last executing test programs: 5.612592026s ago: executing program 5 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x2c, 0x0, @opaque="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"}}}, 0x4c) 5.22761505s ago: executing program 5 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 4.806486529s ago: executing program 5 (id=276): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/ \x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AQBv/K1eAAAAABAA\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.46536759s ago: executing program 0 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000010900010073797a3000"], 0x10c}}, 0x0) 4.161892526s ago: executing program 2 (id=283): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountproto\x00', &(0x7f0000000200)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='proto\x00', &(0x7f0000000280)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 4.160940435s ago: executing program 0 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x204e, @local}}, {0x14, 0x2, @in={0x2, 0x214e, @remote}}}}]}]}, 0x54}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x3e8, 0x1, 0x3e8}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x11) bind$inet(r3, &(0x7f0000000200)={0x2, 0x214e, @local}, 0x10) sendto$inet(r3, &(0x7f0000000300)="4e00002800000000000000000100000200000000000000000100000201000001", 0x28, 0x0, &(0x7f0000000400)={0x2, 0x204e, @loopback}, 0x10) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x40, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="4e01002800000000000000000100000200000000000000000100000201000001", 0x28, 0x0, &(0x7f0000000400)={0x2, 0x204e, @loopback}, 0x10) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x40, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="4e02002800000000000000000100000200000000000000000100000201000001", 0x28, 0x0, &(0x7f0000000400)={0x2, 0x204e, @loopback}, 0x10) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x40, 0x0, 0x0) 3.716251474s ago: executing program 5 (id=284): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12, @local}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12, @local}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000200)={@local, @local, @void, {@llc={0x4, {@llc={0x12, 0x12, "0100", '\x00\x00\x00\x00'}}}}}, 0x0) 3.700960766s ago: executing program 0 (id=297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0800010073797a30000000025c000000120a010400000000000000000200000a0800010073797a30000000020800020073797a300000000208000300000000073c000400080001000200000005000200110000002800038024000100140001001e0000000a0002003c00000000000000140000001100010000000000000000000200000a"], 0xa4}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000130a010000000000000000000200000a0800010073797a30000000020800020073797a30000000020800030000000007"], 0x28}}, 0x0) 3.519365176s ago: executing program 0 (id=285): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AQAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAA==\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.339380177s ago: executing program 1 (id=287): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01000000", 0x4) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 3.251340834s ago: executing program 3 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400050000000000000000002d000000010000000500010008000000"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800040001000000"], 0x2c}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) ioctl(r1, 0x89e2, &(0x7f0000000300)="0100000008000000") sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000100000008011800"}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00', 0x1}], 0x1}, 0x0) 3.198471543s ago: executing program 2 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 2.992370375s ago: executing program 2 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/all/use_tempaddr\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='2\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/default/use_tempaddr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='2\n\x00', 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='2\n\x00', 0x2) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 2.991460273s ago: executing program 3 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c000500000000000a000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001a00010300000000000000002d000000"], 0x14}}, 0x0) 2.734683224s ago: executing program 5 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000304)) nanosleep(&(0x7f0000000400)={0x1}, 0x0) close(r0) close(r1) 2.732053363s ago: executing program 3 (id=306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0xbb06, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000020)={0x2, 0xbb06, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000100)="009c00011a2b3c4d0001000001000000000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="009c00011a2b3c4d0002000001000100000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="00a800011a2b3c4d0007000012340001000000010000000100010001000100000000", 0x22, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000400)="002000011a2b3c4d00080000567812340100"/32, 0x20, 0x0, 0x0, 0x0) 2.53147592s ago: executing program 3 (id=293): syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 2.418496707s ago: executing program 1 (id=294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='mountport\x00', &(0x7f0000000300)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='port\x00', &(0x7f0000000380)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept4(r0, &(0x7f0000000400)=@in={0x2, 0x0, @loopback}, &(0x7f0000000500)=0x10, 0x800) close(r2) 2.415706692s ago: executing program 0 (id=309): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x1}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x33}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0) 2.338609535s ago: executing program 3 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x68, 0x2, {{0x1, [0x0, 0x1], 0x1, [0x1]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x98}}, 0x0) 2.277932326s ago: executing program 4 (id=298): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x1234, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x22}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x1, 0x1}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @algo_crypt={0x48, 0x2, {{'cipher_null\x00'}}}]}, 0x180}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0x0, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x88, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x1234, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x5678, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x1d0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.119517518s ago: executing program 0 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0 1', 0x3) 2.119124107s ago: executing program 4 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000120)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback}}}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500003c0000000040293da27f0000017f0000016000000000083a40fe800000000000000000000000000001fe8000000000000000000000000000028000000000000000"], 0x3c) 772.371872ms ago: executing program 2 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='test_payload\x00', 0xc) 772.088675ms ago: executing program 3 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x1, 0xb, "111234560000"}}, 0xd) 768.072758ms ago: executing program 1 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='test_data', 0x9}], 0x1}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 747.723105ms ago: executing program 5 (id=303): unshare(0x40000000) r0 = socket$rds(0x15, 0x5, 0x0) close(r0) unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 671.803682ms ago: executing program 4 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 528.648968ms ago: executing program 2 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400050000000000000000002d000000010000000500010008000000"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800040001000000"], 0x2c}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) ioctl(r1, 0x89e2, &(0x7f0000000300)="0100000008000000") sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000100000008011800"}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00', 0x1}], 0x1}, 0x0) 452.676298ms ago: executing program 1 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x0, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x10, 0x20}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x0, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 325.983774ms ago: executing program 4 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs/nfs_dns\x00', 0x10000, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/gssd\x00', 0x10000, 0x0) getdents64(r1, &(0x7f0000000400), 0x1000) 223.721871ms ago: executing program 1 (id=310): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='bye', 0x3}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 149.737913ms ago: executing program 4 (id=311): syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 64.992847ms ago: executing program 2 (id=312): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)='ceph v2\n\x00\x00\x00', 0xb) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) close(r2) close(r0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) 51.479601ms ago: executing program 4 (id=313): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) 0s ago: executing program 1 (id=314): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) shutdown(r4, 0x2) close(r4) close(r5) close(r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 79.656138][ T5605] cgroup: Unknown subsys name 'net' [ 79.767322][ T5605] cgroup: Unknown subsys name 'cpuset' [ 79.776861][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.272563][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.897954][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.906274][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.911107][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.915786][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.923661][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.929203][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.938766][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.950764][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.952592][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.958950][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.966624][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.980064][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.982909][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.989424][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.994608][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.002317][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.008962][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.023711][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.024393][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.033762][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.039040][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.045616][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.053322][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.060397][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.066781][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.073408][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.084431][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.091386][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.094251][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.110409][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.164924][ T5631] Bluetooth: hci3: command tx timeout [ 86.164927][ T5641] Bluetooth: hci1: command tx timeout [ 86.165077][ T5631] Bluetooth: hci2: command tx timeout [ 86.171358][ T4935] Bluetooth: hci0: command tx timeout [ 86.176879][ T5642] Bluetooth: hci5: command tx timeout [ 86.182440][ T5636] Bluetooth: hci4: command tx timeout [ 86.660661][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.668418][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.677338][ T5620] bridge_slave_0: entered allmulticast mode [ 86.685465][ T5620] bridge_slave_0: entered promiscuous mode [ 86.769324][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.776650][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.783986][ T5620] bridge_slave_1: entered allmulticast mode [ 86.792315][ T5620] bridge_slave_1: entered promiscuous mode [ 86.876687][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.884752][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.892338][ T5618] bridge_slave_0: entered allmulticast mode [ 86.900382][ T5618] bridge_slave_0: entered promiscuous mode [ 86.946543][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.960405][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.970909][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.978298][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.986772][ T5618] bridge_slave_1: entered allmulticast mode [ 86.994473][ T5618] bridge_slave_1: entered promiscuous mode [ 87.105146][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.112672][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.119875][ T5622] bridge_slave_0: entered allmulticast mode [ 87.127976][ T5622] bridge_slave_0: entered promiscuous mode [ 87.151967][ T5620] team0: Port device team_slave_0 added [ 87.171072][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.178488][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.186118][ T5619] bridge_slave_0: entered allmulticast mode [ 87.193848][ T5619] bridge_slave_0: entered promiscuous mode [ 87.214914][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.222882][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.230270][ T5622] bridge_slave_1: entered allmulticast mode [ 87.238522][ T5622] bridge_slave_1: entered promiscuous mode [ 87.247160][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.254505][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.261935][ T5624] bridge_slave_0: entered allmulticast mode [ 87.269860][ T5624] bridge_slave_0: entered promiscuous mode [ 87.280252][ T5620] team0: Port device team_slave_1 added [ 87.289078][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.302170][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.312702][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.319929][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.327351][ T5619] bridge_slave_1: entered allmulticast mode [ 87.334964][ T5619] bridge_slave_1: entered promiscuous mode [ 87.368352][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.375592][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.383095][ T5624] bridge_slave_1: entered allmulticast mode [ 87.390754][ T5624] bridge_slave_1: entered promiscuous mode [ 87.448368][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.455692][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.463992][ T5621] bridge_slave_0: entered allmulticast mode [ 87.472291][ T5621] bridge_slave_0: entered promiscuous mode [ 87.521049][ T5618] team0: Port device team_slave_0 added [ 87.539966][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.547285][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.554633][ T5621] bridge_slave_1: entered allmulticast mode [ 87.562572][ T5621] bridge_slave_1: entered promiscuous mode [ 87.573664][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.597840][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.605025][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.631175][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.645815][ T5618] team0: Port device team_slave_1 added [ 87.654946][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.679983][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.693125][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.703316][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.710387][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.736573][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.763165][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.800704][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.848513][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.898113][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.905640][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.931728][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.965021][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.976618][ T5622] team0: Port device team_slave_0 added [ 87.986687][ T5622] team0: Port device team_slave_1 added [ 87.994448][ T5624] team0: Port device team_slave_0 added [ 88.001025][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.008515][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.034495][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.047942][ T5619] team0: Port device team_slave_0 added [ 88.094681][ T5624] team0: Port device team_slave_1 added [ 88.110752][ T5619] team0: Port device team_slave_1 added [ 88.199913][ T5621] team0: Port device team_slave_0 added [ 88.216224][ T5620] hsr_slave_0: entered promiscuous mode [ 88.223284][ T5620] hsr_slave_1: entered promiscuous mode [ 88.231012][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.238545][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.242672][ T4935] Bluetooth: hci0: command tx timeout [ 88.264831][ T5641] Bluetooth: hci1: command tx timeout [ 88.264893][ T5641] Bluetooth: hci5: command tx timeout [ 88.270999][ T5636] Bluetooth: hci4: command tx timeout [ 88.271046][ T5636] Bluetooth: hci2: command tx timeout [ 88.271074][ T5636] Bluetooth: hci3: command tx timeout [ 88.271534][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.313469][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.320431][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.347705][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.371065][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.378495][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.408367][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.443418][ T5621] team0: Port device team_slave_1 added [ 88.467141][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.474652][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.501274][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.534996][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.542081][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.568644][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.622029][ T5618] hsr_slave_0: entered promiscuous mode [ 88.628845][ T5618] hsr_slave_1: entered promiscuous mode [ 88.635819][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 88.642167][ T5618] Cannot create hsr debugfs directory [ 88.662697][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.669923][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.696218][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.708323][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.715886][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.743379][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.808153][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.815368][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.842364][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.880167][ T5624] hsr_slave_0: entered promiscuous mode [ 88.886993][ T5624] hsr_slave_1: entered promiscuous mode [ 88.894031][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 88.899754][ T5624] Cannot create hsr debugfs directory [ 89.008298][ T5622] hsr_slave_0: entered promiscuous mode [ 89.017714][ T5622] hsr_slave_1: entered promiscuous mode [ 89.024257][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 89.030016][ T5622] Cannot create hsr debugfs directory [ 89.075477][ T5619] hsr_slave_0: entered promiscuous mode [ 89.082138][ T5619] hsr_slave_1: entered promiscuous mode [ 89.088469][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 89.094269][ T5619] Cannot create hsr debugfs directory [ 89.220291][ T5621] hsr_slave_0: entered promiscuous mode [ 89.227160][ T5621] hsr_slave_1: entered promiscuous mode [ 89.234239][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 89.240020][ T5621] Cannot create hsr debugfs directory [ 89.879242][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.892690][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.917535][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.929898][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.939255][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.950845][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.970026][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.980380][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.059784][ T5618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.071292][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.081483][ T5618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.097366][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.117964][ T5618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.128587][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.136958][ T5618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.148205][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.253947][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.265185][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.273964][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.286140][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.304811][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.318604][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.325876][ T5642] Bluetooth: hci3: command tx timeout [ 90.325913][ T5642] Bluetooth: hci2: command tx timeout [ 90.325940][ T5642] Bluetooth: hci4: command tx timeout [ 90.325968][ T5642] Bluetooth: hci1: command tx timeout [ 90.326173][ T5641] Bluetooth: hci0: command tx timeout [ 90.331831][ T4935] Bluetooth: hci5: command tx timeout [ 90.336406][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.371131][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.478930][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.499106][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.514867][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.524221][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.534674][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.544635][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.556835][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.576607][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.588518][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.664536][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.717875][ T768] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.725712][ T768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.763619][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.781556][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.800723][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.808174][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.823188][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.835050][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.844385][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.856691][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.865718][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.878727][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.006376][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.096175][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.106675][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.120293][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.129100][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.139810][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.168592][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.183220][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.200569][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.214801][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.236549][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.290494][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.299780][ T9] cfg80211: failed to load regulatory.db [ 91.314959][ T768] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.322221][ T768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.386385][ T768] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.393597][ T768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.405446][ T768] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.412646][ T768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.445113][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.452426][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.479586][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.607917][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.678637][ T768] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.685942][ T768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.747487][ T768] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.754753][ T768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.811526][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.943448][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.979419][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.071127][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.078305][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.100950][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.108300][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.220335][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.354506][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.376174][ T5620] veth0_vlan: entered promiscuous mode [ 92.401857][ T5641] Bluetooth: hci0: command tx timeout [ 92.407812][ T5642] Bluetooth: hci1: command tx timeout [ 92.407843][ T5636] Bluetooth: hci4: command tx timeout [ 92.413895][ T5631] Bluetooth: hci2: command tx timeout [ 92.418825][ T5636] Bluetooth: hci3: command tx timeout [ 92.425366][ T4935] Bluetooth: hci5: command tx timeout [ 92.457035][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.464779][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.521497][ T5620] veth1_vlan: entered promiscuous mode [ 92.536654][ T768] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.544004][ T768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.694852][ T5620] veth0_macvtap: entered promiscuous mode [ 92.752389][ T5620] veth1_macvtap: entered promiscuous mode [ 92.892366][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.949000][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.016358][ T183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.077560][ T183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.122473][ T183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.163414][ T183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228143][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.289387][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.628652][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.674974][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.703715][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.896290][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.930267][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.067560][ T5624] veth0_vlan: entered promiscuous mode [ 94.149935][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.175714][ T5624] veth1_vlan: entered promiscuous mode [ 94.201219][ T5620] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.420513][ T5861] lo speed is unknown, defaulting to 1000 [ 94.438110][ T5624] veth0_macvtap: entered promiscuous mode [ 94.467481][ T5861] lo speed is unknown, defaulting to 1000 [ 94.493521][ T5861] lo speed is unknown, defaulting to 1000 [ 94.495970][ T5624] veth1_macvtap: entered promiscuous mode [ 94.510307][ T5619] veth0_vlan: entered promiscuous mode [ 94.521227][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.570183][ T5619] veth1_vlan: entered promiscuous mode [ 94.606201][ T5622] veth0_vlan: entered promiscuous mode [ 94.620519][ T5618] veth0_vlan: entered promiscuous mode [ 94.675058][ T5618] veth1_vlan: entered promiscuous mode [ 94.691138][ T5622] veth1_vlan: entered promiscuous mode [ 94.703853][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.737402][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.806922][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.817013][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.841216][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.851816][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.858849][ T5861] infiniband syz1: set active [ 94.869452][ T5619] veth0_macvtap: entered promiscuous mode [ 94.869452][ T5861] infiniband syz1: added lo [ 94.895432][ T5861] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 94.915623][ T5861] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 94.936757][ T24] lo speed is unknown, defaulting to 1000 [ 94.937217][ T5861] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 94.942949][ T24] syz1: Port: 1 Link ACTIVE [ 94.968927][ T5619] veth1_macvtap: entered promiscuous mode [ 94.997522][ T5621] veth0_vlan: entered promiscuous mode [ 95.000775][ T5861] RDS/IB: syz1: added [ 95.009094][ T5861] smc: adding ib device syz1 with port count 1 [ 95.017923][ T5861] smc: ib device syz1 port 1 has no pnetid [ 95.052536][ T24] lo speed is unknown, defaulting to 1000 [ 95.075718][ T5861] lo speed is unknown, defaulting to 1000 [ 95.084351][ T5621] veth1_vlan: entered promiscuous mode [ 95.165306][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.175943][ T5618] veth0_macvtap: entered promiscuous mode [ 95.188112][ T5622] veth0_macvtap: entered promiscuous mode [ 95.247352][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.263276][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.266044][ T5618] veth1_macvtap: entered promiscuous mode [ 95.305756][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.321036][ T5622] veth1_macvtap: entered promiscuous mode [ 95.403064][ T132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.417357][ T768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.431826][ T768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.444951][ T132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.467826][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.487493][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.498303][ T132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.507261][ T132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.522153][ T5621] veth0_macvtap: entered promiscuous mode [ 95.533974][ T5861] lo speed is unknown, defaulting to 1000 [ 95.536359][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.573210][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.623150][ T5621] veth1_macvtap: entered promiscuous mode [ 95.647907][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.667374][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.713137][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.727197][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.779888][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.790547][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.834974][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.886997][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.996282][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.063219][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.078660][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.096099][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.099278][ T5861] lo speed is unknown, defaulting to 1000 [ 96.110223][ T768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.125973][ T768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.195875][ T768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245115][ T768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.259261][ T5819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.279171][ T5819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.335485][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.345458][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.427673][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.441288][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.478598][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.506940][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.607326][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.644709][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.804266][ T5861] lo speed is unknown, defaulting to 1000 [ 96.835159][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.870072][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.086485][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.115645][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.195630][ T5884] 9pnet_fd: p9_fd_create_unix (5884): problem creating socket [ 98.118975][ T5861] lo speed is unknown, defaulting to 1000 [ 98.500223][ T5861] lo speed is unknown, defaulting to 1000 [ 98.748869][ T5906] lo speed is unknown, defaulting to 1000 [ 98.781219][ T5906] lo speed is unknown, defaulting to 1000 [ 98.799924][ T5906] lo speed is unknown, defaulting to 1000 [ 98.815586][ T5887] NFSD: Unable to initialize client recovery tracking! (-110) [ 98.855465][ T5887] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 98.892369][ T5887] NFSD: starting 90-second grace period (net f00004ed) [ 98.999723][ T5926] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.069255][ T5929] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.138799][ T5926] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.227797][ T5906] infiniband syz0: set active [ 99.233019][ T5906] infiniband syz0: added lo [ 99.241403][ T5926] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.242485][ T5906] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 99.257457][ T5906] infiniband syz0: Couldn't open port 1 [ 99.276207][ T805] lo speed is unknown, defaulting to 1000 [ 99.285615][ T5906] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 99.301544][ T5906] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 99.319693][ T5906] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 99.435133][ T5926] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.442115][ T5906] RDS/IB: syz0: added [ 99.454346][ T5906] smc: adding ib device syz0 with port count 1 [ 99.464328][ T5906] smc: ib device syz0 port 1 has no pnetid [ 99.485378][ T5788] lo speed is unknown, defaulting to 1000 [ 99.491408][ T5906] lo speed is unknown, defaulting to 1000 [ 99.632508][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.675872][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.723477][ T132] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.749090][ T132] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.876600][ T5906] lo speed is unknown, defaulting to 1000 [ 100.150742][ T5943] Zero length message leads to an empty skb [ 100.263696][ T5906] lo speed is unknown, defaulting to 1000 [ 100.532675][ T5914] NFSD: Unable to initialize client recovery tracking! (-110) [ 100.542074][ T5914] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 100.551144][ T5914] NFSD: starting 90-second grace period (net f00004e2) [ 100.616774][ T5906] lo speed is unknown, defaulting to 1000 [ 100.638949][ T5922] svc: failed to register lockdv1 RPC service (errno 512). [ 100.651049][ T5922] lockd_up: makesock failed, error=-512 [ 100.676981][ T5922] svc: failed to register nfsdv3 RPC service (errno 111). [ 100.686006][ T5922] svc: failed to register nfsaclv3 RPC service (errno 111). [ 100.693917][ T5922] failed to unregister udp with rpcbind [ 100.699780][ T5922] svc: failed to register nfsdv3 RPC service (errno 97). [ 100.709832][ T5922] svc: failed to register nfsaclv3 RPC service (errno 97). [ 100.719109][ T5922] failed to unregister udp with rpcbind [ 100.828093][ T5934] NFSD: Failed to start, no listeners configured. [ 101.132508][ T5906] lo speed is unknown, defaulting to 1000 [ 101.151290][ T5957] 0: reclassify loop, rule prio 0, protocol 03 [ 101.559155][ T805] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 101.651310][ T5977] smc: net device lo applied user defined pnetid SYZ0 [ 101.793242][ T5906] lo speed is unknown, defaulting to 1000 [ 101.834078][ T5788] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 102.027209][ T5980] rdma_rxe: rxe_newlink: failed to add lo [ 102.035656][ T5974] rdma_rxe: rxe_newlink: failed to add lo [ 102.073661][ T5983] smc: removing ib device syz0 [ 102.147346][ T5982] smc: removing ib device syz1 [ 102.274328][ T5991] x_tables: duplicate entry at hook 2 [ 102.306006][ T5983] smbdirect: ib_dev[syz0] removed [ 102.338026][ T5970] ceph: No mds server is up or the cluster is laggy [ 102.358508][ T5982] smbdirect: ib_dev[syz1] removed [ 102.358603][ T5788] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 102.508439][ T5997] rdma_rxe: rxe_newlink: failed to add veth0 [ 103.109320][ T6009] 0: reclassify loop, rule prio 0, protocol 03 [ 103.351722][ T6020] rdma_rxe: rxe_newlink: failed to add lo [ 103.430012][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.53'. [ 103.794391][ T6035] rdma_rxe: rxe_newlink: failed to add veth0 [ 103.829499][ T6036] netlink: 'syz.4.58': attribute type 2 has an invalid length. [ 104.596321][ T6060] 0: reclassify loop, rule prio 0, protocol 03 [ 104.710859][ T6069] rdma_rxe: rxe_newlink: failed to add lo [ 105.189899][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.72'. [ 105.226221][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.72'. [ 105.893626][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 106.174270][ T6116] x_tables: duplicate underflow at hook 2 [ 106.347070][ T187] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.545749][ T187] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 106.575926][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 106.602056][ T187] usb 6-1: Product: syz [ 106.614132][ T187] usb 6-1: Manufacturer: syz [ 107.353666][ T187] speedtch 6-1:1.0: speedtch_bind: wrong device class 0 [ 107.373421][ T187] speedtch 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 107.576617][ T187] usb 6-1: USB disconnect, device number 2 [ 107.785875][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 108.754271][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 108.772430][ T6195] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.222148][ T6211] 9pnet_fd: p9_fd_create_unix (6211): problem creating socket [ 110.733755][ T6268] syz.4.136 uses obsolete (PF_INET,SOCK_PACKET) [ 110.794758][ T6265] tipc: Started in network mode [ 110.811828][ T6265] tipc: Node identity 7f000001, cluster identity 4711 [ 110.851768][ T6265] tipc: Enabled bearer , priority 10 [ 110.885307][ T6265] tipc: Disabling bearer [ 111.777069][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 111.845810][ T6305] rdma_rxe: rxe_newlink: failed to add lo [ 113.682194][ T6327] NFSD: Unable to initialize client recovery tracking! (-110) [ 113.703897][ T6327] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 113.732128][ T6327] NFSD: starting 90-second grace period (net f00004ed) [ 114.234742][ T6372] tipc: Started in network mode [ 114.251858][ T6372] tipc: Node identity 7f000001, cluster identity 4711 [ 114.286710][ T6372] tipc: New replicast peer: 127.0.0.1 [ 114.316066][ T6372] tipc: Enabled bearer , priority 10 [ 114.351061][ T6380] tipc: Started in network mode [ 114.364173][ T6380] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 114.375193][ T6380] tipc: Enabling of bearer rejected, failed to enable media [ 114.637595][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 114.650555][ T6390] tipc: Cannot configure node identity twice [ 114.721061][ T6390] tipc: Enabled bearer , priority 0 [ 114.874245][ T6395] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 114.904624][ T6394] FAULT_INJECTION: forcing a failure. [ 114.904624][ T6394] name fail_futex, interval 1, probability 0, space 0, times 1 [ 115.004695][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) [ 115.004729][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.004743][ T6394] Call Trace: [ 115.004752][ T6394] [ 115.004768][ T6394] dump_stack_lvl+0xe8/0x150 [ 115.004813][ T6394] should_fail_ex+0x40c/0x560 [ 115.004851][ T6394] get_futex_key+0x1b3/0x1580 [ 115.004903][ T6394] ? __pfx_get_futex_key+0x10/0x10 [ 115.004936][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.004966][ T6394] ? __lock_acquire+0x683/0x2cf0 [ 115.005010][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.005043][ T6394] futex_wait_setup+0x4a/0x590 [ 115.005075][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.005107][ T6394] ? __futex_wait+0xdf/0x400 [ 115.005142][ T6394] __futex_wait+0x15f/0x400 [ 115.005178][ T6394] ? __pfx___futex_wait+0x10/0x10 [ 115.005213][ T6394] ? __pfx_futex_wake_mark+0x10/0x10 [ 115.005250][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.005278][ T6394] ? __hrtimer_setup+0x1b7/0x260 [ 115.005304][ T6394] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 115.005339][ T6394] ? ktime_add_safe+0x38/0x70 [ 115.005362][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.005394][ T6394] futex_wait+0x121/0x390 [ 115.005427][ T6394] ? __pfx_futex_wait+0x10/0x10 [ 115.005467][ T6394] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 115.005504][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.005539][ T6394] do_futex+0x3e7/0x4e0 [ 115.005570][ T6394] ? __pfx_do_futex+0x10/0x10 [ 115.005594][ T6394] ? lockdep_hardirqs_on+0x7a/0x110 [ 115.005622][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.005652][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.005681][ T6394] __se_sys_futex+0x3a8/0x450 [ 115.005712][ T6394] ? __pfx___se_sys_futex+0x10/0x10 [ 115.005738][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.005780][ T6394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.005807][ T6394] ? __x64_sys_futex+0x21/0xf0 [ 115.005832][ T6394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.005858][ T6394] do_syscall_64+0x174/0x580 [ 115.005886][ T6394] ? trace_irq_disable+0x3b/0x140 [ 115.005924][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.005948][ T6394] RIP: 0033:0x7f2c0db9de99 [ 115.005970][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.005989][ T6394] RSP: 002b:00007ffe98b80ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.006015][ T6394] RAX: ffffffffffffffda RBX: 000000000001c0ae RCX: 00007f2c0db9de99 [ 115.006032][ T6394] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2c0de25fac [ 115.006047][ T6394] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 115.006062][ T6394] R10: 00007ffe98b80fe0 R11: 0000000000000246 R12: 00007ffe98b81000 [ 115.006079][ T6394] R13: 00007f2c0de25fac R14: 000000000001c0e0 R15: 00007ffe98b80fe0 [ 115.006116][ T6394] [ 115.316460][ T6400] tipc: Started in network mode [ 115.321554][ T6400] tipc: Node identity 1000001, cluster identity 4369 [ 115.328517][ T6400] tipc: Node number set to 16777217 [ 115.334506][ T6400] tipc: Cannot configure node identity twice [ 115.342980][ T6400] tipc: New replicast peer: 127.0.0.1 [ 115.353021][ T6400] tipc: Enabled bearer , priority 10 [ 115.359477][ T6404] lo speed is unknown, defaulting to 1000 [ 115.485560][ T6404] lo speed is unknown, defaulting to 1000 [ 115.486241][ T5776] tipc: Node number set to 2130706433 [ 115.523041][ T6404] lo speed is unknown, defaulting to 1000 [ 115.686538][ T6410] svc: failed to register lockdv1 RPC service (errno 111). [ 115.711910][ T187] tipc: Node number set to 3210880763 [ 116.042176][ T6410] svc: failed to register nfsdv3 RPC service (errno 111). [ 116.082226][ T6410] svc: failed to register nfsaclv3 RPC service (errno 111). [ 116.096779][ T6410] failed to unregister tcp with rpcbind [ 116.114980][ T6410] svc: failed to register nfsdv3 RPC service (errno 97). [ 116.135656][ T6410] svc: failed to register nfsaclv3 RPC service (errno 97). [ 116.151372][ T6410] failed to unregister tcp with rpcbind [ 116.233223][ T5819] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.334870][ T132] netdevsim netdevsim10 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.366124][ T6424] NFSD: Failed to start, no listeners configured. [ 116.703261][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 116.782800][ T6445] tipc: Enabled bearer , priority 1 [ 116.828130][ T6404] infiniband syz0: set active [ 116.833107][ T187] lo speed is unknown, defaulting to 1000 [ 116.868360][ T6404] infiniband syz0: added lo [ 116.975649][ T6443] tipc: Resetting bearer [ 117.018459][ T6404] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 117.095182][ T6404] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 117.101243][ T6443] tipc: Disabling bearer [ 117.139458][ T6404] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 117.302845][ T6404] RDS/IB: syz0: added [ 117.320814][ T6404] smc: adding ib device syz0 with port count 1 [ 117.348108][ T6404] smc: ib device syz0 port 1 has no pnetid [ 117.430465][ T187] lo speed is unknown, defaulting to 1000 [ 117.454451][ T6404] lo speed is unknown, defaulting to 1000 [ 117.729529][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.208'. [ 117.783179][ T6480] netlink: 116 bytes leftover after parsing attributes in process `syz.5.208'. [ 118.245760][ T6498] tipc: Started in network mode [ 118.262081][ T6498] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 118.374306][ T6404] lo speed is unknown, defaulting to 1000 [ 118.593478][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 118.602886][ T6507] openvswitch: netlink: Key 2 has unexpected len 12 expected 4 [ 119.114153][ T6404] lo speed is unknown, defaulting to 1000 [ 119.272001][ T6494] NFSD: Unable to initialize client recovery tracking! (-110) [ 119.295209][ T6494] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 119.321296][ T6494] NFSD: starting 90-second grace period (net f00003cb) [ 119.688149][ T6404] lo speed is unknown, defaulting to 1000 [ 119.828252][ T6543] netlink: 'syz.0.235': attribute type 2 has an invalid length. [ 119.975396][ T6543] : entered promiscuous mode [ 120.026372][ T6550] bridge0: port 3(veth0) entered blocking state [ 120.039784][ T6550] bridge0: port 3(veth0) entered disabled state [ 120.060282][ T6550] veth0: entered allmulticast mode [ 120.085693][ T6550] veth0: entered promiscuous mode [ 120.106426][ T6550] bridge0: port 3(veth0) entered blocking state [ 120.115346][ T6550] bridge0: port 3(veth0) entered listening state [ 120.827156][ T6404] lo speed is unknown, defaulting to 1000 [ 121.065363][ T6595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.247'. [ 121.091367][ T6595] tipc: Enabled bearer , priority 10 [ 121.411942][ T6404] lo speed is unknown, defaulting to 1000 [ 121.676000][ T6610] tipc: Started in network mode [ 121.680981][ T6610] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 121.974357][ T6548] rdma_rxe: rxe_newlink: failed to add lo [ 121.982950][ T6565] smc: removing ib device syz0 [ 122.036810][ T6565] smbdirect: ib_dev[syz0] removed [ 122.415295][ T6627] tipc: Cannot configure node identity twice [ 122.436684][ T6627] tipc: New replicast peer: 127.0.0.1 [ 122.472502][ T6627] tipc: Enabled bearer , priority 10 [ 123.088794][ T6655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.263'. [ 123.592261][ T5775] tipc: Node number set to 2035774871 [ 124.016824][ T5776] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 124.027845][ T6662] ceph: No mds server is up or the cluster is laggy [ 124.316639][ T6682] rdma_rxe: rxe_newlink: failed to add lo [ 124.572256][ T132] rpcbind: server 127.0.0.1 not responding, timed out [ 124.818659][ T5775] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 124.844775][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 125.119353][ T805] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 125.134800][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.280'. [ 125.164244][ T6712] openvswitch: netlink: Flow actions attr not present in new flow. [ 125.333472][ T6716] tipc: Enabling of bearer rejected, already enabled [ 125.431747][ T805] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.593593][ T6699] ceph: No mds server is up or the cluster is laggy [ 125.621562][ T805] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.671803][ T805] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.681159][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.717685][ T805] usb 5-1: SerialNumber: syz [ 125.767653][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 125.777179][ T6721] netlink: 64 bytes leftover after parsing attributes in process `syz.0.297'. [ 125.802546][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 125.851867][ T6691] NFSD: Unable to initialize client recovery tracking! (-110) [ 125.867797][ T6691] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 125.882017][ T6691] NFSD: starting 90-second grace period (net f00004e2) [ 125.974250][ T5776] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 126.244443][ T5776] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 126.286753][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 126.492475][ T805] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 126.516645][ T805] usb 5-1: USB disconnect, device number 2 [ 126.770415][ T6727] ceph: No mds server is up or the cluster is laggy [ 126.779988][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 128.598790][ T6771] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.964971][ T6771] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.230147][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 129.309090][ T6771] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.507548][ T187] ------------[ cut here ]------------ [ 129.513232][ T187] !iov_iter_count(&con->v2.in_iter) [ 129.513255][ T187] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x6634/0x6810, CPU#0: kworker/0:2/187 [ 129.530134][ T187] Modules linked in: [ 129.534395][ T187] CPU: 0 UID: 0 PID: 187 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 129.543932][ T187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.554157][ T187] Workqueue: ceph-msgr ceph_con_workfn [ 129.559769][ T187] RIP: 0010:ceph_con_v2_try_read+0x6634/0x6810 [ 129.566105][ T187] Code: 8d 3d 70 31 d5 04 43 0f b6 04 3e 84 c0 48 8b 54 24 38 0f 85 85 00 00 00 8b 32 67 48 0f b9 3a e9 40 ff ff ff e8 3d cd 31 f6 90 <0f> 0b 90 41 bd c3 ff ff ff e9 32 ff ff ff e8 29 cd 31 f6 90 0f 0b [ 129.586901][ T187] RSP: 0018:ffffc90002e274a0 EFLAGS: 00010293 [ 129.593468][ T187] RAX: ffffffff8b9536c3 RBX: 0000000000000000 RCX: ffff88801fb50000 [ 129.601614][ T187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.609813][ T187] RBP: ffffc90002e27a78 R08: ffff88804f1886a7 R09: ffff88804f18869b [ 129.618042][ T187] R10: dffffc0000000000 R11: ffffed1009e310d5 R12: fffff520005c4ee4 [ 129.626510][ T187] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000 [ 129.635024][ T187] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 129.644254][ T187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.650952][ T187] CR2: 000000110c33b213 CR3: 0000000055bf3000 CR4: 0000000000350ef0 [ 129.659081][ T187] Call Trace: [ 129.662488][ T187] [ 129.665493][ T187] ? unwind_next_frame+0x1baf/0x2550 [ 129.671240][ T187] ? ret_from_fork_asm+0x1a/0x30 [ 129.676505][ T187] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 129.684895][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.692090][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.697873][ T187] ? __lock_acquire+0x683/0x2cf0 [ 129.703139][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.708867][ T187] ? __mutex_trylock_common+0x15f/0x270 [ 129.714543][ T187] ? __pfx___mutex_trylock_common+0x10/0x10 [ 129.720555][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.726356][ T187] ? rcu_is_watching+0x15/0xb0 [ 129.731295][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.737051][ T187] ? trace_contention_end+0x3d/0x140 [ 129.742595][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.748331][ T187] ? __mutex_lock+0x30d/0x1550 [ 129.753218][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.759042][ T187] ? __lock_acquire+0x683/0x2cf0 [ 129.764292][ T187] ? ceph_con_workfn+0x3b/0x14a0 [ 129.769343][ T187] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.774855][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.780605][ T187] ceph_con_workfn+0x1f5/0x14a0 [ 129.785612][ T187] ? rcu_is_watching+0x15/0xb0 [ 129.791031][ T187] ? process_scheduled_works+0xa20/0x14e0 [ 129.797540][ T187] process_scheduled_works+0xa8e/0x14e0 [ 129.803457][ T187] ? __pfx_process_scheduled_works+0x10/0x10 [ 129.809543][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.815342][ T187] ? assign_work+0x3cf/0x5d0 [ 129.820022][ T187] worker_thread+0xa47/0xfb0 [ 129.824845][ T187] kthread+0x388/0x470 [ 129.829052][ T187] ? __pfx_worker_thread+0x10/0x10 [ 129.834470][ T187] ? __pfx_kthread+0x10/0x10 [ 129.839173][ T187] ret_from_fork+0x514/0xb70 [ 129.844379][ T187] ? __pfx_ret_from_fork+0x10/0x10 [ 129.849881][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.855801][ T187] ? __switch_to+0xc89/0x1420 [ 129.860592][ T187] ? __pfx_kthread+0x10/0x10 [ 129.865365][ T187] ret_from_fork_asm+0x1a/0x30 [ 129.870234][ T187] [ 129.871940][ T6813] lo speed is unknown, defaulting to 1000 [ 129.873364][ T187] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.873386][ T187] CPU: 0 UID: 0 PID: 187 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 129.873413][ T187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.873430][ T187] Workqueue: ceph-msgr ceph_con_workfn [ 129.873468][ T187] Call Trace: [ 129.873479][ T187] [ 129.873491][ T187] vpanic+0x56c/0xa60 [ 129.873533][ T187] ? __pfx__printk+0x10/0x10 [ 129.873566][ T187] ? __pfx_vpanic+0x10/0x10 [ 129.873602][ T187] ? is_bpf_text_address+0x292/0x2b0 [ 129.873641][ T187] ? is_bpf_text_address+0x26/0x2b0 [ 129.873688][ T187] panic+0xc5/0xd0 [ 129.873726][ T187] ? __pfx_panic+0x10/0x10 [ 129.873775][ T187] ? ret_from_fork_asm+0x1a/0x30 [ 129.873807][ T187] __warn+0x315/0x4c0 [ 129.873829][ T187] ? ceph_con_v2_try_read+0x6634/0x6810 [ 129.873871][ T187] ? ceph_con_v2_try_read+0x6634/0x6810 [ 129.873907][ T187] __report_bug+0x276/0x570 [ 129.873942][ T187] ? ceph_con_v2_try_read+0x6634/0x6810 [ 129.873982][ T187] ? __pfx___report_bug+0x10/0x10 [ 129.874014][ T187] ? tcp_recvmsg+0x213/0x7f0 [ 129.874049][ T187] ? __local_bh_enable_ip+0xd0/0x130 [ 129.874081][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.874111][ T187] ? lockdep_hardirqs_on+0x7a/0x110 [ 129.874140][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.874171][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.874200][ T187] ? tcp_recvmsg+0x288/0x7f0 [ 129.874230][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.874268][ T187] ? ceph_con_v2_try_read+0x6634/0x6810 [ 129.874305][ T187] report_bug+0x16a/0x220 [ 129.874336][ T187] ? ceph_con_v2_try_read+0x6634/0x6810 [ 129.874370][ T187] ? ceph_con_v2_try_read+0x6636/0x6810 [ 129.874406][ T187] handle_bug+0x9c/0x200 [ 129.874440][ T187] exc_invalid_op+0x1a/0x50 [ 129.874473][ T187] asm_exc_invalid_op+0x1a/0x20 [ 129.874498][ T187] RIP: 0010:ceph_con_v2_try_read+0x6634/0x6810 [ 129.874536][ T187] Code: 8d 3d 70 31 d5 04 43 0f b6 04 3e 84 c0 48 8b 54 24 38 0f 85 85 00 00 00 8b 32 67 48 0f b9 3a e9 40 ff ff ff e8 3d cd 31 f6 90 <0f> 0b 90 41 bd c3 ff ff ff e9 32 ff ff ff e8 29 cd 31 f6 90 0f 0b [ 129.874556][ T187] RSP: 0018:ffffc90002e274a0 EFLAGS: 00010293 [ 129.874578][ T187] RAX: ffffffff8b9536c3 RBX: 0000000000000000 RCX: ffff88801fb50000 [ 129.874596][ T187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.874612][ T187] RBP: ffffc90002e27a78 R08: ffff88804f1886a7 R09: ffff88804f18869b [ 129.874631][ T187] R10: dffffc0000000000 R11: ffffed1009e310d5 R12: fffff520005c4ee4 [ 129.874649][ T187] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000 [ 129.874676][ T187] ? ceph_con_v2_try_read+0x6633/0x6810 [ 129.874729][ T187] ? unwind_next_frame+0x1baf/0x2550 [ 129.874764][ T187] ? ret_from_fork_asm+0x1a/0x30 [ 129.874855][ T187] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 129.874892][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.874926][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.874955][ T187] ? __lock_acquire+0x683/0x2cf0 [ 129.875004][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.875033][ T187] ? __mutex_trylock_common+0x15f/0x270 [ 129.875065][ T187] ? __pfx___mutex_trylock_common+0x10/0x10 [ 129.875095][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.875124][ T187] ? rcu_is_watching+0x15/0xb0 [ 129.875150][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.875178][ T187] ? trace_contention_end+0x3d/0x140 [ 129.875207][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.875236][ T187] ? __mutex_lock+0x30d/0x1550 [ 129.875276][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.875305][ T187] ? __lock_acquire+0x683/0x2cf0 [ 129.875346][ T187] ? ceph_con_workfn+0x3b/0x14a0 [ 129.875389][ T187] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.875422][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.875460][ T187] ceph_con_workfn+0x1f5/0x14a0 [ 129.875492][ T187] ? rcu_is_watching+0x15/0xb0 [ 129.875520][ T187] ? process_scheduled_works+0xa20/0x14e0 [ 129.875551][ T187] process_scheduled_works+0xa8e/0x14e0 [ 129.875613][ T187] ? __pfx_process_scheduled_works+0x10/0x10 [ 129.875650][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.875679][ T187] ? assign_work+0x3cf/0x5d0 [ 129.875715][ T187] worker_thread+0xa47/0xfb0 [ 129.875776][ T187] kthread+0x388/0x470 [ 129.875815][ T187] ? __pfx_worker_thread+0x10/0x10 [ 129.875844][ T187] ? __pfx_kthread+0x10/0x10 [ 129.875882][ T187] ret_from_fork+0x514/0xb70 [ 129.875924][ T187] ? __pfx_ret_from_fork+0x10/0x10 [ 129.875961][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.875990][ T187] ? __switch_to+0xc89/0x1420 [ 129.876026][ T187] ? __pfx_kthread+0x10/0x10 [ 129.876065][ T187] ret_from_fork_asm+0x1a/0x30 [ 129.876108][ T187] [ 129.879373][ T187] Kernel Offset: disabled