last executing test programs: 1m22.455415482s ago: executing program 32 (id=387): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='0', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='devices', 0x7) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000900)='freeze', 0x6) close(r3) 1m13.451319087s ago: executing program 3 (id=636): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 1m10.81442158s ago: executing program 3 (id=649): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x22b8, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000300)={{0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, {@loopback, 0x22b8, 0x1, 0x1}}, 0x44) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0 0\n', 0x4) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000800)='hello\x00', 0x6, 0x0, 0x0, 0x0) 1m10.513004654s ago: executing program 3 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/cgroups\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/4096, 0x1000) 1m10.242774729s ago: executing program 3 (id=656): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x154, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x12345678, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x2, 0x1111, 0x1194, @in=@loopback}}, @algo_crypt={0x48, 0x2, {{'cipher_null\x00'}}}]}, 0x154}}, 0x0) recvfrom(r0, &(0x7f0000000500)=""/100, 0x100, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x1194, @loopback}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000300)={0x0, 0x186a0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x2222, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000200)="1234567800000001aaaaaaaa0000", 0xe, 0x0, &(0x7f00000000c0)={0x2, 0x1194, @loopback}, 0x10) nanosleep(&(0x7f0000000340)={0x0, 0x5f5e100}, 0x0) recvfrom$inet(r1, &(0x7f0000000600)=""/100, 0x100, 0x0, 0x0, 0x0) 1m10.02165475s ago: executing program 5 (id=658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="2c000680"], 0x78}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000300)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @random}, 0x14) write(r6, &(0x7f0000000400)="01154e00000152540012345688e30001021000"/58, 0x40) 1m9.770433186s ago: executing program 6 (id=662): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x0}]}, 0x18}}, 0x0) 1m9.752569687s ago: executing program 5 (id=664): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x22b8, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000300)={{0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, {@loopback, 0x22b8, 0x1, 0x1}}, 0x44) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0 0\n', 0x4) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000800)='hello\x00', 0x6, 0x0, 0x0, 0x0) 1m9.517788953s ago: executing program 2 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x0, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0xa, 0x4d2, 0x0, @remote}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x28, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x8, 0xa, '\x00\x00\x00\x00'}]}, 0x28}}, 0x0) 1m9.502833423s ago: executing program 6 (id=668): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000e000000b703000000000000850000002b000000b7000000010000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640)='\x00\x00\x00\x00', &(0x7f0000000680)=@tcp=r0}, 0x20) write(r1, &(0x7f0000000700)='abcdefgh', 0x8) 1m9.465691554s ago: executing program 5 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080), &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 1m9.290783607s ago: executing program 5 (id=670): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @local}}, 0x24) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) close(r0) 1m9.290283338s ago: executing program 6 (id=671): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="5400000030000106010000000000000000000000400001803c0001800f00010074756e6e656c5f6b65790000280002801c00020000000000000000000000000000000000000000000100000008000b8004000280"], 0x54}], 0x1}, 0x0) 1m9.289990245s ago: executing program 3 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3e8}]}}}]}, 0x50}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) 1m9.289636985s ago: executing program 2 (id=673): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000400)) 1m9.220548231s ago: executing program 5 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x3, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_INFO={0x18, 0x3, "00000000ffffffff00000000ffffffff02000000"}]}}}]}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r1, &(0x7f0000000100)="1234", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1234, @local}, 0x10) 1m9.112637567s ago: executing program 6 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000640)="aaaaaaaaaa18aaaaaaaaaa194305440f3200aaaaaaaaaa18aaaaaaaaaa1900000000", 0x22, 0x0, &(0x7f0000000800)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 1m9.010929108s ago: executing program 5 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)=' -2 -3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\n\x00', 0x2) close(r2) 1m8.859389185s ago: executing program 6 (id=677): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9", 0x8, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x1}, 0x2000000) 1m8.85415312s ago: executing program 2 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x1c0, 0x1c0, 0x1c0, 0xf0, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x3a010000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@multicast1, 0x3e, 0x3}}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x5, 0x1, [0x3d, 0x2, 0x2, 0x401, 0x58, 0x5, 0x7f, 0x9, 0x1, 0xc, 0xfffc, 0x8000, 0x3, 0xbb, 0x2, 0x401], 0xe}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0x0}}}}, 0x5f0) 1m8.770667436s ago: executing program 6 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n\x00', 0x2) 1m8.67072388s ago: executing program 2 (id=681): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./msys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./msys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./msys/module/rds_tcp/parameters\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./msys/module/rds/parameters\x00', 0x0, 0x0) 1m8.56532882s ago: executing program 3 (id=683): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x48, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)=@delqdisc={0x30, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) 1m8.547203376s ago: executing program 2 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/1/root/var/lib/nfs/rpc_pipefs\x00', 0x0, 0x0) close(r0) 1m8.264670476s ago: executing program 2 (id=686): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'hsr0\x00'}) close(r0) 47.847580892s ago: executing program 33 (id=682): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c80010000c0001000b0108000200000018000000"], 0x15) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c80010000c000100030208004000400000000000"], 0x15) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c80013000f00010005030b004000000000000409030000000000000000"], 0x18) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c80016001200010004040e00400000000409030000000000000000050100"], 0x1b) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8000600020040000101"], 0xb) 47.541098819s ago: executing program 34 (id=685): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/tcn_timer\x00', 0x0, 0x0) read(r1, &(0x7f0000000280)=""/100, 0x64) 47.385307653s ago: executing program 35 (id=686): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'hsr0\x00'}) close(r0) 47.220700343s ago: executing program 36 (id=683): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x48, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)=@delqdisc={0x30, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) 47.018279387s ago: executing program 37 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n\x00', 0x2) 46.794432729s ago: executing program 38 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)=' -2 -3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\n\x00', 0x2) close(r2) 19.020377189s ago: executing program 4 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) 18.469962936s ago: executing program 8 (id=708): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\n', 0x2) 15.786766731s ago: executing program 9 (id=711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x180}}, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x100, 0x0, 0x0, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1, @basic, "", 0x0, 0x0}}}}}, 0x0) 10.706562372s ago: executing program 4 (id=714): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='2049\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) 10.396176099s ago: executing program 8 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='2\n\x00', 0x2) close(r2) 10.109244935s ago: executing program 9 (id=717): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./exp\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)=' +4.1 +4.2\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)='Y\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='testdomain 1 \\x00000000 2147483647 ./exp\n', 0x2b) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000640)='testdomain ./exp 2147483647 8224 65534 65534 0\n', 0x30) close(r6) mount$nfs4(&(0x7f0000000700)='127.0.0.1:/\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,noresvport']) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/test\x00', 0x40, 0x1ff) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./exp/test\x00', 0x202, 0x1ff) close(r8) 9.896073767s ago: executing program 1 (id=718): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='tcp 20000\n', 0xa) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) close(r3) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000400)="8000003c000000010000000000000002000186a30000000400000001000000000000000000000000000000000000000000000002000000010000004a000000000000000000000400", 0x40) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) close(r4) 9.575805784s ago: executing program 4 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) sendto$inet6(r1, &(0x7f0000000200)='test', 0x4, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @remote}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 8.131704216s ago: executing program 7 (id=724): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000200)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x358, '\x00'/856}, &(0x7f0000000400)=0x380) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'raw\x00'}, &(0x7f0000000600)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000700)={'raw\x00', 0x288, '\x00'/648}, &(0x7f0000000a00)=0x2b0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000b00)={'mangle\x00'}, &(0x7f0000000c00)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000d00)={'mangle\x00', 0x4f8, '\x00'/1272}, &(0x7f0000001200)=0x520) 8.07448064s ago: executing program 7 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)=' -2 -3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\n\x00', 0x2) close(r2) r3 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='4.2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='addr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='nconnect\x00', &(0x7f0000000400)='2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 7.833866237s ago: executing program 8 (id=726): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/mounts\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/4096, 0x1000) 7.649205933s ago: executing program 9 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38) write(r0, &(0x7f0000000100)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) write(r0, &(0x7f0000000200)="4400000041000100030000000000000003010000000000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) write(r0, &(0x7f0000000300)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) 6.319619485s ago: executing program 1 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x23c34600}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x23c34600}, 0x0) 6.215451352s ago: executing program 4 (id=730): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='0\n\x00', 0x2) 4.744507017s ago: executing program 7 (id=736): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="00000000000000020200000000000001000800000000000100000000000000010700", 0x22) read(r2, &(0x7f000000030c), 0x22) sendto$inet(r0, &(0x7f0000000300), 0x2e, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 4.70589252s ago: executing program 8 (id=737): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 4.668593779s ago: executing program 9 (id=738): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000040)='1', 0x1) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1, 0xa}, {0x23, 0x40, 0x500, 0x100, 0xa}}}}, 0x17) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000300)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 4.115611118s ago: executing program 1 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="3c0000001000010001000000000000000a01000025000100534d435553455231202020202020202020202020202020202020202000000000", 0x3c) 4.006563642s ago: executing program 1 (id=740): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x2, 0x8}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f00000000c0)={0x23, 0x1, 0x8}, 0x10) connect$phonet_pipe(r2, &(0x7f0000000100)={0x23, 0x2, 0x8}, 0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sendto$phonet(r1, &(0x7f0000000300)="0041010000000000", 0x8, 0x0, &(0x7f0000000340)={0x23, 0x1, 0x8}, 0x10) sendto$phonet(r1, &(0x7f0000000400)="0020010000004500002800004000400600007f0000017f000001", 0x1b, 0x0, &(0x7f0000000340)={0x23, 0x1, 0x8}, 0x10) recvfrom$phonet(r2, &(0x7f0000000500)=""/100, 0x64, 0x40, 0x0, 0x0) 3.872583137s ago: executing program 9 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='tcp 20000\n', 0xa) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) close(r3) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000400)="8000003c000000010000000000000002000186a30000000400000001000000000000000000000000000000000000000000000002000000010000004a000000000000000000000400", 0x40) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) close(r4) 3.772960871s ago: executing program 8 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='-3\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='udp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) 3.502551536s ago: executing program 0 (id=743): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)) 3.326655371s ago: executing program 0 (id=744): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) write(r0, &(0x7f0000000080)='\x00'/16, 0x10) 3.306480516s ago: executing program 4 (id=745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1081}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x0, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5dc, 0x0, 0x64, 0x400, 0x10}, 0x1, 0x1, 0x64}}}]}}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f0000000400)={0x11, 0x800, r2}, 0x14) sendto$packet(r4, &(0x7f0000000500)="4500001c000100004011e4f401010101010101021234123400080000", 0x1c, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000500)="4500001c000100004011e4f401010101010101021234123400080000", 0x1c, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000500)="4500001c000100004011e4f401010101010101021234123400080000", 0x1c, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000500)="4500001c000100004011e4f401010101010101021234123400080000", 0x1c, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000500)="4500001c000100004011e4f401010101010101021234123400080000", 0x1c, 0x0, 0x0, 0x0) 3.231516617s ago: executing program 0 (id=746): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x4d2, 0x32}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x184}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x32, 0x40, @remote, @local, {[], "000004d200000001000000000000003b"}}}}}, 0x0) 3.049673074s ago: executing program 0 (id=747): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 20000\n', 0xa) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="80ffffff", 0x4, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 3.046403914s ago: executing program 1 (id=748): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000120)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000160)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) read(r2, &(0x7f00000001a0)=""/128, 0x80) close(r2) 2.985581264s ago: executing program 7 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='2049\x00', 0x5) 1.908899923s ago: executing program 9 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r1, 0x5, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x8c, r1, 0x5, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x8c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000200)={'syz_tun\x00', @ifru_mtu=0x500}) syz_emit_ethernet(0x560, &(0x7f0000000c00)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x524, 0x11, 0x40, @remote, @local, {[], {0x1234, 0x1f90, 0x51c, 0x0, @opaque='\x00'/1300}}}}}}, 0x0) 502.881496ms ago: executing program 8 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00') write(r2, &(0x7f0000000240)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000110000000102030405060708090a0b0c0d0e0f10\n', 0x6c) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000400)="123456780000000000000002000186a300000003000000000000000600000018000000010000000000000000000000010000000401020304000000060000001c040400ffffffffff00"/92, 0x4c, 0x0, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10) close(r3) 499.845816ms ago: executing program 0 (id=752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 402.641289ms ago: executing program 7 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) 371.760331ms ago: executing program 1 (id=754): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000040)='1', 0x1) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1, 0xa}, {0x23, 0x40, 0x500, 0x100, 0xa}}}}, 0x17) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000300)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 338.308139ms ago: executing program 4 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x78b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1007fff}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000600)="010203040506", 0x6, 0x0, &(0x7f0000000700)={0x11, 0x800, r2}, 0x14) 166.467401ms ago: executing program 7 (id=756): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 0s ago: executing program 0 (id=757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000250000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000300)={r2, r3}) sendto$inet(r1, &(0x7f0000000400)="17030300203031323334353637383930313233343536373839303132333435363738393031", 0x25, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) recvmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/64, 0x40}], 0x1}, 0x40) kernel console output (not intermixed with test programs): 0] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.068871][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.076347][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.094097][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.100039][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.181492][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.196983][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.208100][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.221649][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.222688][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.228554][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.231312][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.241412][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.354260][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.389279][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.397574][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.413268][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.419848][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.423665][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.433340][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.446991][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.451539][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.468344][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.515412][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.515583][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.578604][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.578782][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.666050][ T5614] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.670115][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.700051][ T5614] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.704744][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.709127][ T5614] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.725358][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.731370][ T5614] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.741759][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.775330][ T5630] Bluetooth: hci4: command tx timeout [ 93.775374][ T5630] Bluetooth: hci3: command tx timeout [ 93.775407][ T5630] Bluetooth: hci1: command tx timeout [ 93.775611][ T4932] Bluetooth: hci2: command tx timeout [ 93.840781][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.862143][ T5624] Bluetooth: hci0: command tx timeout [ 93.862246][ T4932] Bluetooth: hci5: command tx timeout [ 93.873403][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.898825][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.902836][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.907328][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.916529][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.939345][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.943294][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.967616][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.971332][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.992166][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.016899][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.069138][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.069260][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.104210][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.104338][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.140509][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.140634][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.143190][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.143309][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.168126][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.278740][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.332610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.332726][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.408763][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.408901][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.527362][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.696893][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.751466][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.751592][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.832754][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.832889][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.864708][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.043281][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.104502][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.104633][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.178759][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.178894][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.252725][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.700343][ T5617] veth0_vlan: entered promiscuous mode [ 95.771406][ T5617] veth1_vlan: entered promiscuous mode [ 95.855244][ T5624] Bluetooth: hci1: command tx timeout [ 95.855289][ T5624] Bluetooth: hci3: command tx timeout [ 95.855322][ T5624] Bluetooth: hci4: command tx timeout [ 95.855401][ T4932] Bluetooth: hci2: command tx timeout [ 95.937667][ T4932] Bluetooth: hci5: command tx timeout [ 95.937712][ T4932] Bluetooth: hci0: command tx timeout [ 96.106004][ T5617] veth0_macvtap: entered promiscuous mode [ 96.129376][ T5617] veth1_macvtap: entered promiscuous mode [ 96.145070][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.251662][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.304401][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.317204][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.511075][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.511864][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.511931][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.598844][ T1130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.753712][ T5618] veth0_vlan: entered promiscuous mode [ 96.813916][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.813948][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.839788][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.840627][ T5618] veth1_vlan: entered promiscuous mode [ 97.008985][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.009017][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.115447][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.157908][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.202321][ T5618] veth0_macvtap: entered promiscuous mode [ 97.250040][ T5618] veth1_macvtap: entered promiscuous mode [ 97.321135][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.371972][ T5615] veth0_vlan: entered promiscuous mode [ 97.399576][ T5847] ovs-dp0: entered promiscuous mode [ 97.420091][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.449181][ T5620] veth0_vlan: entered promiscuous mode [ 97.462101][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.492793][ T5615] veth1_vlan: entered promiscuous mode [ 97.542194][ T5620] veth1_vlan: entered promiscuous mode [ 97.655893][ T73] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.773029][ T5616] veth0_vlan: entered promiscuous mode [ 97.780419][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 97.862515][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.862548][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.883927][ T5616] veth1_vlan: entered promiscuous mode [ 97.893435][ T5620] veth0_macvtap: entered promiscuous mode [ 97.913741][ T5615] veth0_macvtap: entered promiscuous mode [ 97.945683][ T5620] veth1_macvtap: entered promiscuous mode [ 97.964379][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 97.973344][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 98.015599][ T5615] veth1_macvtap: entered promiscuous mode [ 98.048097][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.048129][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.074962][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.076139][ T1425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.151407][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.161049][ T5614] veth0_vlan: entered promiscuous mode [ 98.180240][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.193561][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.227977][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.253365][ T5614] veth1_vlan: entered promiscuous mode [ 98.276997][ T5616] veth0_macvtap: entered promiscuous mode [ 98.297092][ T1130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.298188][ T1130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.298253][ T1130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.305872][ T1130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.305942][ T1130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.310064][ T5616] veth1_macvtap: entered promiscuous mode [ 98.335769][ T1425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.337016][ T1425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.337081][ T1425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.337142][ T1425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.549302][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.617609][ T5614] veth0_macvtap: entered promiscuous mode [ 98.672479][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.672512][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.688278][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.689040][ T5614] veth1_macvtap: entered promiscuous mode [ 98.790580][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.790613][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.817910][ T1130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.818083][ T1130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.818150][ T1130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.818212][ T1130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.833788][ T5869] lo speed is unknown, defaulting to 1000 [ 98.870926][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.870956][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.881414][ T5869] lo speed is unknown, defaulting to 1000 [ 98.924505][ T5869] lo speed is unknown, defaulting to 1000 [ 98.936248][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.936278][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.943435][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.018932][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.145480][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.145512][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.235469][ T1425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.235892][ T82] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.236075][ T82] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.236260][ T82] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.452010][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.452043][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.476163][ T1797] lo speed is unknown, defaulting to 1000 [ 99.481940][ T5869] infiniband syz0: set active [ 99.481968][ T5869] infiniband syz0: added lo [ 99.529563][ T5869] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 99.529626][ T5869] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 99.529698][ T5869] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 99.647455][ T5869] RDS/IB: syz0: added [ 99.647914][ T5869] smc: adding ib device syz0 with port count 1 [ 99.648024][ T5869] smc: ib device syz0 port 1 has no pnetid [ 99.727032][ T10] lo speed is unknown, defaulting to 1000 [ 99.745571][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.745600][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.791387][ T5869] lo speed is unknown, defaulting to 1000 [ 100.027213][ T1425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.027247][ T1425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.042140][ T5879] NFSD: Failed to start, no listeners configured. [ 100.723816][ T5869] lo speed is unknown, defaulting to 1000 [ 101.144104][ T5869] lo speed is unknown, defaulting to 1000 [ 101.176799][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.327364][ T5890] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 101.331352][ T5890] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 101.331402][ T5890] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 101.331632][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.392257][ T5906] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.392517][ T5906] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.426605][ C1] port100 3-1:1.0: NFC: Urb failure (status -71) [ 101.426971][ C1] port100 3-1:1.0: NFC: Urb failure (status -71) [ 101.434700][ T5890] port100 3-1:1.0: NFC: Could not get supported command types [ 101.771773][ T5896] lo speed is unknown, defaulting to 1000 [ 101.814554][ T5924] tipc: Started in network mode [ 101.814585][ T5924] tipc: Node identity 4, cluster identity 4711 [ 101.814605][ T5924] tipc: Node number set to 4 [ 101.851248][ T5924] tipc: Enabled bearer , priority 0 [ 101.978330][ T5926] hsr_slave_0: left promiscuous mode [ 101.980816][ T5926] hsr_slave_1: left promiscuous mode [ 102.141813][ T25] usb 3-1: USB disconnect, device number 2 [ 102.461369][ T31] audit: type=1804 audit(1790793011.229:2): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.30" name="/newroot/3/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 102.524697][ T5869] lo speed is unknown, defaulting to 1000 [ 102.843067][ T5941] bridge0: port 3(syz_tun) entered blocking state [ 102.843208][ T5941] bridge0: port 3(syz_tun) entered disabled state [ 102.843419][ T5941] syz_tun: entered allmulticast mode [ 102.868639][ T5941] syz_tun: entered promiscuous mode [ 102.872246][ T5941] bridge0: port 3(syz_tun) entered blocking state [ 102.872381][ T5941] bridge0: port 3(syz_tun) entered forwarding state [ 102.891101][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.893580][ T5944] netlink: 5 bytes leftover after parsing attributes in process `syz.5.34'. [ 102.893608][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.34'. [ 103.039021][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 103.040429][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.040495][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 103.040543][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 103.040606][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.233702][ T5869] lo speed is unknown, defaulting to 1000 [ 103.334233][ T5618] svc: failed to register nfsdv3 RPC service (errno 111). [ 103.350826][ T5618] svc: failed to register nfsaclv3 RPC service (errno 111). [ 103.350859][ T5618] failed to unregister udp with rpcbind [ 103.351156][ T5618] svc: failed to register nfsdv3 RPC service (errno 97). [ 103.351212][ T5618] svc: failed to register nfsaclv3 RPC service (errno 97). [ 103.351234][ T5618] failed to unregister udp with rpcbind [ 103.632481][ T5869] lo speed is unknown, defaulting to 1000 [ 104.016062][ T9] cxacru 5-1:1.0: send of cm 0x90 failed (-71) [ 104.113210][ T5968] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 104.113253][ T5968] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 104.213357][ T9] usb 5-1: USB disconnect, device number 2 [ 104.562218][ T5980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.720239][ T5980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.923800][ T5989] svc: failed to register lockdv1 RPC service (errno 111). [ 104.924260][ T5989] lockd_up: makesock failed, error=-111 [ 105.041472][ T5980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.215446][ T5980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.279018][ T5989] svc: failed to register nfsdv3 RPC service (errno 111). [ 105.280360][ T5989] svc: failed to register nfsaclv3 RPC service (errno 111). [ 105.280387][ T5989] failed to unregister udp with rpcbind [ 105.281188][ T5989] svc: failed to register nfsdv3 RPC service (errno 97). [ 105.281218][ T5989] svc: failed to register nfsaclv3 RPC service (errno 97). [ 105.281240][ T5989] failed to unregister udp with rpcbind [ 105.336253][ T6004] Bluetooth: MGMT ver 1.23 [ 105.387881][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.502358][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 105.506724][ T1115] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.545638][ T25] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 105.546978][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.547043][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 105.547090][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 105.547151][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.244736][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.69'. [ 106.334595][ T6042] Zero length message leads to an empty skb [ 106.674522][ T6055] batman_adv: batadv0: Adding interface: veth0 [ 106.674548][ T6055] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.674598][ T6055] batman_adv: batadv0: Interface activated: veth0 [ 106.780578][ T6055] batman_adv: batadv0: Interface deactivated: veth0 [ 106.780622][ T25] cxacru 3-1:1.0: send of cm 0x90 failed (-71) [ 106.828189][ T25] usb 3-1: USB disconnect, device number 3 [ 106.828535][ T6055] batman_adv: batadv0: Removing interface: veth0 [ 106.907573][ T6060] Bluetooth: ISO socket layer initialized [ 107.625155][ T6044] NFSD: Unable to initialize client recovery tracking! (-110) [ 107.625182][ T6044] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 107.625200][ T6044] NFSD: starting 90-second grace period (net f00004ea) [ 109.044925][ T6062] NFSD: Unable to initialize client recovery tracking! (-110) [ 109.044947][ T6062] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 109.044962][ T6062] NFSD: starting 90-second grace period (net f00004d5) [ 110.344955][ T6069] NFSD: Unable to initialize client recovery tracking! (-110) [ 110.344978][ T6069] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 110.344995][ T6069] NFSD: starting 90-second grace period (net f0000452) [ 110.615772][ T6090] svc: failed to register lockdv1 RPC service (errno 512). [ 110.782133][ T6090] svc: failed to register nfsdv3 RPC service (errno 111). [ 110.782461][ T6090] svc: failed to register nfsaclv3 RPC service (errno 512). [ 110.782494][ T6090] failed to unregister tcp with rpcbind [ 110.782698][ T6090] svc: failed to register nfsdv3 RPC service (errno 97). [ 110.782724][ T6090] svc: failed to register nfsaclv3 RPC service (errno 97). [ 110.782747][ T6090] failed to unregister tcp with rpcbind [ 111.007859][ T6099] svc: failed to register lockdv1 RPC service (errno 111). [ 111.233380][ T6099] svc: failed to register nfsdv3 RPC service (errno 111). [ 111.250880][ T6099] svc: failed to register nfsaclv3 RPC service (errno 111). [ 111.250911][ T6099] failed to unregister udp with rpcbind [ 111.251092][ T6099] svc: failed to register nfsdv3 RPC service (errno 97). [ 111.251117][ T6099] svc: failed to register nfsaclv3 RPC service (errno 97). [ 111.251136][ T6099] failed to unregister udp with rpcbind [ 111.251237][ T6120] Cannot find set identified by id 0 to match [ 111.715846][ T6134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.821825][ T6143] syzkaller0: entered promiscuous mode [ 111.821859][ T6143] syzkaller0: entered allmulticast mode [ 111.907839][ T5920] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.974086][ T6152] netlink: 'syz.2.109': attribute type 2 has an invalid length. [ 111.986580][ T6152] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 112.037101][ T6134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.057734][ T5920] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 112.062907][ T5920] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 112.062954][ T5920] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 112.063011][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.111532][ T6140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 112.111771][ T6140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 112.123831][ C0] port100 6-1:1.0: NFC: Urb failure (status -71) [ 112.123896][ C0] port100 6-1:1.0: NFC: Urb failure (status -71) [ 112.140128][ T5920] port100 6-1:1.0: NFC: Could not get supported command types [ 112.319671][ T6134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.368631][ T5763] usb 6-1: USB disconnect, device number 2 [ 112.435388][ T6161] lo speed is unknown, defaulting to 1000 [ 112.533353][ T6134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.592614][ T6172] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 113.255331][ T3209] Bluetooth: Unknown control type 0x01 [ 113.630849][ T6210] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 114.476007][ T6240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.140'. [ 114.823812][ T6248] NFSD: Failed to start, no listeners configured. [ 114.965337][ T6260] IPVS: rr: UDP 127.0.0.1:8888 - no destination available [ 114.971220][ T1130] IPVS: starting estimator thread 0... [ 115.074970][ T6262] IPVS: using max 24 ests per chain, 57600 per kthread [ 115.262792][ T6257] svc: failed to register lockdv1 RPC service (errno 111). [ 115.497499][ T6257] svc: failed to register nfsdv3 RPC service (errno 111). [ 115.498612][ T6257] svc: failed to register nfsaclv3 RPC service (errno 111). [ 115.498640][ T6257] failed to unregister tcp with rpcbind [ 115.498847][ T6257] svc: failed to register nfsdv3 RPC service (errno 97). [ 115.498875][ T6257] svc: failed to register nfsaclv3 RPC service (errno 97). [ 115.498898][ T6257] failed to unregister tcp with rpcbind [ 116.154610][ T6306] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 116.187562][ T73] IPVS: starting estimator thread 0... [ 116.197653][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.161'. [ 116.211016][ T6304] IPVS: rr: UDP 127.0.0.1:8888 - no destination available [ 116.275965][ T6309] IPVS: using max 25 ests per chain, 60000 per kthread [ 116.548101][ T6326] tipc: Started in network mode [ 116.548149][ T6326] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 116.549577][ T6326] tipc: Enabled bearer , priority 0 [ 116.552813][ T6326] tipc: Rcv corrupt discovery message [ 117.129168][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 117.211310][ T6352] IPVS: rr: UDP 127.0.0.1:8888 - no destination available [ 117.332508][ T6356] lo speed is unknown, defaulting to 1000 [ 117.370117][ T6358] tipc: Started in network mode [ 117.370144][ T6358] tipc: Node identity 4, cluster identity 4711 [ 117.370164][ T6358] tipc: Node number set to 4 [ 117.398738][ T6358] tipc: Enabled bearer , priority 0 [ 117.677978][ T5735] tipc: Node number set to 43690 [ 118.484753][ T6391] x_tables: duplicate underflow at hook 3 [ 119.051077][ T6389] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 119.355199][ T6387] NFSD: Unable to initialize client recovery tracking! (-110) [ 119.355225][ T6387] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 119.355243][ T6387] NFSD: starting 90-second grace period (net f00004d4) [ 119.386589][ T6316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.826610][ T6433] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 119.831023][ T1115] IPVS: starting estimator thread 0... [ 119.916803][ T6434] IPVS: using max 27 ests per chain, 64800 per kthread [ 120.357640][ T6456] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 120.537665][ T6463] rdma_rxe: rxe_newlink: failed to add lo [ 120.553610][ T6465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'. [ 120.613833][ T6467] bridge0: port 3(batadv0) entered blocking state [ 120.614987][ T6467] bridge0: port 3(batadv0) entered disabled state [ 120.615173][ T6467] batadv0: entered allmulticast mode [ 120.621804][ T6467] batadv0: entered promiscuous mode [ 120.622623][ T6467] bridge0: port 3(batadv0) entered blocking state [ 120.622743][ T6467] bridge0: port 3(batadv0) entered forwarding state [ 120.733914][ T6436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.813172][ T6372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.893490][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.224'. [ 120.950675][ T6478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.223'. [ 121.045331][ T1425] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 121.045359][ T1425] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 121.138278][ T6486] NFSD: Failed to start, no listeners configured. [ 121.322056][ T6495] FAULT_INJECTION: forcing a failure. [ 121.322056][ T6495] name failslab, interval 1, probability 100, space 0, times 0 [ 121.322108][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.4.233 Not tainted syzkaller #0 PREEMPT(full) [ 121.322153][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 121.322176][ T6495] Call Trace: [ 121.322188][ T6495] [ 121.322203][ T6495] dump_stack_lvl+0x100/0x190 [ 121.322264][ T6495] should_fail_ex.cold+0x5/0xa [ 121.322309][ T6495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.322366][ T6495] should_failslab+0xc2/0x120 [ 121.322410][ T6495] kmem_cache_alloc_noprof+0x92/0x6a0 [ 121.322481][ T6495] ? net_alloc_generic+0x1e/0x70 [ 121.322522][ T6495] ? copy_net_ns+0xe8/0x7a0 [ 121.322574][ T6495] copy_net_ns+0xe8/0x7a0 [ 121.322615][ T6495] ? copy_cgroup_ns+0x71/0x970 [ 121.322671][ T6495] create_new_namespaces+0x3ea/0xac0 [ 121.322727][ T6495] unshare_nsproxy_namespaces+0xf2/0x220 [ 121.322779][ T6495] ksys_unshare+0x4a2/0xa70 [ 121.322824][ T6495] ? __pfx_ksys_unshare+0x10/0x10 [ 121.322866][ T6495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.322932][ T6495] __x64_sys_unshare+0x31/0x40 [ 121.322976][ T6495] do_syscall_64+0x123/0x790 [ 121.323030][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.323070][ T6495] RIP: 0033:0x7f142319e159 [ 121.323100][ T6495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.323138][ T6495] RSP: 002b:00007f142403e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 121.323175][ T6495] RAX: ffffffffffffffda RBX: 00007f1423425fa0 RCX: 00007f142319e159 [ 121.323202][ T6495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 121.323226][ T6495] RBP: 00007f142323506b R08: 0000000000000000 R09: 0000000000000000 [ 121.323250][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.323274][ T6495] R13: 00007f1423426038 R14: 00007f1423425fa0 R15: 00007ffd0dc0b128 [ 121.323325][ T6495] [ 121.974117][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 121.990022][ T6516] netlink: 64 bytes leftover after parsing attributes in process `syz.2.241'. [ 122.002275][ T6516] netlink: 72 bytes leftover after parsing attributes in process `syz.2.241'. [ 122.354992][ T73] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.486597][ T6536] svc: failed to register lockdv1 RPC service (errno 111). [ 122.520395][ T6547] rdma_rxe: rxe_newlink: failed to add dummy0 [ 122.550391][ T6549] netlink: 'syz.2.252': attribute type 2 has an invalid length. [ 122.692491][ T6557] 8021q: adding VLAN 0 to HW filter on device bat0 [ 122.751696][ T6536] svc: failed to register nfsdv3 RPC service (errno 111). [ 122.754257][ T6536] svc: failed to register nfsaclv3 RPC service (errno 111). [ 122.754283][ T6536] failed to unregister tcp with rpcbind [ 122.754478][ T6536] svc: failed to register nfsdv3 RPC service (errno 97). [ 122.754506][ T6536] svc: failed to register nfsaclv3 RPC service (errno 97). [ 122.754529][ T6536] failed to unregister tcp with rpcbind [ 123.104737][ T6576] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.144116][ T6578] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 123.156626][ T1425] IPVS: starting estimator thread 0... [ 123.215826][ T6538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.247078][ T6579] IPVS: using max 22 ests per chain, 52800 per kthread [ 123.421688][ T6589] tipc: Started in network mode [ 123.421718][ T6589] tipc: Node identity 1001001, cluster identity 4711 [ 123.421738][ T6589] tipc: Node number set to 16781313 [ 123.423081][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.262'. [ 123.424637][ T6589] tipc: New replicast peer: 127.0.0.1 [ 123.459074][ T6589] tipc: Enabled bearer , priority 10 [ 124.530740][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 124.532219][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 124.716255][ T6590] NFSD: Unable to initialize client recovery tracking! (-110) [ 124.716275][ T6590] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 124.716288][ T6590] NFSD: starting 90-second grace period (net f00003cc) [ 124.893331][ T6616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.108261][ T6649] FAULT_INJECTION: forcing a failure. [ 125.108261][ T6649] name failslab, interval 1, probability 100, space 0, times 0 [ 125.108328][ T6649] CPU: 0 UID: 0 PID: 6649 Comm: syz.1.277 Not tainted syzkaller #0 PREEMPT(full) [ 125.108374][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 125.108396][ T6649] Call Trace: [ 125.108408][ T6649] [ 125.108423][ T6649] dump_stack_lvl+0x100/0x190 [ 125.108490][ T6649] should_fail_ex.cold+0x5/0xa [ 125.108523][ T6649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.108563][ T6649] should_failslab+0xc2/0x120 [ 125.108596][ T6649] __kmalloc_cache_noprof+0x91/0x6d0 [ 125.108635][ T6649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.108672][ T6649] ? tunnel_key_init_net+0x56/0x270 [ 125.108722][ T6649] ? __pfx_tunnel_key_init_net+0x10/0x10 [ 125.108765][ T6649] tunnel_key_init_net+0x56/0x270 [ 125.108808][ T6649] ops_init+0x1e2/0x5f0 [ 125.108842][ T6649] setup_net+0x118/0x3a0 [ 125.108872][ T6649] ? __pfx_setup_net+0x10/0x10 [ 125.108904][ T6649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.108948][ T6649] copy_net_ns+0x345/0x7a0 [ 125.108985][ T6649] create_new_namespaces+0x3ea/0xac0 [ 125.109026][ T6649] unshare_nsproxy_namespaces+0xf2/0x220 [ 125.109062][ T6649] ksys_unshare+0x4a2/0xa70 [ 125.109096][ T6649] ? __pfx_ksys_unshare+0x10/0x10 [ 125.109127][ T6649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.109177][ T6649] __x64_sys_unshare+0x31/0x40 [ 125.109209][ T6649] do_syscall_64+0x123/0x790 [ 125.109249][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.109279][ T6649] RIP: 0033:0x7f6478d9e159 [ 125.109302][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.109330][ T6649] RSP: 002b:00007f6479c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 125.109358][ T6649] RAX: ffffffffffffffda RBX: 00007f6479025fa0 RCX: 00007f6478d9e159 [ 125.109377][ T6649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 125.109394][ T6649] RBP: 00007f6478e3506b R08: 0000000000000000 R09: 0000000000000000 [ 125.109412][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.109430][ T6649] R13: 00007f6479026038 R14: 00007f6479025fa0 R15: 00007ffd8259fb78 [ 125.109474][ T6649] [ 126.098310][ T6592] NFSD: Unable to initialize client recovery tracking! (-110) [ 126.098335][ T6592] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 126.098353][ T6592] NFSD: starting 90-second grace period (net f00004d5) [ 126.536494][ T6689] svc: failed to register lockdv1 RPC service (errno 111). [ 126.762324][ T6689] svc: failed to register nfsdv3 RPC service (errno 111). [ 126.774232][ T6689] svc: failed to register nfsaclv3 RPC service (errno 111). [ 126.774259][ T6689] failed to unregister tcp with rpcbind [ 126.774450][ T6689] svc: failed to register nfsdv3 RPC service (errno 97). [ 126.774477][ T6689] svc: failed to register nfsaclv3 RPC service (errno 97). [ 126.774500][ T6689] failed to unregister tcp with rpcbind [ 127.031712][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 127.058575][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.294'. [ 127.430216][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 127.446055][ T6733] netlink: 56 bytes leftover after parsing attributes in process `syz.0.298'. [ 127.518105][ T5743] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 127.675750][ T5743] usb 4-1: Invalid ep0 maxpacket: 64 [ 127.806259][ T5743] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 127.865631][ T6754] batman_adv: batadv0: Adding interface: veth0 [ 127.865658][ T6754] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.865708][ T6754] batman_adv: batadv0: Interface activated: veth0 [ 127.966490][ T5743] usb 4-1: Invalid ep0 maxpacket: 64 [ 127.970077][ T5743] usb usb4-port1: attempt power cycle [ 128.191404][ T6763] NFSD: Failed to start, no listeners configured. [ 128.314964][ T5743] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 128.339390][ T5743] usb 4-1: Invalid ep0 maxpacket: 64 [ 128.475295][ T5743] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 128.497891][ T5743] usb 4-1: Invalid ep0 maxpacket: 64 [ 128.498182][ T5743] usb usb4-port1: unable to enumerate USB device [ 128.612324][ T31] audit: type=1804 audit(1790793037.379:3): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.318" name="/newroot/47/nfsd/versions" dev="nfsd" ino=12 res=1 errno=0 [ 128.740784][ T6789] netlink: 'syz.4.321': attribute type 2 has an invalid length. [ 128.757277][ T6789] : entered promiscuous mode [ 128.943031][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 129.436844][ T6802] FAULT_INJECTION: forcing a failure. [ 129.436844][ T6802] name fail_futex, interval 1, probability 0, space 0, times 1 [ 129.436889][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(full) [ 129.436922][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 129.436940][ T6802] Call Trace: [ 129.436950][ T6802] [ 129.436961][ T6802] dump_stack_lvl+0x100/0x190 [ 129.437006][ T6802] should_fail_ex.cold+0x5/0xa [ 129.437045][ T6802] get_futex_key+0x1d0/0x14f0 [ 129.437087][ T6802] ? __pfx_get_futex_key+0x10/0x10 [ 129.437121][ T6802] ? get_pid_task+0x2a/0x250 [ 129.437159][ T6802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.437194][ T6802] ? find_held_lock+0x2b/0x80 [ 129.437235][ T6802] ? get_pid_task+0xfc/0x250 [ 129.437271][ T6802] ? get_pid_task+0xfc/0x250 [ 129.437305][ T6802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.437349][ T6802] futex_wake+0xf4/0x5e0 [ 129.437412][ T6802] ? find_held_lock+0x2b/0x80 [ 129.437456][ T6802] ? __pfx_futex_wake+0x10/0x10 [ 129.437500][ T6802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.437541][ T6802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.437575][ T6802] ? rcu_read_lock_any_held+0x6a/0x90 [ 129.437618][ T6802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.437653][ T6802] ? find_held_lock+0x2b/0x80 [ 129.437693][ T6802] ? ksys_write+0x190/0x250 [ 129.437738][ T6802] ? ksys_write+0x190/0x250 [ 129.437800][ T6802] do_futex+0x2b2/0x440 [ 129.437861][ T6802] ? __pfx_do_futex+0x10/0x10 [ 129.437903][ T6802] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.437948][ T6802] __x64_sys_futex+0x34f/0x4d0 [ 129.437991][ T6802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.438026][ T6802] ? fput+0x7c/0x100 [ 129.438058][ T6802] ? __pfx___x64_sys_futex+0x10/0x10 [ 129.438097][ T6802] ? ksys_write+0x1ac/0x250 [ 129.438142][ T6802] ? __pfx_ksys_write+0x10/0x10 [ 129.438190][ T6802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.438231][ T6802] do_syscall_64+0x123/0x790 [ 129.438271][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.438301][ T6802] RIP: 0033:0x7f142319e159 [ 129.438324][ T6802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.438357][ T6802] RSP: 002b:00007f142403e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.438384][ T6802] RAX: ffffffffffffffda RBX: 00007f1423425fa8 RCX: 00007f142319e159 [ 129.438404][ T6802] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1423425fac [ 129.438422][ T6802] RBP: 00007f1423425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 129.438440][ T6802] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 129.438457][ T6802] R13: 00007f1423426038 R14: 00007ffd0dc0b040 R15: 00007ffd0dc0b128 [ 129.438496][ T6802] [ 129.539551][ T6802] lo speed is unknown, defaulting to 1000 [ 129.709473][ T6775] NFSD: Unable to initialize client recovery tracking! (-110) [ 129.709496][ T6775] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 129.709514][ T6775] NFSD: starting 90-second grace period (net f00004ea) [ 130.462820][ T6818] tipc: Enabled bearer , priority 10 [ 130.463384][ T6818] tipc: Enabled bearer , priority 10 [ 130.498658][ T6817] tipc: Resetting bearer [ 130.533341][ T6817] tipc: Disabling bearer [ 130.543475][ T73] IPVS: starting estimator thread 0... [ 130.559430][ T6817] tipc: Resetting bearer [ 130.589402][ T6817] tipc: Disabling bearer [ 130.625024][ T6823] IPVS: using max 24 ests per chain, 57600 per kthread [ 131.196495][ T6830] tipc: Enabling of bearer rejected, already enabled [ 131.320494][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 132.268514][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.268621][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.483455][ T6850] FAULT_INJECTION: forcing a failure. [ 132.483455][ T6850] name fail_futex, interval 1, probability 0, space 0, times 0 [ 132.483495][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.4.346 Not tainted syzkaller #0 PREEMPT(full) [ 132.483529][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 132.483546][ T6850] Call Trace: [ 132.483556][ T6850] [ 132.483567][ T6850] dump_stack_lvl+0x100/0x190 [ 132.483613][ T6850] should_fail_ex.cold+0x5/0xa [ 132.483653][ T6850] get_futex_key+0x1d0/0x14f0 [ 132.483696][ T6850] ? __pfx_get_futex_key+0x10/0x10 [ 132.483731][ T6850] ? get_pid_task+0x2a/0x250 [ 132.483770][ T6850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.483807][ T6850] ? find_held_lock+0x2b/0x80 [ 132.483848][ T6850] ? get_pid_task+0xfc/0x250 [ 132.483887][ T6850] ? get_pid_task+0xfc/0x250 [ 132.483923][ T6850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.483967][ T6850] futex_wake+0xf4/0x5e0 [ 132.484017][ T6850] ? find_held_lock+0x2b/0x80 [ 132.484059][ T6850] ? __pfx_futex_wake+0x10/0x10 [ 132.484104][ T6850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.484146][ T6850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.484182][ T6850] ? rcu_read_lock_any_held+0x6a/0x90 [ 132.484227][ T6850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.484262][ T6850] ? find_held_lock+0x2b/0x80 [ 132.484304][ T6850] ? ksys_write+0x190/0x250 [ 132.484349][ T6850] ? ksys_write+0x190/0x250 [ 132.484405][ T6850] do_futex+0x2b2/0x440 [ 132.484447][ T6850] ? __pfx_do_futex+0x10/0x10 [ 132.484490][ T6850] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.484536][ T6850] __x64_sys_futex+0x34f/0x4d0 [ 132.484579][ T6850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.484614][ T6850] ? fput+0x7c/0x100 [ 132.484645][ T6850] ? __pfx___x64_sys_futex+0x10/0x10 [ 132.484685][ T6850] ? ksys_write+0x1ac/0x250 [ 132.484730][ T6850] ? __pfx_ksys_write+0x10/0x10 [ 132.484785][ T6850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.484844][ T6850] do_syscall_64+0x123/0x790 [ 132.484898][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.484939][ T6850] RIP: 0033:0x7f142319e159 [ 132.484969][ T6850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.485007][ T6850] RSP: 002b:00007f142403e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.485044][ T6850] RAX: ffffffffffffffda RBX: 00007f1423425fa8 RCX: 00007f142319e159 [ 132.485071][ T6850] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1423425fac [ 132.485095][ T6850] RBP: 00007f1423425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 132.485120][ T6850] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 132.485144][ T6850] R13: 00007f1423426038 R14: 00007ffd0dc0b040 R15: 00007ffd0dc0b128 [ 132.485198][ T6850] [ 132.577977][ T6850] lo speed is unknown, defaulting to 1000 [ 133.955103][ T6784] NFSD: Unable to initialize client recovery tracking! (-110) [ 133.955136][ T6784] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 133.955158][ T6784] NFSD: starting 90-second grace period (net f0000452) [ 135.155066][ T6799] NFSD: Unable to initialize client recovery tracking! (-110) [ 135.155093][ T6799] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 135.155111][ T6799] NFSD: starting 90-second grace period (net f00004d4) [ 136.096913][ T5630] Bluetooth: hci3: link tx timeout [ 136.097293][ T5630] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.654978][ T6845] NFSD: Unable to initialize client recovery tracking! (-110) [ 136.655000][ T6845] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 136.655015][ T6845] NFSD: starting 90-second grace period (net f00004d5) [ 137.084503][ T6905] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 137.364212][ T6915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.055943][ T6949] lo speed is unknown, defaulting to 1000 [ 138.175360][ T4932] Bluetooth: hci3: command 0x0406 tx timeout [ 138.460278][ T6964] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 138.495725][ T6962] netlink: 1 bytes leftover after parsing attributes in process `syz.0.380'. [ 138.845027][ T6981] PM: suspend entry (s2idle) [ 139.061766][ T82] Filesystems sync: 0.208 seconds [ 139.540986][ T5630] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 139.541417][ T5630] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 139.576929][ T6972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.659151][ T6981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.659454][ T6981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.719834][ T6981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.736273][ T6981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.736364][ T6981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.780380][ T6981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.795924][ T6981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.796023][ T6981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.942216][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 139.952503][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 139.961528][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 139.989055][ T6981] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.989129][ T6981] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.008280][ T6981] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.054129][ T6981] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 140.054357][ T6981] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 140.881175][ T5616] svc: failed to register nfsdv3 RPC service (errno 111). [ 140.882863][ T5616] svc: failed to register nfsaclv3 RPC service (errno 111). [ 140.882891][ T5616] failed to unregister tcp with rpcbind [ 140.883100][ T5616] svc: failed to register nfsdv3 RPC service (errno 97). [ 140.883127][ T5616] svc: failed to register nfsaclv3 RPC service (errno 97). [ 140.883150][ T5616] failed to unregister tcp with rpcbind [ 141.295695][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.369731][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.412'. [ 141.369773][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.412'. [ 141.427099][ T5630] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 141.427690][ T5630] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 141.608445][ T7070] rdma_rxe: rxe_newlink: failed to add lo [ 141.692262][ T7070] smc: removing ib device syz0 [ 141.786389][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.830867][ T7070] smbdirect: ib_dev[syz0] removed [ 141.855519][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 142.094967][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout [ 142.496677][ T7061] NFSD: Unable to initialize client recovery tracking! (-110) [ 142.496707][ T7061] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 142.496725][ T7061] NFSD: starting 90-second grace period (net f0000452) [ 143.348320][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880511a3c00: rx timeout, send abort [ 143.350651][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880511a3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 143.381760][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.857307][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.935605][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 143.985086][ T5920] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.145927][ T5920] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 144.151963][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.152034][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 144.152084][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 144.152148][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.175012][ T7081] NFSD: Unable to initialize client recovery tracking! (-110) [ 144.175038][ T7081] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 144.175055][ T7081] NFSD: starting 90-second grace period (net f00004ea) [ 144.175826][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout [ 145.245410][ T7149] tipc: Enabling of bearer rejected, already enabled [ 145.459892][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.945600][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.255993][ T5920] cxacru 4-1:1.0: send of cm 0x90 failed (-104) [ 146.272152][ T7192] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 146.517323][ T7205] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 146.519462][ T7205] netlink: 33 bytes leftover after parsing attributes in process `syz.2.443'. [ 146.520087][ T7205] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 146.521259][ T7205] ksmbd: Unknown IPC event: 10, ignore. [ 146.522196][ T7205] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 146.813575][ T5735] usb 4-1: USB disconnect, device number 6 [ 147.342957][ T4932] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 147.378708][ T4932] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 147.573898][ T7245] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 147.574078][ T7245] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 147.582081][ T7245] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 147.582214][ T7245] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 147.608159][ T7245] hsr_slave_0: left promiscuous mode [ 147.609549][ T7245] hsr_slave_1: left promiscuous mode [ 148.302505][ T7267] NFSD: Failed to start, no listeners configured. [ 148.392038][ T7273] netlink: 76 bytes leftover after parsing attributes in process `syz.1.464'. [ 148.688102][ T7264] NFSD: Failed to start, no listeners configured. [ 149.147280][ T7298] NFSD: Failed to start, no listeners configured. [ 149.182526][ T4932] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 149.184501][ T4932] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 149.308769][ T7307] bridge0: port 3(syz_tun) tried to become root port (blocked) [ 149.309564][ T7307] bridge0: port 3(syz_tun) entered listening state [ 149.396611][ T7314] batman_adv: batadv0: Adding interface: syz_tun [ 149.396637][ T7314] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.396687][ T7314] batman_adv: batadv0: Interface activated: syz_tun [ 149.878021][ T7332] svc: failed to register lockdv1 RPC service (errno 111). [ 150.063431][ T7332] svc: failed to register nfsdv3 RPC service (errno 111). [ 150.078535][ T7332] svc: failed to register nfsaclv3 RPC service (errno 111). [ 150.078566][ T7332] failed to unregister udp with rpcbind [ 150.078739][ T7332] svc: failed to register nfsdv3 RPC service (errno 97). [ 150.078765][ T7332] svc: failed to register nfsaclv3 RPC service (errno 97). [ 150.078787][ T7332] failed to unregister udp with rpcbind [ 150.238252][ T7316] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.831214][ T7376] lo speed is unknown, defaulting to 1000 [ 150.845530][ T7376] lo speed is unknown, defaulting to 1000 [ 150.864470][ T7376] lo speed is unknown, defaulting to 1000 [ 150.946248][ T5630] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 150.946866][ T5630] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 151.092359][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 151.265650][ T30] lo speed is unknown, defaulting to 1000 [ 151.265731][ T7376] infiniband syz0: set active [ 151.265756][ T7376] infiniband syz0: added lo [ 151.286886][ T7376] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 151.286979][ T7376] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 151.287060][ T7376] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 151.336626][ T7376] RDS/IB: syz0: added [ 151.336690][ T7376] smc: adding ib device syz0 with port count 1 [ 151.336717][ T7376] smc: ib device syz0 port 1 has no pnetid [ 151.336805][ T5743] lo speed is unknown, defaulting to 1000 [ 151.355923][ T7376] lo speed is unknown, defaulting to 1000 [ 151.394495][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 151.767817][ T7404] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 151.774100][ T1425] IPVS: starting estimator thread 0... [ 151.842474][ T7376] lo speed is unknown, defaulting to 1000 [ 151.878150][ T7405] IPVS: using max 24 ests per chain, 57600 per kthread [ 152.082827][ T7413] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.282358][ T7376] lo speed is unknown, defaulting to 1000 [ 152.513092][ T4932] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 152.513634][ T4932] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 152.727821][ T7376] lo speed is unknown, defaulting to 1000 [ 153.269725][ T7376] lo speed is unknown, defaulting to 1000 [ 153.504737][ T7462] svc: failed to register lockdv1 RPC service (errno 111). [ 153.586688][ T7376] lo speed is unknown, defaulting to 1000 [ 153.800737][ T7462] svc: failed to register nfsdv3 RPC service (errno 111). [ 153.802258][ T7462] svc: failed to register nfsaclv3 RPC service (errno 111). [ 153.802286][ T7462] failed to unregister tcp with rpcbind [ 153.802524][ T7462] svc: failed to register nfsdv3 RPC service (errno 97). [ 153.802551][ T7462] svc: failed to register nfsaclv3 RPC service (errno 97). [ 153.802575][ T7462] failed to unregister tcp with rpcbind [ 153.858049][ T7459] rdma_rxe: rxe_newlink: failed to add eth0 [ 154.344192][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.348091][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.349087][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.350162][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.350916][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.514730][ T7495] NFSD: Failed to start, no listeners configured. [ 154.667306][ T4932] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 154.668104][ T4932] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 154.868104][ T7510] svc: failed to register lockdv1 RPC service (errno 111). [ 154.920621][ T7489] lo speed is unknown, defaulting to 1000 [ 155.053578][ T7510] svc: failed to register nfsdv3 RPC service (errno 111). [ 155.055155][ T7510] svc: failed to register nfsaclv3 RPC service (errno 111). [ 155.055179][ T7510] failed to unregister udp with rpcbind [ 155.055372][ T7510] svc: failed to register nfsdv3 RPC service (errno 97). [ 155.055399][ T7510] svc: failed to register nfsaclv3 RPC service (errno 97). [ 155.055421][ T7510] failed to unregister udp with rpcbind [ 155.290598][ T7423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.406316][ T7518] tipc: Started in network mode [ 155.406349][ T7518] tipc: Node identity 1001002, cluster identity 4711 [ 155.406370][ T7518] tipc: Node number set to 16781314 [ 155.422984][ T7515] tipc: Enabled bearer , priority 10 [ 155.429635][ T7515] tipc: Enabled bearer , priority 10 [ 155.469499][ T7514] tipc: Resetting bearer [ 155.534719][ T7514] tipc: Disabling bearer [ 155.618590][ T7514] tipc: Resetting bearer [ 155.664354][ T7514] tipc: Disabling bearer [ 155.734474][ T7523] syzkaller0: entered promiscuous mode [ 155.734509][ T7523] syzkaller0: entered allmulticast mode [ 155.867141][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 156.060975][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 156.273144][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 156.287091][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 156.287275][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 156.287420][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 156.287544][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 156.301489][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.301689][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.301884][ T7489] bridge_slave_0: entered allmulticast mode [ 156.304078][ T7489] bridge_slave_0: entered promiscuous mode [ 156.310226][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.310428][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.310894][ T7489] bridge_slave_1: entered allmulticast mode [ 156.314500][ T7489] bridge_slave_1: entered promiscuous mode [ 156.388985][ T7489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.406750][ T7489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.416044][ T4932] Bluetooth: hci6: command tx timeout [ 156.468031][ T7489] team0: Port device team_slave_0 added [ 156.471344][ T7489] team0: Port device team_slave_1 added [ 156.521066][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.521093][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.521139][ T7489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.522862][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.522884][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.522929][ T7489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.682823][ T7489] hsr_slave_0: entered promiscuous mode [ 156.684011][ T7489] hsr_slave_1: entered promiscuous mode [ 156.697226][ T7489] debugfs: 'hsr0' already exists in 'hsr' [ 156.697261][ T7489] Cannot create hsr debugfs directory [ 156.731293][ T4932] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 156.732018][ T4932] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 156.957829][ T7550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.958273][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 156.962907][ T7489] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.995682][ T7489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 156.996833][ T7489] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.023791][ T7489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.034464][ T7489] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.052478][ T7489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.053707][ T7489] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.085656][ T7489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.280179][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.365604][ T7489] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.391099][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.391226][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.447763][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.447889][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.882173][ T7605] NFSD: Failed to start, no listeners configured. [ 157.931542][ T7606] tipc: Enabled bearer , priority 0 [ 157.982400][ T7612] syz0: rxe_newlink: already configured on lo [ 158.387244][ T5630] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 158.387905][ T5630] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 158.504848][ T5630] Bluetooth: hci6: command tx timeout [ 158.693667][ T7645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.587'. [ 158.693701][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 158.693722][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 158.871071][ T7655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.588'. [ 159.003338][ T7662] digital: digital_start_poll: Unknown protocol [ 159.116530][ T7489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.277696][ T7671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.593'. [ 159.281438][ T7671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.593'. [ 159.288961][ T7668] NFSD: Failed to start, no listeners configured. [ 159.339603][ T7671] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 159.340089][ T7671] openvswitch: netlink: Message has 8 unknown bytes. [ 159.342326][ T7671] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 159.368556][ T7671] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 159.368588][ T7671] netlink: 'syz.1.593': attribute type 2 has an invalid length. [ 159.385587][ T7671] openvswitch: netlink: Message has 42 unknown bytes. [ 159.396000][ T7671] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 159.396478][ T7671] netlink: zone id is out of range [ 159.396495][ T7671] netlink: zone id is out of range [ 159.396507][ T7671] netlink: zone id is out of range [ 159.396520][ T7671] netlink: get zone limit has 8 unknown bytes [ 159.397449][ T7671] netlink: 64 bytes leftover after parsing attributes in process `syz.1.593'. [ 159.680785][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.680821][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.705167][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.705200][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.214545][ T5630] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 160.227914][ T5630] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 160.254997][ T4932] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 160.314973][ T7711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.315009][ T7711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.320705][ T7711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.320736][ T7711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.556555][ T7489] veth0_vlan: entered promiscuous mode [ 160.575273][ T4932] Bluetooth: hci6: command tx timeout [ 160.577083][ T7489] veth1_vlan: entered promiscuous mode [ 160.724093][ T7489] veth0_macvtap: entered promiscuous mode [ 160.741363][ T7489] veth1_macvtap: entered promiscuous mode [ 160.755371][ T4932] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 160.755916][ T4932] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 160.787906][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.815985][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.991690][ T1425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.995099][ T1425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.995172][ T1425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.995231][ T1425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.124289][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.124321][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.198886][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.198920][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.206993][ T7737] tipc: Enabled bearer , priority 0 [ 161.242818][ T7737] tipc: Disabling bearer [ 161.261053][ T7739] rdma_rxe: rxe_newlink: failed to add veth0 [ 161.292700][ T7739] smc: net device lo applied user defined pnetid SYZ0 [ 161.340879][ T7742] netlink: 'syz.1.614': attribute type 2 has an invalid length. [ 161.355288][ T7742] __nla_validate_parse: 5 callbacks suppressed [ 161.355318][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 161.589546][ T7749] qrtr: Invalid version 0 [ 162.138971][ T5630] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 162.300941][ T7489] svc: failed to register nfsdv3 RPC service (errno 111). [ 162.302129][ T7489] svc: failed to register nfsaclv3 RPC service (errno 111). [ 162.302156][ T7489] failed to unregister udp with rpcbind [ 162.302328][ T7489] svc: failed to register nfsdv3 RPC service (errno 97). [ 162.302354][ T7489] svc: failed to register nfsaclv3 RPC service (errno 97). [ 162.302376][ T7489] failed to unregister udp with rpcbind [ 162.408889][ T7784] NFSD: Failed to start, no listeners configured. [ 162.644909][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 162.734088][ T7798] syz_tun: entered allmulticast mode [ 162.756810][ T7798] pimreg: entered allmulticast mode [ 162.775019][ T7797] syz_tun: left allmulticast mode [ 162.775282][ T7797] pimreg: left allmulticast mode [ 163.047357][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.047396][ T7811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.071864][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.071940][ T7811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.090143][ T7811] batman_adv: batadv0: Interface deactivated: syz_tun [ 163.090176][ T7811] batman_adv: batadv0: Removing interface: syz_tun [ 163.234749][ T7817] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.315091][ T7814] NFSD: Unable to initialize client recovery tracking! (-110) [ 164.315117][ T7814] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 164.315135][ T7814] NFSD: starting 90-second grace period (net f0000452) [ 164.547433][ T7820] NFSD: Failed to start, no listeners configured. [ 164.769448][ T7826] lo speed is unknown, defaulting to 1000 [ 164.897075][ C1] bridge0: port 3(syz_tun) entered learning state [ 165.128914][ T7774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.338994][ T4932] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 165.507417][ T7788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.065121][ T7831] NFSD: Unable to initialize client recovery tracking! (-110) [ 166.065148][ T7831] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 166.065166][ T7831] NFSD: starting 90-second grace period (net f00004d4) [ 167.275214][ T7909] netlink: 'syz.5.674': attribute type 3 has an invalid length. [ 167.437647][ T7913] batman_adv: batadv0: Adding interface: veth0 [ 167.437673][ T7913] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.437722][ T7913] batman_adv: batadv0: Interface activated: veth0 [ 167.990450][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 167.991125][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 167.991514][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 167.992411][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 167.992973][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 167.999651][ T7925] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.102883][ T7194] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 168.103260][ T6058] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 168.173008][ T5968] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 168.215025][ T6981] Freezing user space processes [ 168.636223][ T7916] NFSD: Unable to initialize client recovery tracking! (-110) [ 168.636254][ T7916] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 168.636276][ T7916] NFSD: starting 90-second grace period (net f00004ea) [ 180.254866][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 180.254893][ C1] bridge0: topology change detected, propagating [ 188.229744][ T6981] Freezing user space processes failed after 20.014 seconds (1 tasks refusing to freeze, wq_busy=0): [ 188.229877][ T6981] task:syz-executor state:S stack:23176 pid:5620 tgid:5620 ppid:1 task_flags:0x40054c flags:0x00080001 [ 188.229970][ T6981] Call Trace: [ 188.229980][ T6981] [ 188.229997][ T6981] __schedule+0x1259/0x6920 [ 188.230032][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.230069][ T6981] ? __lock_acquire+0x5c0/0x1f40 [ 188.230117][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.230153][ T6981] ? lock_acquire+0x1d1/0x380 [ 188.230186][ T6981] ? __pfx___schedule+0x10/0x10 [ 188.230216][ T6981] ? find_held_lock+0x2b/0x80 [ 188.230259][ T6981] ? schedule+0x225/0x2c0 [ 188.230288][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.230331][ T6981] schedule+0xdd/0x2c0 [ 188.230363][ T6981] do_wait+0x1a7/0x570 [ 188.230407][ T6981] kernel_wait4+0x16d/0x280 [ 188.230448][ T6981] ? __pfx_kernel_wait4+0x10/0x10 [ 188.230486][ T6981] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.230527][ T6981] ? __pfx_child_wait_callback+0x10/0x10 [ 188.230565][ T6981] ? find_held_lock+0x2b/0x80 [ 188.230607][ T6981] ? zap_pid_ns_processes+0x286/0x6a0 [ 188.230647][ T6981] ? zap_pid_ns_processes+0x286/0x6a0 [ 188.230686][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.230730][ T6981] zap_pid_ns_processes+0x2ca/0x6a0 [ 188.230770][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.230807][ T6981] ? do_raw_write_lock+0x11e/0x260 [ 188.230846][ T6981] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 188.230886][ T6981] ? do_exit+0x218e/0x2a50 [ 188.230922][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.230963][ T6981] ? rcu_is_watching+0x13/0xc0 [ 188.231010][ T6981] do_exit+0x2300/0x2a50 [ 188.231047][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.231089][ T6981] ? __pfx_do_exit+0x10/0x10 [ 188.231126][ T6981] ? do_raw_spin_lock+0x128/0x260 [ 188.231163][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.231199][ T6981] ? find_held_lock+0x2b/0x80 [ 188.231240][ T6981] ? get_signal+0x7e0/0x21e0 [ 188.231275][ T6981] do_group_exit+0xd5/0x2a0 [ 188.231317][ T6981] get_signal+0x1ec7/0x21e0 [ 188.231362][ T6981] ? __pfx_get_signal+0x10/0x10 [ 188.231404][ T6981] arch_do_signal_or_restart+0x91/0x7e0 [ 188.231447][ T6981] ? __pfx___do_sys_wait4+0x10/0x10 [ 188.231489][ T6981] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 188.231549][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.231592][ T6981] exit_to_user_mode_loop+0x139/0x700 [ 188.231628][ T6981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.231664][ T6981] ? rcu_is_watching+0x13/0xc0 [ 188.231708][ T6981] do_syscall_64+0x661/0x790 [ 188.231749][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.231781][ T6981] RIP: 0033:0x7f142315e98e [ 188.231805][ T6981] RSP: 002b:00007ffd0dc0b428 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 188.231833][ T6981] RAX: fffffffffffffe00 RBX: 0000555563f55500 RCX: 00007f142315e98e [ 188.231853][ T6981] RDX: 0000000040000000 RSI: 00007ffd0dc0b4cc RDI: ffffffffffffffff [ 188.231873][ T6981] RBP: 00007ffd0dc0b4cc R08: 0000000000000000 R09: 0000000000000000 [ 188.231892][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004f [ 188.231911][ T6981] R13: 0000555563f68a00 R14: 000000000002216d R15: 00007ffd0dc0b520 [ 188.231976][ T6981] [ 188.233028][ T6981] OOM killer enabled. [ 188.233040][ T6981] Restarting tasks: Starting [ 188.270370][ T6981] Restarting tasks: Done [ 188.270594][ T6981] random: crng reseeded on system resumption [ 188.430824][ T6981] hwrng_fill thread creation failed [ 188.485862][ T6981] PM: suspend exit [ 188.792661][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.804042][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.812303][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.824861][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.825567][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.566593][ T5630] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 189.574448][ T5630] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 189.592570][ T5630] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 189.603463][ T5630] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 189.604430][ T5630] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 190.085540][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.102692][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.110316][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.114433][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.129509][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.262214][ T5624] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 190.263745][ T5624] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 190.264430][ T5624] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 190.272952][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 190.290056][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 190.295492][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 190.296584][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 190.297313][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 190.336365][ T4932] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 190.337093][ T4932] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 190.598106][ T6981] tipc: Resetting bearer [ 190.840525][ T6981] tipc: Disabling bearer [ 190.895208][ T4932] Bluetooth: hci7: command tx timeout [ 190.994723][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.998425][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.024957][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.028006][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.033340][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.168119][ T5615] tipc: Resetting bearer [ 191.281021][ T5615] tipc: Disabling bearer [ 191.362974][ T5617] tipc: Resetting bearer [ 191.444653][ T5617] tipc: Disabling bearer [ 191.695718][ T5630] Bluetooth: hci8: command tx timeout [ 191.701969][ T1130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.850033][ T5614] bridge0: port 3(syz_tun) entered disabled state [ 191.877208][ T5614] syz_tun (unregistering): left allmulticast mode [ 191.877245][ T5614] syz_tun (unregistering): left promiscuous mode [ 191.877329][ T5614] bridge0: port 3(syz_tun) entered disabled state [ 192.048354][ T1130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.090209][ T7948] lo speed is unknown, defaulting to 1000 [ 192.177152][ T5630] Bluetooth: hci2: command tx timeout [ 192.222111][ T1130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.336597][ T5630] Bluetooth: hci9: command tx timeout [ 192.420508][ T5630] Bluetooth: hci10: command tx timeout [ 192.441358][ T1130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.869431][ T7957] lo speed is unknown, defaulting to 1000 [ 192.940798][ T1130] batadv0: left allmulticast mode [ 192.940853][ T1130] batadv0: left promiscuous mode [ 192.943615][ T1130] bridge0: port 3(batadv0) entered disabled state [ 192.967033][ T1130] bridge_slave_1: left allmulticast mode [ 192.967081][ T1130] bridge_slave_1: left promiscuous mode [ 192.967348][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.976131][ T5630] Bluetooth: hci7: command tx timeout [ 192.978807][ T1130] bridge_slave_0: left allmulticast mode [ 192.978839][ T1130] bridge_slave_0: left promiscuous mode [ 192.979070][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.135103][ T5630] Bluetooth: hci0: command tx timeout [ 193.250505][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.253555][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.268019][ T1130] bond0 (unregistering): Released all slaves [ 193.314403][ T7962] lo speed is unknown, defaulting to 1000 [ 193.358572][ T1130] : left promiscuous mode [ 193.485640][ T1130] tipc: Left network mode [ 193.501221][ T1130] IPVS: stopping master sync thread 6306 ... [ 193.697815][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.697893][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.776473][ T5630] Bluetooth: hci8: command tx timeout [ 193.892449][ T7968] lo speed is unknown, defaulting to 1000 [ 194.255012][ T5630] Bluetooth: hci2: command tx timeout [ 194.358478][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 194.415371][ T5630] Bluetooth: hci9: command tx timeout [ 194.417659][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.417837][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.418171][ T7948] bridge_slave_0: entered allmulticast mode [ 194.419771][ T7948] bridge_slave_0: entered promiscuous mode [ 194.449766][ T7980] lo speed is unknown, defaulting to 1000 [ 194.469149][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.469318][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.469482][ T7948] bridge_slave_1: entered allmulticast mode [ 194.471914][ T7948] bridge_slave_1: entered promiscuous mode [ 194.496808][ T5630] Bluetooth: hci10: command tx timeout [ 194.626862][ T7948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.721297][ T7948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.928705][ T7948] team0: Port device team_slave_0 added [ 194.954153][ T7965] lo speed is unknown, defaulting to 1000 [ 195.043344][ T7948] team0: Port device team_slave_1 added [ 195.056439][ T5630] Bluetooth: hci7: command tx timeout [ 195.215025][ T5630] Bluetooth: hci0: command tx timeout [ 195.410464][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.410489][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.410543][ T7948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.509146][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.509172][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.509217][ T7948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.662650][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.663403][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.663602][ T7957] bridge_slave_0: entered allmulticast mode [ 195.667301][ T7957] bridge_slave_0: entered promiscuous mode [ 195.670767][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.670934][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.671109][ T7957] bridge_slave_1: entered allmulticast mode [ 195.673348][ T7957] bridge_slave_1: entered promiscuous mode [ 195.855051][ T5630] Bluetooth: hci8: command tx timeout [ 195.860463][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 195.968446][ T1130] hsr_slave_0: left promiscuous mode [ 195.969180][ T1130] hsr_slave_1: left promiscuous mode [ 195.969964][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.970001][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.971078][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.971099][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.971880][ T1130] batman_adv: batadv0: Interface deactivated: veth0 [ 195.971902][ T1130] batman_adv: batadv0: Removing interface: veth0 [ 195.996759][ T1130] veth1_macvtap: left promiscuous mode [ 195.996844][ T1130] veth0_macvtap: left promiscuous mode [ 195.996984][ T1130] veth1_vlan: left promiscuous mode [ 195.998441][ T1130] veth0_vlan: left promiscuous mode [ 196.286392][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 196.307332][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 196.335319][ T5630] Bluetooth: hci2: command tx timeout [ 196.460754][ T7957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.495185][ T5630] Bluetooth: hci9: command tx timeout [ 196.564109][ T7957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.575102][ T5630] Bluetooth: hci10: command tx timeout [ 196.609194][ T7948] hsr_slave_0: entered promiscuous mode [ 196.610256][ T7948] hsr_slave_1: entered promiscuous mode [ 196.728703][ T7957] team0: Port device team_slave_0 added [ 196.795223][ T7957] team0: Port device team_slave_1 added [ 196.835539][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.835566][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.835610][ T7957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.925941][ T1130] IPVS: stop unused estimator thread 0... [ 196.937537][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.937561][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.937606][ T7957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.947943][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.948143][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.948321][ T7962] bridge_slave_0: entered allmulticast mode [ 196.951993][ T7962] bridge_slave_0: entered promiscuous mode [ 197.043351][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.043480][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.043644][ T7962] bridge_slave_1: entered allmulticast mode [ 197.046747][ T7962] bridge_slave_1: entered promiscuous mode [ 197.137658][ T5630] Bluetooth: hci7: command tx timeout [ 197.261830][ T7962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.289655][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.289848][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.290057][ T7968] bridge_slave_0: entered allmulticast mode [ 197.292187][ T7968] bridge_slave_0: entered promiscuous mode [ 197.305730][ T5630] Bluetooth: hci0: command tx timeout [ 197.378706][ T7962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.468355][ T1130] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.493477][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.493654][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.493846][ T7968] bridge_slave_1: entered allmulticast mode [ 197.518335][ T7968] bridge_slave_1: entered promiscuous mode [ 197.570804][ T7957] hsr_slave_0: entered promiscuous mode [ 197.571971][ T7957] hsr_slave_1: entered promiscuous mode [ 197.572827][ T7957] debugfs: 'hsr0' already exists in 'hsr' [ 197.572854][ T7957] Cannot create hsr debugfs directory [ 197.706648][ T7962] team0: Port device team_slave_0 added [ 197.754602][ T7968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.817769][ T1130] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.850821][ T7962] team0: Port device team_slave_1 added [ 197.935718][ T5630] Bluetooth: hci8: command tx timeout [ 197.947129][ T7968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.011820][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 198.070190][ T1130] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.095218][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.095245][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.095287][ T7962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.178484][ T7968] team0: Port device team_slave_0 added [ 198.213336][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.213363][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.213407][ T7962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.273286][ T7968] team0: Port device team_slave_1 added [ 198.337134][ T1130] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.343144][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.343294][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.343643][ T7980] bridge_slave_0: entered allmulticast mode [ 198.347227][ T7980] bridge_slave_0: entered promiscuous mode [ 198.350716][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.350875][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.351046][ T7980] bridge_slave_1: entered allmulticast mode [ 198.353116][ T7980] bridge_slave_1: entered promiscuous mode [ 198.401351][ T7980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.414106][ T7980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.423142][ T5630] Bluetooth: hci2: command tx timeout [ 198.569459][ T7980] team0: Port device team_slave_0 added [ 198.572162][ T7968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.572187][ T7968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.572234][ T7968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.576773][ T5630] Bluetooth: hci9: command tx timeout [ 198.657103][ T5630] Bluetooth: hci10: command tx timeout [ 198.660815][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.661021][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.661206][ T7965] bridge_slave_0: entered allmulticast mode [ 198.692636][ T7965] bridge_slave_0: entered promiscuous mode [ 198.705685][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.705808][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.705987][ T7965] bridge_slave_1: entered allmulticast mode [ 198.708002][ T7965] bridge_slave_1: entered promiscuous mode [ 198.761909][ T7980] team0: Port device team_slave_1 added [ 198.784663][ T7968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.784690][ T7968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.784736][ T7968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.817216][ T7962] hsr_slave_0: entered promiscuous mode [ 198.818509][ T7962] hsr_slave_1: entered promiscuous mode [ 198.820461][ T7962] debugfs: 'hsr0' already exists in 'hsr' [ 198.820491][ T7962] Cannot create hsr debugfs directory [ 199.060026][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.083179][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.083206][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.083251][ T7980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.248076][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.274099][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.274125][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.274169][ T7980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.293761][ T7968] hsr_slave_0: entered promiscuous mode [ 199.295409][ T7968] hsr_slave_1: entered promiscuous mode [ 199.296331][ T7968] debugfs: 'hsr0' already exists in 'hsr' [ 199.296360][ T7968] Cannot create hsr debugfs directory [ 199.378201][ T5630] Bluetooth: hci0: command tx timeout [ 199.447823][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 199.450522][ T7965] team0: Port device team_slave_0 added [ 199.507606][ T7965] team0: Port device team_slave_1 added [ 199.655861][ T7980] hsr_slave_0: entered promiscuous mode [ 199.657158][ T7980] hsr_slave_1: entered promiscuous mode [ 199.658088][ T7980] debugfs: 'hsr0' already exists in 'hsr' [ 199.658116][ T7980] Cannot create hsr debugfs directory [ 199.704472][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.704494][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.704528][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.704642][ T7948] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 199.724372][ T7948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.726804][ T7948] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 199.744680][ T7948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.804070][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.804095][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.804137][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.850060][ T7948] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.853538][ T7948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.907860][ T1130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.941451][ T7948] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.948800][ T7948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.069376][ T1130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.161080][ T7965] hsr_slave_0: entered promiscuous mode [ 200.162407][ T7965] hsr_slave_1: entered promiscuous mode [ 200.163323][ T7965] debugfs: 'hsr0' already exists in 'hsr' [ 200.163352][ T7965] Cannot create hsr debugfs directory [ 200.266682][ T1130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.448954][ T1130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.481294][ T7957] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 200.489555][ T7957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.495388][ T7957] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 200.510874][ T7957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.554334][ T7957] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 200.567468][ T7957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.570535][ T7957] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 200.580187][ T7957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.001345][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 201.042026][ T7962] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 201.058316][ T7962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.098911][ T7962] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 201.103805][ T7962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.133838][ T7962] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 201.141873][ T7962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.182570][ T7962] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 201.193400][ T7962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.336245][ T7980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.341717][ T7980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.343348][ T7980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.372190][ T7980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.411770][ T7980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.430189][ T7980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.432695][ T7980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.451740][ T7980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.523630][ T1130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.760030][ T1130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.805850][ T7948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.880657][ T7968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.895504][ T7968] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.941172][ T1130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.960873][ T7957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.962125][ T7968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.981735][ T7968] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.085599][ T7968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.091650][ T7968] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.092692][ T7968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.119514][ T7968] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.126475][ T7948] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.173397][ T1130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.260385][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 202.271981][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.272108][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.340014][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.340116][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.346625][ T7957] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.430108][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.430225][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.432699][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.432818][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.511748][ T7962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.697041][ T1130] bridge_slave_1: left allmulticast mode [ 202.697071][ T1130] bridge_slave_1: left promiscuous mode [ 202.697312][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.700311][ T1130] bridge_slave_0: left allmulticast mode [ 202.700335][ T1130] bridge_slave_0: left promiscuous mode [ 202.700521][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.749553][ T1130] bridge_slave_1: left allmulticast mode [ 202.749583][ T1130] bridge_slave_1: left promiscuous mode [ 202.749758][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.752307][ T1130] bridge_slave_0: left allmulticast mode [ 202.752331][ T1130] bridge_slave_0: left promiscuous mode [ 202.752496][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.803348][ T1130] bridge_slave_1: left allmulticast mode [ 202.803386][ T1130] bridge_slave_1: left promiscuous mode [ 202.803615][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.827517][ T1130] bridge_slave_0: left allmulticast mode [ 202.827545][ T1130] bridge_slave_0: left promiscuous mode [ 202.827725][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.848260][ T1130] bridge_slave_1: left allmulticast mode [ 202.848289][ T1130] bridge_slave_1: left promiscuous mode [ 202.848553][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.851083][ T1130] bridge_slave_0: left allmulticast mode [ 202.851106][ T1130] bridge_slave_0: left promiscuous mode [ 202.851262][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.173118][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.184025][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.187739][ T1130] bond0 (unregistering): Released all slaves [ 203.314357][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.327429][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.329305][ T1130] bond0 (unregistering): Released all slaves [ 203.453397][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.472228][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.474217][ T1130] bond0 (unregistering): Released all slaves [ 203.602405][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.620111][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.621815][ T1130] bond0 (unregistering): Released all slaves [ 203.698007][ T7962] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.723783][ T7980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.801357][ T1130] ovs-dp0: left promiscuous mode [ 203.844006][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.844125][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.967843][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.967989][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.005263][ T1130] tipc: Disabling bearer [ 204.007170][ T1130] tipc: Left network mode [ 204.032249][ T1130] tipc: Left network mode [ 204.040208][ T7980] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.294664][ T1130] IPVS: stopping master sync thread 6210 ... [ 204.296296][ T1130] IPVS: stopping master sync thread 6172 ... [ 204.297149][ T1130] IPVS: stopping master sync thread 6578 ... [ 204.493435][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.493562][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.506998][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.507128][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.068518][ T7965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.091673][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.162533][ T7965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.173594][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.206096][ T7965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.224128][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.252216][ T7968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.286631][ T7965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.327144][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.607221][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 205.740935][ T7968] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.979558][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.979741][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.068599][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.068738][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.314362][ T7948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.343315][ T7957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.938864][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.072024][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.129981][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.130111][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.174445][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.174574][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.965711][ T7948] veth0_vlan: entered promiscuous mode [ 208.020214][ T7980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.061568][ T7948] veth1_vlan: entered promiscuous mode [ 208.118465][ T7957] veth0_vlan: entered promiscuous mode [ 208.161643][ T7962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.246964][ T7957] veth1_vlan: entered promiscuous mode [ 208.520334][ T7948] veth0_macvtap: entered promiscuous mode [ 208.600659][ T7948] veth1_macvtap: entered promiscuous mode [ 208.724495][ T7980] veth0_vlan: entered promiscuous mode [ 208.765742][ T7957] veth0_macvtap: entered promiscuous mode [ 208.857637][ T7957] veth1_macvtap: entered promiscuous mode [ 208.911902][ T7948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.920396][ T7980] veth1_vlan: entered promiscuous mode [ 208.963288][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 208.984116][ T7948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.168855][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.230558][ T1130] hsr_slave_0: left promiscuous mode [ 209.231507][ T1130] hsr_slave_1: left promiscuous mode [ 209.234107][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.234138][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.270410][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.270443][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.273608][ T1130] batman_adv: batadv0: Interface deactivated: veth0 [ 209.273636][ T1130] batman_adv: batadv0: Removing interface: veth0 [ 209.367430][ T1130] hsr_slave_0: left promiscuous mode [ 209.368507][ T1130] hsr_slave_1: left promiscuous mode [ 209.370866][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.370897][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.373526][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.373554][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.452429][ T1130] veth1_macvtap: left promiscuous mode [ 209.452471][ T1130] veth0_macvtap: left promiscuous mode [ 209.452677][ T1130] veth1_vlan: left promiscuous mode [ 209.452752][ T1130] veth0_vlan: left promiscuous mode [ 209.454055][ T1130] veth1_macvtap: left promiscuous mode [ 209.454089][ T1130] veth0_macvtap: left promiscuous mode [ 209.454181][ T1130] veth1_vlan: left promiscuous mode [ 209.454353][ T1130] veth0_vlan: left promiscuous mode [ 209.496420][ T1130] veth1_macvtap: left promiscuous mode [ 209.496472][ T1130] veth0_macvtap: left promiscuous mode [ 209.496617][ T1130] veth1_vlan: left promiscuous mode [ 209.496707][ T1130] veth0_vlan: left promiscuous mode [ 209.518905][ T1130] veth1_macvtap: left promiscuous mode [ 209.518990][ T1130] veth0_macvtap: left promiscuous mode [ 209.519129][ T1130] veth1_vlan: left promiscuous mode [ 209.519217][ T1130] veth0_vlan: left promiscuous mode [ 210.087346][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 210.111874][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 210.432019][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 210.457095][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 210.763537][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 210.783990][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 211.074470][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 211.098269][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 211.221993][ T1130] smc: removing net device lo with user defined pnetid SYZ0 [ 211.223163][ T13] smc: removing ib device syz0 [ 211.280614][ T5735] infiniband syz0: ib_query_port failed (-19) [ 211.297070][ T7968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.320613][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.356472][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.364279][ T13] smbdirect: ib_dev[syz0] removed [ 211.393200][ T1115] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.393318][ T1115] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.393486][ T1115] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.522408][ T82] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.578396][ T1412] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.578856][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.638428][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.677639][ T7980] veth0_macvtap: entered promiscuous mode [ 211.761608][ T7980] veth1_macvtap: entered promiscuous mode [ 212.007710][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.007744][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.119684][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.253089][ T7965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.263163][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.369553][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.369586][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.432171][ T7962] veth0_vlan: entered promiscuous mode [ 212.565681][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.590185][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.609790][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.609822][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.643966][ T7962] veth1_vlan: entered promiscuous mode [ 212.715679][ T7968] veth0_vlan: entered promiscuous mode [ 212.952322][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.987409][ T7968] veth1_vlan: entered promiscuous mode [ 212.995399][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.162380][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.162414][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.496266][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.496298][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.563475][ T7962] veth0_macvtap: entered promiscuous mode [ 213.659524][ T7962] veth1_macvtap: entered promiscuous mode [ 213.787308][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 213.841919][ T7968] veth0_macvtap: entered promiscuous mode [ 213.896656][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.896690][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.977232][ T7968] veth1_macvtap: entered promiscuous mode [ 214.060074][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.131648][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.204741][ T7968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.313941][ T7968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.432635][ T7965] veth0_vlan: entered promiscuous mode [ 214.558405][ T7965] veth1_vlan: entered promiscuous mode [ 214.646668][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.680531][ T1425] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.680626][ T1425] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.680706][ T1425] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.680771][ T1425] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.680835][ T1425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.680898][ T1425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.680961][ T1425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.990550][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.990586][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.025807][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.025842][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.041265][ T8345] netlink: 44 bytes leftover after parsing attributes in process `syz.7.699'. [ 215.221524][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.221553][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.388487][ T7965] veth0_macvtap: entered promiscuous mode [ 215.422552][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.422586][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.434985][ T8329] NFSD: Unable to initialize client recovery tracking! (-110) [ 215.435010][ T8329] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 215.435029][ T8329] NFSD: starting 90-second grace period (net f00008cf) [ 215.511024][ T7965] veth1_macvtap: entered promiscuous mode [ 215.567652][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.719043][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.777468][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.777501][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.943691][ T8361] netlink: 'syz.7.701': attribute type 1 has an invalid length. [ 215.943943][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.943971][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.979918][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.980049][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.983939][ T8361] netlink: 'syz.7.701': attribute type 1 has an invalid length. [ 216.073849][ T8361] netlink: 'syz.7.701': attribute type 1 has an invalid length. [ 216.155964][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.163944][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.179154][ T8361] netlink: 33 bytes leftover after parsing attributes in process `syz.7.701'. [ 216.570327][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.570360][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.647625][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 216.799651][ T8370] svc: failed to register lockdv1 RPC service (errno 111). [ 216.914330][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.914364][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.953153][ T8380] FAULT_INJECTION: forcing a failure. [ 216.953153][ T8380] name fail_futex, interval 1, probability 0, space 0, times 0 [ 216.953207][ T8380] CPU: 0 UID: 0 PID: 8380 Comm: syz.8.705 Not tainted syzkaller #0 PREEMPT(full) [ 216.953253][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 216.953277][ T8380] Call Trace: [ 216.953289][ T8380] [ 216.953303][ T8380] dump_stack_lvl+0x100/0x190 [ 216.953370][ T8380] should_fail_ex.cold+0x5/0xa [ 216.953421][ T8380] get_futex_key+0x1d0/0x14f0 [ 216.953477][ T8380] ? __pfx_get_futex_key+0x10/0x10 [ 216.953523][ T8380] ? get_pid_task+0x2a/0x250 [ 216.953573][ T8380] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.953618][ T8380] ? find_held_lock+0x2b/0x80 [ 216.953672][ T8380] ? get_pid_task+0xfc/0x250 [ 216.953719][ T8380] ? get_pid_task+0xfc/0x250 [ 216.953765][ T8380] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.953820][ T8380] futex_wake+0xf4/0x5e0 [ 216.953883][ T8380] ? find_held_lock+0x2b/0x80 [ 216.953947][ T8380] ? __pfx_futex_wake+0x10/0x10 [ 216.954005][ T8380] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.954060][ T8380] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.954106][ T8380] ? rcu_read_lock_any_held+0x6a/0x90 [ 216.954163][ T8380] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.954210][ T8380] ? find_held_lock+0x2b/0x80 [ 216.954265][ T8380] ? ksys_write+0x190/0x250 [ 216.954325][ T8380] ? ksys_write+0x190/0x250 [ 216.954389][ T8380] do_futex+0x2b2/0x440 [ 216.954445][ T8380] ? __pfx_do_futex+0x10/0x10 [ 216.954499][ T8380] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.954558][ T8380] __x64_sys_futex+0x34f/0x4d0 [ 216.954613][ T8380] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.954659][ T8380] ? fput+0x7c/0x100 [ 216.954697][ T8380] ? __pfx___x64_sys_futex+0x10/0x10 [ 216.954739][ T8380] ? ksys_write+0x1ac/0x250 [ 216.954789][ T8380] ? __pfx_ksys_write+0x10/0x10 [ 216.954840][ T8380] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.954883][ T8380] do_syscall_64+0x123/0x790 [ 216.954930][ T8380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.954962][ T8380] RIP: 0033:0x7ff34a39e159 [ 216.954986][ T8380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.955016][ T8380] RSP: 002b:00007ff34b3190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.955046][ T8380] RAX: ffffffffffffffda RBX: 00007ff34a625fa8 RCX: 00007ff34a39e159 [ 216.955067][ T8380] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff34a625fac [ 216.955086][ T8380] RBP: 00007ff34a625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 216.955105][ T8380] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 216.955124][ T8380] R13: 00007ff34a626038 R14: 00007fff162774a0 R15: 00007fff16277588 [ 216.955165][ T8380] [ 217.438381][ T8370] svc: failed to register nfsdv3 RPC service (errno 512). [ 217.438618][ T8370] svc: failed to register nfsaclv3 RPC service (errno 512). [ 217.438644][ T8370] failed to unregister tcp with rpcbind [ 217.438857][ T8370] svc: failed to register nfsdv3 RPC service (errno 97). [ 217.438884][ T8370] svc: failed to register nfsaclv3 RPC service (errno 97). [ 217.438907][ T8370] failed to unregister tcp with rpcbind [ 218.086393][ T1130] IPVS: stop unused estimator thread 0... [ 218.088281][ T1130] IPVS: stop unused estimator thread 0... [ 218.092027][ T1130] IPVS: stop unused estimator thread 0... [ 218.285286][ T82] netdevsim netdevsim11 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.493042][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 219.364072][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 222.519444][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 224.067500][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 224.637649][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 224.735324][ T8385] NFSD: Unable to initialize client recovery tracking! (-110) [ 224.735352][ T8385] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 224.735371][ T8385] NFSD: starting 90-second grace period (net f00003b2) [ 225.267069][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 225.290157][ T8388] svc: failed to register nfsdv3 RPC service (errno 512). [ 225.291973][ T8388] svc: failed to register nfsaclv3 RPC service (errno 512). [ 225.292002][ T8388] failed to unregister tcp with rpcbind [ 225.292209][ T8388] svc: failed to register nfsdv3 RPC service (errno 97). [ 225.292235][ T8388] svc: failed to register nfsaclv3 RPC service (errno 97). [ 225.292258][ T8388] failed to unregister tcp with rpcbind [ 225.392354][ T8394] NFSD: Failed to start, no listeners configured. [ 225.698108][ T8408] NFSD: Failed to start, no listeners configured. [ 226.130758][ T7968] svc: failed to register nfsdv3 RPC service (errno 111). [ 226.132700][ T7968] svc: failed to register nfsaclv3 RPC service (errno 111). [ 226.132729][ T7968] failed to unregister udp with rpcbind [ 226.132904][ T7968] svc: failed to register nfsdv3 RPC service (errno 97). [ 226.132931][ T7968] svc: failed to register nfsaclv3 RPC service (errno 97). [ 226.132950][ T7968] failed to unregister udp with rpcbind [ 226.511209][ T8613] NFSD: Failed to start, no listeners configured. [ 226.593343][ T8609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.816363][ T8609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.827883][ T8616] NFSD: Failed to start, no listeners configured. [ 226.943133][ T8609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.023288][ T8609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.222991][ T8638] bridge0: port 3(syz_tun) entered blocking state [ 227.223200][ T8638] bridge0: port 3(syz_tun) entered disabled state [ 227.223366][ T8638] syz_tun: entered allmulticast mode [ 227.230331][ T8638] syz_tun: entered promiscuous mode [ 227.235627][ T8638] bridge0: port 3(syz_tun) entered blocking state [ 227.235763][ T8638] bridge0: port 3(syz_tun) entered listening state [ 227.254584][ T8638] bridge0: port 3 config from 02:00:00:00:00:01 (message_age 8l > max_age 1l) [ 228.246558][ T8622] NFSD: Unable to initialize client recovery tracking! (-110) [ 228.246585][ T8622] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 228.246604][ T8622] NFSD: starting 90-second grace period (net f00008cf) [ 228.688804][ T8629] svc: failed to register nfsdv3 RPC service (errno 512). [ 228.689014][ T8629] svc: failed to register nfsaclv3 RPC service (errno 512). [ 228.689041][ T8629] failed to unregister tcp with rpcbind [ 228.689244][ T8629] svc: failed to register nfsdv3 RPC service (errno 97). [ 228.689292][ T8629] svc: failed to register nfsaclv3 RPC service (errno 97). [ 228.689316][ T8629] failed to unregister tcp with rpcbind [ 229.885057][ T8631] NFSD: Unable to initialize client recovery tracking! (-110) [ 229.885087][ T8631] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 229.885107][ T8631] NFSD: starting 90-second grace period (net f0000bdb) [ 230.247874][ T8664] ip_tables: iptables: counters copy to user failed while replacing table [ 231.284934][ T8654] NFSD: Unable to initialize client recovery tracking! (-110) [ 231.284967][ T8654] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 231.284981][ T8654] NFSD: starting 90-second grace period (net f00003b2) [ 231.605598][ T8688] bridge0: port 3(batadv0) entered blocking state [ 231.605813][ T8688] bridge0: port 3(batadv0) entered disabled state [ 231.605997][ T8688] batadv0: entered allmulticast mode [ 231.608297][ T8688] batadv0: entered promiscuous mode [ 231.609078][ T8688] bridge0: port 3(batadv0) entered blocking state [ 231.609205][ T8688] bridge0: port 3(batadv0) entered forwarding state [ 231.979264][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 231.979288][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 232.745285][ T8670] NFSD: Unable to initialize client recovery tracking! (-110) [ 232.745313][ T8670] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 232.745332][ T8670] NFSD: starting 90-second grace period (net f0000be0) [ 233.297965][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 233.615819][ T4932] Bluetooth: hci10: command 0x0406 tx timeout [ 234.256082][ T8720] NFSD: Unable to initialize client recovery tracking! (-110) [ 234.256110][ T8720] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 234.256128][ T8720] NFSD: starting 90-second grace period (net f0000a99) [ 235.625582][ T8725] NFSD: Unable to initialize client recovery tracking! (-110) [ 235.625608][ T8725] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 235.625629][ T8725] NFSD: starting 90-second grace period (net f00008cf) [ 235.958554][ T7968] svc: failed to register nfsdv3 RPC service (errno 111). [ 235.962255][ T7968] svc: failed to register nfsaclv3 RPC service (errno 111). [ 235.962282][ T7968] failed to unregister tcp with rpcbind [ 235.962478][ T7968] svc: failed to register nfsdv3 RPC service (errno 97). [ 235.962501][ T7968] svc: failed to register nfsaclv3 RPC service (errno 97). [ 235.962519][ T7968] failed to unregister tcp with rpcbind [ 236.300862][ T1425] IPVS: starting estimator thread 0... [ 236.384534][ T8779] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 236.399501][ T8787] IPVS: using max 25 ests per chain, 60000 per kthread [ 236.483251][ C0] [ 236.485629][ C0] ================================ [ 236.490735][ C0] WARNING: inconsistent lock state [ 236.495827][ C0] syzkaller #0 Not tainted [ 236.500225][ C0] -------------------------------- [ 236.505319][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 236.512157][ C0] syz.0.757/8796 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 236.518393][ C0] ffffffff8efca220 (fs_reclaim){+.?.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x66/0x6e0 [ 236.528267][ C0] {SOFTIRQ-ON-W} state was registered at: [ 236.533968][ C0] lock_acquire+0x1d1/0x380 [ 236.538562][ C0] fs_reclaim_acquire+0xc4/0x100 [ 236.543594][ C0] mem_cgroup_css_alloc+0x7e/0x1d10 [ 236.548881][ C0] cgroup_init_subsys+0x223/0x700 [ 236.554004][ C0] cgroup_init+0x569/0xe50 [ 236.558518][ C0] start_kernel+0x475/0x490 [ 236.563127][ C0] x86_64_start_reservations+0x24/0x30 [ 236.568681][ C0] x86_64_start_kernel+0x12b/0x130 [ 236.573888][ C0] common_startup_64+0x13e/0x158 [ 236.578920][ C0] irq event stamp: 1546 [ 236.583060][ C0] hardirqs last enabled at (1546): [] __local_bh_enable_ip+0xa5/0x120 [ 236.592871][ C0] hardirqs last disabled at (1545): [] __local_bh_enable_ip+0xce/0x120 [ 236.602689][ C0] softirqs last enabled at (1526): [] __dev_queue_xmit+0xa12/0x4970 [ 236.612343][ C0] softirqs last disabled at (1527): [] do_softirq+0xaf/0xf0 [ 236.621200][ C0] [ 236.621200][ C0] other info that might help us debug this: [ 236.629245][ C0] Possible unsafe locking scenario: [ 236.629245][ C0] [ 236.636683][ C0] CPU0 [ 236.639949][ C0] ---- [ 236.643215][ C0] lock(fs_reclaim); [ 236.647211][ C0] [ 236.650651][ C0] lock(fs_reclaim); [ 236.654807][ C0] [ 236.654807][ C0] *** DEADLOCK *** [ 236.654807][ C0] [ 236.662941][ C0] locks held by syz.0.757/8796: 8, last CPU#0: [ 236.669116][ C0] #0: ffff888033a58260 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x20/0x50 [ 236.678314][ C0] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x69/0x1f40 [ 236.687833][ C0] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0xb3/0xc10 [ 236.696742][ C0] #3: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x356/0x2400 [ 236.706519][ C0] #4: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x437/0x1600 [ 236.716133][ C0] #5: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: ip_local_deliver_finish+0x335/0x6e0 [ 236.726359][ C0] #6: ffff888033b9e9e8 (slock-AF_INET/1){+.-.}-{3:3}, at: tcp_v4_rcv+0x2c2c/0x4840 [ 236.735811][ C0] #7: ffff888033b9ec08 (clock-AF_INET){++.-}-{3:3}, at: psock_data_ready+0x84/0x270 [ 236.745361][ C0] [ 236.745361][ C0] stack backtrace: [ 236.751248][ C0] CPU: 0 UID: 0 PID: 8796 Comm: syz.0.757 Not tainted syzkaller #0 PREEMPT(full) [ 236.760449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 236.770501][ C0] Call Trace: [ 236.773774][ C0] [ 236.776612][ C0] dump_stack_lvl+0x100/0x190 [ 236.781305][ C0] print_usage_bug.part.0+0x258/0x340 [ 236.786683][ C0] mark_lock+0x956/0x1020 [ 236.791016][ C0] ? check_noncircular+0x97/0x160 [ 236.796039][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.801684][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.807323][ C0] ? add_lock_to_list+0x9d/0x1d0 [ 236.812285][ C0] __lock_acquire+0x7f1/0x1f40 [ 236.817055][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.822694][ C0] ? __lock_acquire+0xe8b/0x1f40 [ 236.827638][ C0] lock_acquire+0x1d1/0x380 [ 236.832144][ C0] ? kmem_cache_alloc_node_noprof+0x66/0x6e0 [ 236.838161][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.843800][ C0] ? lock_acquire+0x1d1/0x380 [ 236.848480][ C0] ? napi_skb_cache_get+0x117/0x9a0 [ 236.853698][ C0] fs_reclaim_acquire+0xc4/0x100 [ 236.858637][ C0] ? kmem_cache_alloc_node_noprof+0x66/0x6e0 [ 236.864640][ C0] kmem_cache_alloc_node_noprof+0x66/0x6e0 [ 236.870474][ C0] ? __alloc_skb+0x140/0x710 [ 236.875098][ C0] __alloc_skb+0x140/0x710 [ 236.879546][ C0] ? __alloc_skb+0x5b7/0x710 [ 236.884169][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 236.889144][ C0] ? __pfx_tls_device_rx_resync_new_rec+0x10/0x10 [ 236.895583][ C0] alloc_skb_with_frags+0xdd/0x760 [ 236.900698][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.906370][ C0] tls_decrypt_sg+0x4d8/0x2c10 [ 236.911156][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.916797][ C0] ? __asan_memcpy+0x3c/0x60 [ 236.921406][ C0] ? tls_strp_load_anchor_with_queue+0x29a/0x370 [ 236.927746][ C0] ? tls_strp_check_rcv+0xfb/0x8f0 [ 236.932871][ C0] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 236.938086][ C0] ? kernel_text_address+0x8d/0x100 [ 236.943308][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.948948][ C0] ? tls_strp_msg_load+0x229/0x710 [ 236.954106][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.959749][ C0] ? tls_rx_rec_wait+0x6b3/0xa00 [ 236.964711][ C0] tls_rx_one_record+0x133/0x13e0 [ 236.969781][ C0] ? lock_acquire+0x1d1/0x380 [ 236.974469][ C0] ? __pfx_tls_rx_one_record+0x10/0x10 [ 236.979946][ C0] ? find_held_lock+0x2b/0x80 [ 236.984641][ C0] ? tls_sw_read_sock+0xb63/0x11d0 [ 236.989770][ C0] ? tls_sw_read_sock+0xb63/0x11d0 [ 236.994906][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.000560][ C0] tls_sw_read_sock+0x64a/0x11d0 [ 237.005521][ C0] ? __pfx_strp_recv+0x10/0x10 [ 237.010304][ C0] ? __pfx_tls_sw_read_sock+0x10/0x10 [ 237.015715][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.021354][ C0] ? __lock_acquire+0xe8b/0x1f40 [ 237.026327][ C0] ? __pfx_tls_sw_read_sock+0x10/0x10 [ 237.031732][ C0] strp_read_sock+0x250/0x2a0 [ 237.036435][ C0] ? __pfx_strp_read_sock+0x10/0x10 [ 237.041640][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.047277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.052913][ C0] ? __sk_mem_schedule+0xd0/0x100 [ 237.057961][ C0] strp_data_ready+0x1d8/0x290 [ 237.062741][ C0] psock_data_ready+0xc0/0x270 [ 237.067503][ C0] tcp_data_ready+0x114/0x5b0 [ 237.072188][ C0] tcp_data_queue+0x1af9/0x4fb0 [ 237.077049][ C0] ? tcp_rcv_established+0x136/0x39f0 [ 237.082428][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.088065][ C0] ? tcp_urg+0x10f/0xb80 [ 237.092327][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 237.097534][ C0] ? tcp_ecn_create_request+0x810/0x8d0 [ 237.103080][ C0] ? ktime_get+0x22c/0x320 [ 237.107498][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.113133][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.118334][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.123973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.129616][ C0] tcp_rcv_established+0xb8d/0x39f0 [ 237.134831][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 237.140482][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.146123][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.151765][ C0] tcp_v4_do_rcv+0xbb6/0x1260 [ 237.156454][ C0] tcp_v4_rcv+0x2ec1/0x4840 [ 237.160979][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 237.165867][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 237.171336][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.176974][ C0] ? lock_acquire+0x1d1/0x380 [ 237.181650][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.187285][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 237.192145][ C0] ip_protocol_deliver_rcu+0xba/0x4d0 [ 237.197534][ C0] ip_local_deliver_finish+0x3f2/0x6e0 [ 237.203014][ C0] ip_local_deliver+0x19a/0x1f0 [ 237.207878][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 237.213265][ C0] ip_rcv+0x33a/0x3c0 [ 237.217264][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 237.221778][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 237.227685][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 237.234115][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.239753][ C0] ? lock_acquire+0x1d1/0x380 [ 237.244439][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.250076][ C0] ? process_backlog+0x437/0x1600 [ 237.255149][ C0] ? process_backlog+0x437/0x1600 [ 237.260205][ C0] __netif_receive_skb+0x1f/0x120 [ 237.265271][ C0] process_backlog+0x487/0x1600 [ 237.270148][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 237.275537][ C0] net_rx_action+0xa40/0xf20 [ 237.280147][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 237.285273][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.290917][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 237.296218][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.301856][ C0] ? sched_clock+0x3a/0x60 [ 237.306286][ C0] ? sched_clock_cpu+0x6c/0x570 [ 237.311142][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.316781][ C0] ? mark_held_locks+0x40/0x70 [ 237.321549][ C0] handle_softirqs+0x1e6/0x9d0 [ 237.326316][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 237.331601][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.337239][ C0] ? irqtime_account_delta+0x9a/0x110 [ 237.342627][ C0] ? __dev_queue_xmit+0xa12/0x4970 [ 237.347748][ C0] do_softirq+0xaf/0xf0 [ 237.351903][ C0] [ 237.354824][ C0] [ 237.357747][ C0] __local_bh_enable_ip+0xff/0x120 [ 237.362858][ C0] ? __dev_queue_xmit+0xa12/0x4970 [ 237.367994][ C0] __dev_queue_xmit+0xa27/0x4970 [ 237.373000][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.378646][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 237.383589][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 237.388976][ C0] ? __entry_text_end+0x102035/0x102039 [ 237.394534][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.400171][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 237.405116][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.410770][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.416421][ C0] ? lock_acquire+0x1d1/0x380 [ 237.421109][ C0] ? __ip_finish_output.part.0+0x444/0x6f0 [ 237.426920][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.432580][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.438226][ C0] ip_finish_output2+0xf4a/0x2400 [ 237.443271][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 237.448730][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 237.454800][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.460446][ C0] __ip_finish_output.part.0+0x444/0x6f0 [ 237.466082][ C0] ip_output+0x39b/0xc10 [ 237.470324][ C0] ? __pfx_ip_output+0x10/0x10 [ 237.475090][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 237.480484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.486119][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.491756][ C0] ? __pfx_ip_output+0x10/0x10 [ 237.496537][ C0] ip_local_out+0x193/0x1f0 [ 237.501041][ C0] __ip_queue_xmit+0x885/0x1f40 [ 237.505897][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 237.511013][ C0] __tcp_transmit_skb+0x3503/0x4f40 [ 237.516233][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 237.521814][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.527449][ C0] ? lock_acquire+0x1d1/0x380 [ 237.532130][ C0] ? ktime_get+0x22c/0x320 [ 237.536545][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.542179][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.547380][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.553038][ C0] tcp_write_xmit+0x1130/0x8470 [ 237.557910][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.563547][ C0] ? __asan_memset+0x23/0x50 [ 237.568147][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.573784][ C0] ? __pfx__copy_from_iter+0x10/0x10 [ 237.579099][ C0] __tcp_push_pending_frames+0xaf/0x3b0 [ 237.584657][ C0] ? skb_page_frag_refill+0x309/0x4b0 [ 237.590059][ C0] tcp_push+0x225/0x700 [ 237.594224][ C0] tcp_sendmsg_locked+0x181b/0x4420 [ 237.599442][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 237.604997][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.610643][ C0] ? lock_acquire+0x1d1/0x380 [ 237.615322][ C0] ? do_raw_spin_lock+0x128/0x260 [ 237.620360][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 237.625741][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.631380][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 237.636668][ C0] tcp_sendmsg+0x2e/0x50 [ 237.640917][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 237.645862][ C0] inet_sendmsg+0xb9/0x140 [ 237.650305][ C0] __sys_sendto+0x453/0x4e0 [ 237.654825][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 237.659864][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 237.664906][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.670549][ C0] ? sock_ioctl+0x2dc/0x6b0 [ 237.675068][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.680708][ C0] ? xfd_validate_state+0x129/0x190 [ 237.685908][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 237.690684][ C0] ? do_syscall_64+0xae/0x790 [ 237.695364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.701006][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.706215][ C0] do_syscall_64+0x123/0x790 [ 237.710812][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.716719][ C0] RIP: 0033:0x7f45e4d9e159 [ 237.721126][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.740731][ C0] RSP: 002b:00007f45e5d3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 237.749142][ C0] RAX: ffffffffffffffda RBX: 00007f45e5025fa0 RCX: 00007f45e4d9e159 [ 237.757105][ C0] RDX: 0000000000000025 RSI: 0000200000000400 RDI: 0000000000000004 [ 237.765128][ C0] RBP: 00007f45e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 237.773094][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.781055][ C0] R13: 00007f45e5026038 R14: 00007f45e5025fa0 R15: 00007ffdcc154e98 [ 237.789033][ C0] [ 237.792148][ C0] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:322 [ 237.792168][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8796, name: syz.0.757 [ 237.792192][ C0] preempt_count: 303, expected: 0 [ 237.792205][ C0] RCU nest depth: 5, expected: 0 [ 237.792219][ C0] INFO: lockdep is turned off. [ 237.792227][ C0] Preemption disabled at: [ 237.792234][ C0] [] __dev_queue_xmit+0x29e/0x4970 [ 237.792286][ C0] CPU: 0 UID: 0 PID: 8796 Comm: syz.0.757 Not tainted syzkaller #0 PREEMPT(full) [ 237.792319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 237.792338][ C0] Call Trace: [ 237.792348][ C0] [ 237.792358][ C0] dump_stack_lvl+0x100/0x190 [ 237.792398][ C0] __might_resched.cold+0x1dc/0x222 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 237.792437][ C0] ? __pfx___might_resched+0x10/0x10 [ 237.792484][ C0] ? lock_release+0x24d/0x310 [ 237.792517][ C0] kmem_cache_alloc_node_noprof+0x3a2/0x6e0 [ 237.792567][ C0] ? __alloc_skb+0x140/0x710 [ 237.792615][ C0] __alloc_skb+0x140/0x710 [ 237.792657][ C0] ? __alloc_skb+0x5b7/0x710 [ 237.792701][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 237.792745][ C0] ? __pfx_tls_device_rx_resync_new_rec+0x10/0x10 [ 237.792796][ C0] alloc_skb_with_frags+0xdd/0x760 [ 237.792827][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.792868][ C0] tls_decrypt_sg+0x4d8/0x2c10 [ 237.792913][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.792951][ C0] ? __asan_memcpy+0x3c/0x60 [ 237.792996][ C0] ? tls_strp_load_anchor_with_queue+0x29a/0x370 [ 237.793040][ C0] ? tls_strp_check_rcv+0xfb/0x8f0 [ 237.793081][ C0] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 237.793125][ C0] ? kernel_text_address+0x8d/0x100 [ 237.793172][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.793207][ C0] ? tls_strp_msg_load+0x229/0x710 [ 237.793247][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.793282][ C0] ? tls_rx_rec_wait+0x6b3/0xa00 [ 237.793334][ C0] tls_rx_one_record+0x133/0x13e0 [ 237.793380][ C0] ? lock_acquire+0x1d1/0x380 [ 237.793411][ C0] ? __pfx_tls_rx_one_record+0x10/0x10 [ 237.793456][ C0] ? find_held_lock+0x2b/0x80 [ 237.793497][ C0] ? tls_sw_read_sock+0xb63/0x11d0 [ 237.793543][ C0] ? tls_sw_read_sock+0xb63/0x11d0 [ 237.793589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.793629][ C0] tls_sw_read_sock+0x64a/0x11d0 [ 237.793678][ C0] ? __pfx_strp_recv+0x10/0x10 [ 237.793719][ C0] ? __pfx_tls_sw_read_sock+0x10/0x10 [ 237.793766][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.793802][ C0] ? __lock_acquire+0xe8b/0x1f40 [ 237.793836][ C0] ? __pfx_tls_sw_read_sock+0x10/0x10 [ 237.793884][ C0] strp_read_sock+0x250/0x2a0 [ 237.793918][ C0] ? __pfx_strp_read_sock+0x10/0x10 [ 237.793955][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.793991][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.794030][ C0] ? __sk_mem_schedule+0xd0/0x100 [ 237.794061][ C0] strp_data_ready+0x1d8/0x290 [ 237.794098][ C0] psock_data_ready+0xc0/0x270 [ 237.794127][ C0] tcp_data_ready+0x114/0x5b0 [ 237.794166][ C0] tcp_data_queue+0x1af9/0x4fb0 [ 237.794208][ C0] ? tcp_rcv_established+0x136/0x39f0 [ 237.794246][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.794280][ C0] ? tcp_urg+0x10f/0xb80 [ 237.794310][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 237.794348][ C0] ? tcp_ecn_create_request+0x810/0x8d0 [ 237.794380][ C0] ? ktime_get+0x22c/0x320 [ 237.794411][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.794446][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.794480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.794515][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.794553][ C0] tcp_rcv_established+0xb8d/0x39f0 [ 237.794597][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 237.794637][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.794673][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.794711][ C0] tcp_v4_do_rcv+0xbb6/0x1260 [ 237.794761][ C0] tcp_v4_rcv+0x2ec1/0x4840 [ 237.794815][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 237.794861][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 237.794904][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.794941][ C0] ? lock_acquire+0x1d1/0x380 [ 237.794973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.795015][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 237.795059][ C0] ip_protocol_deliver_rcu+0xba/0x4d0 [ 237.795111][ C0] ip_local_deliver_finish+0x3f2/0x6e0 [ 237.795162][ C0] ip_local_deliver+0x19a/0x1f0 [ 237.795208][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 237.795256][ C0] ip_rcv+0x33a/0x3c0 [ 237.795302][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 237.795347][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 237.795393][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 237.795440][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.795477][ C0] ? lock_acquire+0x1d1/0x380 [ 237.795511][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.795547][ C0] ? process_backlog+0x437/0x1600 [ 237.795590][ C0] ? process_backlog+0x437/0x1600 [ 237.795630][ C0] __netif_receive_skb+0x1f/0x120 [ 237.795672][ C0] process_backlog+0x487/0x1600 [ 237.795718][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 237.795764][ C0] net_rx_action+0xa40/0xf20 [ 237.795811][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 237.795854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.795889][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 237.795929][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.795964][ C0] ? sched_clock+0x3a/0x60 [ 237.796012][ C0] ? sched_clock_cpu+0x6c/0x570 [ 237.796047][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.796082][ C0] ? mark_held_locks+0x40/0x70 [ 237.796114][ C0] handle_softirqs+0x1e6/0x9d0 [ 237.796145][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 237.796173][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.796208][ C0] ? irqtime_account_delta+0x9a/0x110 [ 237.796252][ C0] ? __dev_queue_xmit+0xa12/0x4970 [ 237.796293][ C0] do_softirq+0xaf/0xf0 [ 237.796319][ C0] [ 237.796329][ C0] [ 237.796338][ C0] __local_bh_enable_ip+0xff/0x120 [ 237.796367][ C0] ? __dev_queue_xmit+0xa12/0x4970 [ 237.796406][ C0] __dev_queue_xmit+0xa27/0x4970 [ 237.796451][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.796486][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 237.796516][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 237.796556][ C0] ? __entry_text_end+0x102035/0x102039 [ 237.796593][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.796628][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 237.796663][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.796701][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.796736][ C0] ? lock_acquire+0x1d1/0x380 [ 237.796764][ C0] ? __ip_finish_output.part.0+0x444/0x6f0 [ 237.796798][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.796835][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.796874][ C0] ip_finish_output2+0xf4a/0x2400 [ 237.796910][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 237.796942][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 237.796974][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.797017][ C0] __ip_finish_output.part.0+0x444/0x6f0 [ 237.797052][ C0] ip_output+0x39b/0xc10 [ 237.797083][ C0] ? __pfx_ip_output+0x10/0x10 [ 237.797115][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 237.797147][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.797183][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.797219][ C0] ? __pfx_ip_output+0x10/0x10 [ 237.797251][ C0] ip_local_out+0x193/0x1f0 [ 237.797283][ C0] __ip_queue_xmit+0x885/0x1f40 [ 237.797320][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 237.797352][ C0] __tcp_transmit_skb+0x3503/0x4f40 [ 237.797405][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 237.797453][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.797488][ C0] ? lock_acquire+0x1d1/0x380 [ 237.797523][ C0] ? ktime_get+0x22c/0x320 [ 237.797552][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.797587][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.797622][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.797659][ C0] tcp_write_xmit+0x1130/0x8470 [ 237.797713][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.797748][ C0] ? __asan_memset+0x23/0x50 [ 237.797790][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.797826][ C0] ? __pfx__copy_from_iter+0x10/0x10 [ 237.797871][ C0] __tcp_push_pending_frames+0xaf/0x3b0 [ 237.797916][ C0] ? skb_page_frag_refill+0x309/0x4b0 [ 237.797958][ C0] tcp_push+0x225/0x700 [ 237.797995][ C0] tcp_sendmsg_locked+0x181b/0x4420 [ 237.798052][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 237.798093][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.798128][ C0] ? lock_acquire+0x1d1/0x380 [ 237.798158][ C0] ? do_raw_spin_lock+0x128/0x260 [ 237.798195][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 237.798235][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.798272][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 237.798303][ C0] tcp_sendmsg+0x2e/0x50 [ 237.798342][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 237.798381][ C0] inet_sendmsg+0xb9/0x140 [ 237.798418][ C0] __sys_sendto+0x453/0x4e0 [ 237.798460][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 237.798497][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 237.798546][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.798581][ C0] ? sock_ioctl+0x2dc/0x6b0 [ 237.798625][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.798660][ C0] ? xfd_validate_state+0x129/0x190 [ 237.798692][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 237.798734][ C0] ? do_syscall_64+0xae/0x790 [ 237.798768][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.798803][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.798836][ C0] do_syscall_64+0x123/0x790 [ 237.798873][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.798903][ C0] RIP: 0033:0x7f45e4d9e159 [ 237.798925][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.798954][ C0] RSP: 002b:00007f45e5d3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 237.798982][ C0] RAX: ffffffffffffffda RBX: 00007f45e5025fa0 RCX: 00007f45e4d9e159 [ 237.799002][ C0] RDX: 0000000000000025 RSI: 0000200000000400 RDI: 0000000000000004 [ 237.799024][ C0] RBP: 00007f45e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 237.799043][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.799061][ C0] R13: 00007f45e5026038 R14: 00007f45e5025fa0 R15: 00007ffdcc154e98 [ 237.799091][ C0] [ 237.893603][ T5630] Bluetooth: hci2: link tx timeout [ 237.893625][ T5630] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 238.999330][ T7948] bridge0: port 3(syz_tun) entered disabled state [ 239.001436][ T7948] syz_tun (unregistering): left allmulticast mode [ 239.001491][ T7948] syz_tun (unregistering): left promiscuous mode [ 239.001561][ T7948] bridge0: port 3(syz_tun) entered disabled state [ 239.045098][ T8777] NFSD: Unable to initialize client recovery tracking! (-110) [ 239.045120][ T8777] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 239.045138][ T8777] NFSD: starting 90-second grace period (net f00008cf) [ 239.114281][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.237370][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.323812][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.368250][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.539350][ T59] bridge_slave_1: left allmulticast mode [ 239.539385][ T59] bridge_slave_1: left promiscuous mode [ 239.539559][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.542299][ T59] bridge_slave_0: left allmulticast mode [ 239.542327][ T59] bridge_slave_0: left promiscuous mode [ 239.542480][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.731375][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.733153][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.734369][ T59] bond0 (unregistering): Released all slaves [ 239.974046][ T59] hsr_slave_0: left promiscuous mode [ 239.974559][ T59] hsr_slave_1: left promiscuous mode [ 239.986090][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.986117][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.986659][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.986682][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.990691][ T59] veth1_macvtap: left promiscuous mode [ 239.990728][ T59] veth0_macvtap: left promiscuous mode [ 239.990818][ T59] veth1_vlan: left promiscuous mode [ 239.990888][ T59] veth0_vlan: left promiscuous mode [ 240.218044][ T59] team0 (unregistering): Port device team_slave_1 removed [ 240.223680][ T59] team0 (unregistering): Port device team_slave_0 removed [ 240.519532][ T59] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.577015][ T59] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.598740][ T59] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.641745][ T59] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.753045][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.799681][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.850404][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.901355][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.011061][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.041162][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.100114][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.144212][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.219586][ T59] netdevsim netdevsim11 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.302748][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.331157][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.382938][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.460213][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.570711][ T59] bridge_slave_1: left allmulticast mode [ 241.570763][ T59] bridge_slave_1: left promiscuous mode [ 241.570928][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.572577][ T59] bridge_slave_0: left allmulticast mode [ 241.572605][ T59] bridge_slave_0: left promiscuous mode [ 241.572752][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.599030][ T59] bridge_slave_1: left allmulticast mode [ 241.599066][ T59] bridge_slave_1: left promiscuous mode [ 241.599222][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.613456][ T59] bridge_slave_0: left allmulticast mode [ 241.614625][ T59] bridge_slave_0: left promiscuous mode [ 241.615849][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.643271][ T59] bridge_slave_1: left allmulticast mode [ 241.643306][ T59] bridge_slave_1: left promiscuous mode [ 241.643484][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.656561][ T59] bridge_slave_0: left allmulticast mode [ 241.656594][ T59] bridge_slave_0: left promiscuous mode [ 241.656747][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.687657][ T59] batadv0: left allmulticast mode [ 241.687690][ T59] batadv0: left promiscuous mode [ 241.687854][ T59] bridge0: port 3(batadv0) entered disabled state [ 241.689468][ T59] bridge_slave_1: left allmulticast mode [ 241.689497][ T59] bridge_slave_1: left promiscuous mode [ 241.689649][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.691353][ T59] bridge_slave_0: left allmulticast mode [ 241.691382][ T59] bridge_slave_0: left promiscuous mode [ 241.691545][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.734150][ T59] bridge_slave_1: left allmulticast mode [ 241.734184][ T59] bridge_slave_1: left promiscuous mode [ 241.734352][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.742860][ T59] bridge_slave_0: left allmulticast mode [ 241.742895][ T59] bridge_slave_0: left promiscuous mode [ 241.743065][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.983142][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.997209][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.999563][ T59] bond0 (unregistering): Released all slaves [ 242.069546][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.071071][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.072061][ T59] bond0 (unregistering): Released all slaves [ 242.133117][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.134624][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.145503][ T59] bond0 (unregistering): Released all slaves [ 242.200824][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.202327][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.203301][ T59] bond0 (unregistering): Released all slaves [ 242.263563][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.274278][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.284220][ T59] bond0 (unregistering): Released all slaves [ 242.917058][ T59] hsr_slave_0: left promiscuous mode [ 242.917556][ T59] hsr_slave_1: left promiscuous mode [ 242.918592][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.918619][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.919207][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.919230][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.922635][ T59] hsr_slave_0: left promiscuous mode [ 242.923154][ T59] hsr_slave_1: left promiscuous mode [ 242.923755][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.923780][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.924341][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.924365][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.945692][ T59] hsr_slave_0: left promiscuous mode [ 242.952776][ T59] hsr_slave_1: left promiscuous mode [ 242.953474][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.953500][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.960699][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.960727][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.996317][ T59] hsr_slave_0: left promiscuous mode [ 243.002192][ T59] hsr_slave_1: left promiscuous mode [ 243.002761][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.002786][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.009839][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.009864][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.093688][ T59] hsr_slave_0: left promiscuous mode [ 243.094288][ T59] hsr_slave_1: left promiscuous mode [ 243.112271][ T59] veth1_macvtap: left promiscuous mode [ 243.112306][ T59] veth0_macvtap: left promiscuous mode [ 243.112369][ T59] veth1_vlan: left promiscuous mode [ 243.112415][ T59] veth0_vlan: left promiscuous mode [ 243.139112][ T59] veth1_macvtap: left promiscuous mode [ 243.139157][ T59] veth0_macvtap: left promiscuous mode [ 243.139242][ T59] veth1_vlan: left promiscuous mode [ 243.139306][ T59] veth0_vlan: left promiscuous mode [ 243.161734][ T59] veth1_macvtap: left promiscuous mode [ 243.161767][ T59] veth0_macvtap: left promiscuous mode [ 243.161841][ T59] veth1_vlan: left promiscuous mode [ 243.161888][ T59] veth0_vlan: left promiscuous mode [ 243.162643][ T59] veth1_macvtap: left promiscuous mode [ 243.162671][ T59] veth0_macvtap: left promiscuous mode [ 243.162733][ T59] veth1_vlan: left promiscuous mode [ 243.162781][ T59] veth0_vlan: left promiscuous mode [ 243.163575][ T59] veth1_macvtap: left promiscuous mode [ 243.163603][ T59] veth0_macvtap: left promiscuous mode [ 243.163665][ T59] veth1_vlan: left promiscuous mode [ 243.163710][ T59] veth0_vlan: left promiscuous mode [ 243.481701][ T59] team0 (unregistering): Port device team_slave_1 removed [ 243.506386][ T59] team0 (unregistering): Port device team_slave_0 removed [ 243.622815][ T59] team0 (unregistering): Port device team_slave_1 removed [ 243.639963][ T59] team0 (unregistering): Port device team_slave_0 removed [ 243.773764][ T59] team0 (unregistering): Port device team_slave_1 removed [ 243.786692][ T59] team0 (unregistering): Port device team_slave_0 removed [ 243.908610][ T59] team0 (unregistering): Port device team_slave_1 removed [ 243.912998][ T59] team0 (unregistering): Port device team_slave_0 removed [ 244.045267][ T59] team0 (unregistering): Port device team_slave_1 removed [ 244.049722][ T59] team0 (unregistering): Port device team_slave_0 removed [ 244.801045][ T59] IPVS: stop unused estimator thread 0... [ 245.530127][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 245.864014][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 246.195383][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15