][ T5636] Bluetooth: hci2: command tx timeout [ 107.108916][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.184430][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.191718][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.273284][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.280512][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.344282][ T5627] veth0_vlan: entered promiscuous mode [ 107.438319][ T5631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.477765][ T5627] veth1_vlan: entered promiscuous mode [ 107.542442][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.791813][ T5627] veth0_macvtap: entered promiscuous mode [ 107.826012][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.847658][ T5627] veth1_macvtap: entered promiscuous mode [ 107.969077][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.996893][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.084166][ T1174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.114773][ T1174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.160301][ T1174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.175672][ T1174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.284229][ T5632] veth0_vlan: entered promiscuous mode [ 108.419922][ T5632] veth1_vlan: entered promiscuous mode [ 108.446352][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.597498][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.631237][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.772643][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.791696][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.828476][ T5632] veth0_macvtap: entered promiscuous mode [ 108.857365][ T5630] veth0_vlan: entered promiscuous mode [ 108.888769][ T5632] veth1_macvtap: entered promiscuous mode [ 108.955231][ T5628] veth0_vlan: entered promiscuous mode [ 108.979717][ T5630] veth1_vlan: entered promiscuous mode [ 109.007346][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.017579][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.059442][ T5628] veth1_vlan: entered promiscuous mode [ 109.130263][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.194329][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.265532][ T132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.293962][ T132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.304150][ T132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.334334][ T5630] veth0_macvtap: entered promiscuous mode [ 109.356573][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.383817][ T132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.405686][ T5628] veth0_macvtap: entered promiscuous mode [ 109.447524][ T5628] veth1_macvtap: entered promiscuous mode [ 109.457804][ T5630] veth1_macvtap: entered promiscuous mode [ 109.559486][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.619095][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.631466][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.688718][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.702085][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.715884][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.720435][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.758672][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.793897][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.803462][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.826466][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.835682][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.850261][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.860424][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.871586][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.882503][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.901150][ T5629] veth0_vlan: entered promiscuous mode [ 109.978104][ T5629] veth1_vlan: entered promiscuous mode [ 110.077463][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.096668][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.238680][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.250820][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.266482][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.282671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.284054][ T5631] veth0_vlan: entered promiscuous mode [ 110.314462][ T5862] dummy0 speed is unknown, defaulting to 1000 [ 110.393860][ T5862] dummy0 speed is unknown, defaulting to 1000 [ 110.396084][ T5629] veth0_macvtap: entered promiscuous mode [ 110.411177][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.425186][ T5631] veth1_vlan: entered promiscuous mode [ 110.437631][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.466015][ T5629] veth1_macvtap: entered promiscuous mode [ 110.486532][ T5862] dummy0 speed is unknown, defaulting to 1000 [ 110.529677][ T5856] NFSD: Unable to initialize client recovery tracking! (-110) [ 110.557789][ T5856] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 110.589608][ T5856] NFSD: starting 90-second grace period (net f00003cb) [ 110.650759][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.715104][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.742231][ T5631] veth0_macvtap: entered promiscuous mode [ 110.805817][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.826544][ T5871] rdma_rxe: rxe_newlink: failed to add lo [ 110.833643][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.855463][ T5631] veth1_macvtap: entered promiscuous mode [ 110.874828][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.896084][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.988890][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.087788][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.168947][ T132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.184559][ T132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.199235][ T132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.207272][ T5868] svc: failed to register lockdv1 RPC service (errno 111). [ 111.229052][ T5868] lockd_up: makesock failed, error=-111 [ 111.255000][ T132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.320954][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.344551][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.477747][ T5868] svc: failed to register nfsdv3 RPC service (errno 512). [ 111.501565][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.513630][ T5868] svc: failed to register nfsaclv3 RPC service (errno 512). [ 111.528671][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.544402][ T5868] failed to unregister tcp with rpcbind [ 111.558532][ T5868] svc: failed to register nfsdv3 RPC service (errno 97). [ 111.570827][ T5868] svc: failed to register nfsaclv3 RPC service (errno 97). [ 111.578385][ T5868] failed to unregister tcp with rpcbind [ 111.578823][ T5862] infiniband syz0: set active [ 111.634464][ T5862] infiniband syz0: added dummy0 [ 111.641346][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.648833][ T10] dummy0 speed is unknown, defaulting to 1000 [ 111.691889][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.705265][ T5862] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 111.757613][ T5862] infiniband syz0: Couldn't open port 1 [ 111.784002][ T5862] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 111.834517][ T5862] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 111.880357][ T5862] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 111.892305][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.925459][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.072907][ T5862] RDS/IB: syz0: added [ 112.094499][ T5862] smc: adding ib device syz0 with port count 1 [ 112.115619][ T5862] smc: ib device syz0 port 1 has no pnetid [ 112.146763][ T30] dummy0 speed is unknown, defaulting to 1000 [ 112.178892][ T5862] dummy0 speed is unknown, defaulting to 1000 [ 112.622799][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 112.846573][ T5862] dummy0 speed is unknown, defaulting to 1000 [ 112.930666][ T5877] NFSD: Unable to initialize client recovery tracking! (-110) [ 112.942656][ T5877] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 112.952813][ T5877] NFSD: starting 90-second grace period (net f0000513) [ 113.016701][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 113.320799][ T5862] dummy0 speed is unknown, defaulting to 1000 [ 113.713022][ T5862] dummy0 speed is unknown, defaulting to 1000 [ 113.945660][ T5862] dummy0 speed is unknown, defaulting to 1000 [ 114.161542][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 114.180274][ T5917] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17'. [ 114.191857][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 114.205326][ T5917] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 114.258835][ T5862] dummy0 speed is unknown, defaulting to 1000 [ 114.559602][ T5899] NFSD: Unable to initialize client recovery tracking! (-110) [ 114.576824][ T5899] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 114.592933][ T5899] NFSD: starting 90-second grace period (net f00003cb) [ 115.032542][ T5935] nfs: Bad value for 'source' [ 115.043754][ T5937] netlink: 'syz.0.25': attribute type 2 has an invalid length. [ 115.067357][ T5937] : entered promiscuous mode [ 116.767153][ T5979] Zero length message leads to an empty skb [ 118.215954][ T5989] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14'. [ 118.348013][ T5934] svc: failed to register nfsdv3 RPC service (errno 512). [ 118.369613][ T5934] svc: failed to register nfsaclv3 RPC service (errno 512). [ 118.378504][ T5934] failed to unregister tcp with rpcbind [ 118.389694][ T5934] svc: failed to register nfsdv3 RPC service (errno 97). [ 118.399575][ T5934] svc: failed to register nfsaclv3 RPC service (errno 97). [ 118.407029][ T5934] failed to unregister tcp with rpcbind [ 118.451596][ T5630] svc: failed to register nfsdv3 RPC service (errno 111). [ 118.481940][ T5630] svc: failed to register nfsaclv3 RPC service (errno 111). [ 118.501277][ T5630] failed to unregister tcp with rpcbind [ 118.523868][ T5630] svc: failed to register nfsdv3 RPC service (errno 97). [ 118.544591][ T5630] svc: failed to register nfsaclv3 RPC service (errno 97). [ 118.559373][ T5630] failed to unregister tcp with rpcbind [ 118.952277][ T6015] rdma_rxe: rxe_newlink: failed to add dummy0 [ 118.968368][ T6015] smc: net device dummy0 applied user defined pnetid SYZ0 [ 119.008480][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 119.505701][ T6031] tipc: Started in network mode [ 119.512432][ T6031] tipc: Node identity d2f4f5cfb624, cluster identity 4711 [ 119.521420][ T6031] tipc: Enabled bearer , priority 0 [ 119.615630][ T6027] tipc: Disabling bearer [ 119.657065][ T6037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.49'. [ 119.672313][ T6037] tipc: Started in network mode [ 119.677815][ T6037] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 119.685533][ T6037] tipc: Enabled bearer , priority 10 [ 119.766093][ T6039] nfs: Bad value for 'source' [ 119.860621][ T6043] netlink: 300 bytes leftover after parsing attributes in process `syz.5.52'. [ 119.924015][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 119.965266][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 120.023515][ T6047] dummy0 speed is unknown, defaulting to 1000 [ 120.231280][ T5766] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 120.499964][ T6026] NFSD: Unable to initialize client recovery tracking! (-110) [ 120.514761][ T6026] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 120.535659][ T6026] NFSD: starting 90-second grace period (net f00003cb) [ 120.655510][ T6041] ceph: No mds server is up or the cluster is laggy [ 120.703375][ T6050] dummy0 speed is unknown, defaulting to 1000 [ 120.773887][ T5766] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 120.886216][ T5882] tipc: Node number set to 11709098 [ 121.167625][ T6038] svc: failed to register nfsdv3 RPC service (errno 512). [ 121.178066][ T6038] svc: failed to register nfsaclv3 RPC service (errno 111). [ 121.189989][ T6038] failed to unregister tcp with rpcbind [ 121.198050][ T6038] svc: failed to register nfsdv3 RPC service (errno 97). [ 121.216873][ T6038] svc: failed to register nfsaclv3 RPC service (errno 97). [ 121.225450][ T6038] failed to unregister tcp with rpcbind [ 121.419191][ T6060] NFSD: Failed to start, no listeners configured. [ 122.666883][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.77'. [ 123.256587][ T6142] tipc: Started in network mode [ 123.269493][ T6142] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 123.309248][ T6142] tipc: New replicast peer: 127.0.0.1 [ 123.316062][ T6142] tipc: Enabled bearer , priority 10 [ 123.719547][ T6121] NFSD: Unable to initialize client recovery tracking! (-110) [ 123.741290][ T6121] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 123.757803][ T6121] NFSD: starting 90-second grace period (net f000067b) [ 124.391760][ T6172] netlink: 108 bytes leftover after parsing attributes in process `syz.4.94'. [ 124.430886][ T30] tipc: Node number set to 3210880763 [ 124.954031][ T6188] tipc: Enabled bearer , priority 10 [ 124.971358][ T6136] NFSD: Unable to initialize client recovery tracking! (-110) [ 124.983122][ T6136] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 124.992512][ T6136] NFSD: starting 90-second grace period (net f0000513) [ 125.079009][ T6187] tipc: Disabling bearer [ 125.185025][ T6153] NFSD: Failed to start, no listeners configured. [ 125.782311][ T6209] rdma_rxe: rxe_newlink: failed to add lo [ 126.177450][ T6225] svc: failed to register lockdv1 RPC service (errno 111). [ 126.197352][ T6229] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:02:11:22:33:44:55, vlan:0) [ 126.457208][ T6225] svc: failed to register nfsdv3 RPC service (errno 111). [ 126.488064][ T6225] svc: failed to register nfsaclv3 RPC service (errno 111). [ 126.536293][ T6225] failed to unregister tcp with rpcbind [ 126.555556][ T6225] svc: failed to register nfsdv3 RPC service (errno 97). [ 126.577540][ T6225] svc: failed to register nfsaclv3 RPC service (errno 97). [ 126.601133][ T6225] failed to unregister tcp with rpcbind [ 126.614245][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 127.077501][ T6265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.127'. [ 127.120797][ T6265] tipc: Started in network mode [ 127.125724][ T6265] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 127.174264][ T6265] tipc: Enabled bearer , priority 10 [ 127.408069][ T6280] netlink: 120 bytes leftover after parsing attributes in process `syz.1.133'. [ 127.551145][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz.5.131'. [ 127.648768][ T6273] netlink: 108 bytes leftover after parsing attributes in process `syz.5.131'. [ 127.924871][ T1158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.867087][ T4936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.895354][ T4936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.914857][ T4936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.931005][ T4936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.944974][ T4936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.222880][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.147'. [ 129.232995][ T6329] openvswitch: netlink: Flow actions attr not present in new flow. [ 130.072175][ T5766] tipc: Node number set to 11709098 [ 130.124169][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 130.217916][ T1158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.280083][ T6326] NFSD: Unable to initialize client recovery tracking! (-110) [ 130.312480][ T6326] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 130.362433][ T6326] NFSD: starting 90-second grace period (net f0000465) [ 130.535063][ T1158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.768822][ T1158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.829342][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 131.049645][ T5652] Bluetooth: hci4: command tx timeout [ 131.123828][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 132.262603][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.270378][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.713608][ T6377] tipc: New replicast peer: 172.20.20.187 [ 132.720344][ T6377] tipc: Enabled bearer , priority 10 [ 132.998064][ T6395] dummy0 speed is unknown, defaulting to 1000 [ 133.003701][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 133.043069][ T6410] netlink: 64 bytes leftover after parsing attributes in process `syz.2.165'. [ 133.088711][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 133.129476][ T5652] Bluetooth: hci4: command tx timeout [ 133.274288][ T1158] bridge_slave_1: left allmulticast mode [ 133.312247][ T1158] bridge_slave_1: left promiscuous mode [ 133.330036][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.343487][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 133.388732][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 133.427141][ T1158] bridge_slave_0: left allmulticast mode [ 133.453731][ T1158] bridge_slave_0: left promiscuous mode [ 133.482705][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.529321][ C1] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated [ 134.097913][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.133157][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.160224][ T1158] bond0 (unregistering): Released all slaves [ 134.285531][ T6317] dummy0 speed is unknown, defaulting to 1000 [ 134.395564][ T6416] NFSD: Unable to initialize client recovery tracking! (-110) [ 134.417576][ T6416] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 134.452897][ T6416] NFSD: starting 90-second grace period (net f0000496) [ 134.725683][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.176'. [ 134.787076][ T6462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.176'. [ 134.987200][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 135.209568][ T5652] Bluetooth: hci4: command tx timeout [ 135.344025][ T6464] dummy0 speed is unknown, defaulting to 1000 [ 136.031680][ T6427] NFSD: Unable to initialize client recovery tracking! (-110) [ 136.051509][ T6427] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 136.072114][ T6427] NFSD: starting 90-second grace period (net f000067b) [ 136.530255][ T6465] dummy0 speed is unknown, defaulting to 1000 [ 136.755795][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 136.829840][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.862245][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.882634][ T6317] bridge_slave_0: entered allmulticast mode [ 136.918993][ T6317] bridge_slave_0: entered promiscuous mode [ 136.943109][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.959714][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.967328][ T6317] bridge_slave_1: entered allmulticast mode [ 136.979578][ T6317] bridge_slave_1: entered promiscuous mode [ 137.246856][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.289543][ T5652] Bluetooth: hci4: command tx timeout [ 137.403574][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.862965][ T6317] team0: Port device team_slave_0 added [ 137.900564][ T6317] team0: Port device team_slave_1 added [ 138.359465][ T6520] NFSD: Unable to initialize client recovery tracking! (-110) [ 138.369491][ T6520] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 138.387381][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.405415][ T6520] NFSD: starting 90-second grace period (net f00003cb) [ 138.416464][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.505741][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.602897][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.623465][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.694353][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.032095][ T30] ------------[ cut here ]------------ [ 139.037596][ T30] !iov_iter_count(&con->v2.in_iter) [ 139.037619][ T30] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x1727/0x4780, CPU#1: kworker/1:2/30 [ 139.054304][ T30] Modules linked in: [ 139.058545][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 139.068419][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 139.079052][ T30] Workqueue: ceph-msgr ceph_con_workfn [ 139.085106][ T30] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 139.092961][ T30] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff 13 90 f5 4c 8b 64 24 28 e8 0a 12 8a f6 90 <0f> 0b 90 bb c3 ff ff ff e8 fc 11 8a f6 49 8d 7f 30 48 b8 00 00 00 [ 139.114411][ T30] RSP: 0018:ffffc90000a67978 EFLAGS: 00010293 [ 139.122062][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b802501 [ 139.130435][ T30] RDX: ffff88801f6c9f00 RSI: ffffffff8b802d16 RDI: ffff88801f6c9f00 [ 139.138449][ T30] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 139.146544][ T30] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200014cf3e [ 139.154624][ T30] R13: ffffc90000a67ab0 R14: ffff88802bb20698 R15: ffff88802bb20418 [ 139.162721][ T30] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 139.171758][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.178373][ T30] CR2: 00007f22183bf662 CR3: 0000000027066000 CR4: 0000000000350ef0 [ 139.186557][ T30] Call Trace: [ 139.189931][ T30] [ 139.192882][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.198562][ T30] ? lock_acquire+0x1b9/0x370 [ 139.204918][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.211800][ T30] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 139.221031][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.226713][ T30] ? rcu_is_watching+0x12/0xc0 [ 139.231598][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.237274][ T30] ? trace_contention_end+0x126/0x160 [ 139.242745][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.248415][ T30] ? __mutex_lock+0x26d/0x1bd0 [ 139.253306][ T30] ? ceph_con_workfn+0x48/0x13e0 [ 139.258279][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.264105][ T30] ? register_lock_class+0x40/0x560 [ 139.269707][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.275528][ T30] ? do_raw_spin_lock+0x128/0x260 [ 139.280682][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 139.285959][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 139.293767][ T30] ceph_con_workfn+0x360/0x13e0 [ 139.298713][ T30] process_one_work+0xa23/0x1940 [ 139.306200][ T30] ? __pfx_process_one_work+0x10/0x10 [ 139.306855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:02:11:22:33:44:55, vlan:0) [ 139.312437][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.329248][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.335002][ T30] worker_thread+0x5ef/0xe50 [ 139.339790][ T30] ? __pfx_worker_thread+0x10/0x10 [ 139.344936][ T30] ? kthread+0x13a/0x450 [ 139.349227][ T30] ? __pfx_worker_thread+0x10/0x10 [ 139.354438][ T30] kthread+0x370/0x450 [ 139.358560][ T30] ? __pfx_kthread+0x10/0x10 [ 139.363380][ T30] ret_from_fork+0x72b/0xd50 [ 139.368041][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 139.373289][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.378958][ T30] ? __switch_to+0x800/0x10f0 [ 139.383798][ T30] ? __switch_to_asm+0x39/0x70 [ 139.388608][ T30] ? __pfx_kthread+0x10/0x10 [ 139.393378][ T30] ret_from_fork_asm+0x1a/0x30 [ 139.398209][ T30] [ 139.401301][ T30] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.408593][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 139.417894][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.428072][ T30] Workqueue: ceph-msgr ceph_con_workfn [ 139.433571][ T30] Call Trace: [ 139.436852][ T30] [ 139.439784][ T30] dump_stack_lvl+0x100/0x190 [ 139.444572][ T30] vpanic+0x552/0x970 [ 139.448569][ T30] ? __pfx_vpanic+0x10/0x10 [ 139.453097][ T30] panic+0xd1/0xe0 [ 139.456831][ T30] ? __pfx_panic+0x10/0x10 [ 139.461279][ T30] ? check_panic_on_warn+0x1f/0x90 [ 139.466433][ T30] check_panic_on_warn.cold+0x19/0x34 [ 139.471914][ T30] ? ceph_con_v2_try_read+0x1727/0x4780 [ 139.477478][ T30] __warn.cold+0x191/0x318 [ 139.481911][ T30] __report_bug+0x30f/0x440 [ 139.486434][ T30] ? ceph_con_v2_try_read+0x1727/0x4780 [ 139.491996][ T30] ? __pfx___report_bug+0x10/0x10 [ 139.497058][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.502717][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.508467][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 139.513782][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.519441][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 139.524670][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.530354][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 139.535664][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.541314][ T30] ? tcp_recvmsg+0x1f8/0x630 [ 139.545935][ T30] ? ceph_con_v2_try_read+0x1727/0x4780 [ 139.551503][ T30] report_bug+0xb2/0x220 [ 139.555773][ T30] ? ceph_con_v2_try_read+0x1727/0x4780 [ 139.561336][ T30] handle_bug+0x16a/0x2a0 [ 139.565726][ T30] exc_invalid_op+0x17/0x50 [ 139.570260][ T30] asm_exc_invalid_op+0x1a/0x20 [ 139.575212][ T30] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 139.581409][ T30] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff 13 90 f5 4c 8b 64 24 28 e8 0a 12 8a f6 90 <0f> 0b 90 bb c3 ff ff ff e8 fc 11 8a f6 49 8d 7f 30 48 b8 00 00 00 [ 139.601254][ T30] RSP: 0018:ffffc90000a67978 EFLAGS: 00010293 [ 139.607347][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b802501 [ 139.615421][ T30] RDX: ffff88801f6c9f00 RSI: ffffffff8b802d16 RDI: ffff88801f6c9f00 [ 139.623417][ T30] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 139.631403][ T30] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200014cf3e [ 139.639383][ T30] R13: ffffc90000a67ab0 R14: ffff88802bb20698 R15: ffff88802bb20418 [ 139.647489][ T30] ? ceph_con_v2_try_read+0xf11/0x4780 [ 139.652986][ T30] ? ceph_con_v2_try_read+0x1726/0x4780 [ 139.658552][ T30] ? ceph_con_v2_try_read+0x1726/0x4780 [ 139.664115][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.669777][ T30] ? lock_acquire+0x1b9/0x370 [ 139.674475][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.680129][ T30] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 139.685866][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.691544][ T30] ? rcu_is_watching+0x12/0xc0 [ 139.696335][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.701989][ T30] ? trace_contention_end+0x126/0x160 [ 139.707409][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.713068][ T30] ? __mutex_lock+0x26d/0x1bd0 [ 139.717888][ T30] ? ceph_con_workfn+0x48/0x13e0 [ 139.722846][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.728593][ T30] ? register_lock_class+0x40/0x560 [ 139.733812][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.739466][ T30] ? do_raw_spin_lock+0x128/0x260 [ 139.744528][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 139.749755][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 139.755535][ T30] ceph_con_workfn+0x360/0x13e0 [ 139.760430][ T30] process_one_work+0xa23/0x1940 [ 139.765521][ T30] ? __pfx_process_one_work+0x10/0x10 [ 139.770906][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.776571][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.782229][ T30] worker_thread+0x5ef/0xe50 [ 139.786860][ T30] ? __pfx_worker_thread+0x10/0x10 [ 139.791984][ T30] ? kthread+0x13a/0x450 [ 139.796345][ T30] ? __pfx_worker_thread+0x10/0x10 [ 139.801473][ T30] kthread+0x370/0x450 [ 139.805580][ T30] ? __pfx_kthread+0x10/0x10 [ 139.810377][ T30] ret_from_fork+0x72b/0xd50 [ 139.814993][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 139.820129][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.825784][ T30] ? __switch_to+0x800/0x10f0 [ 139.830491][ T30] ? __switch_to_asm+0x39/0x70 [ 139.835283][ T30] ? __pfx_kthread+0x10/0x10 [ 139.839933][ T30] ret_from_fork_asm+0x1a/0x30 [ 139.844740][ T30] [ 139.847978][ T30] Kernel Offset: disabled [ 139.852304][ T30] Rebooting in 86400 seconds..