last executing test programs: 2.129074107s ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffd8}]}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x28, 0x3, "000000000000000000000000000000000000000000000000000000000000000012340000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x100}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000200)="01020304", 0x4, 0x0, &(0x7f0000000300)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.906909053s ago: executing program 4 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='N\x00', 0x2) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000600)='hello\x00', 0x6) read(r2, &(0x7f0000000500), 0x100) write$P9_RVERSION(r2, &(0x7f0000000100)={0x14, 0x65, 0xffff, 0x1000, 0x7, '9P2000.L'}, 0x14) close(0xffffffffffffffff) 1.805851835s ago: executing program 4 (id=7): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, 0x1401, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 1.639456969s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 1.518851822s ago: executing program 1 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40, 0x1, 0x0, @rand_addr=0x64010101, @local}, @timestamp={0xd, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) 1.237757919s ago: executing program 1 (id=11): socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/24/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) 1.18819719s ago: executing program 1 (id=12): mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='N\x00', 0x2) 1.038133684s ago: executing program 1 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000220)='vers\x00', &(0x7f0000000230)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) 1.037009244s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000780)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f00000007c0)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000200)=""/1000, 0x3e8) 629.293824ms ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x12345678}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="01020304", 0x4}], 0x1}, 0x0) 550.757486ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 433.772129ms ago: executing program 3 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x10000}}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000180)={0x11, 0x3, r3}, 0x14) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 335.424912ms ago: executing program 0 (id=15): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendto$inet(r0, &(0x7f0000000300)="000000000000000200000001000000000000000102000000000000010000000100000000000000010000000001000000", 0x30, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 133.748926ms ago: executing program 0 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x0}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa, 0x0}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x14, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8, 0x0}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @empty}}]}, {0x4, 0x0}, {0xc, 0x0}, {0xc, 0x0}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="000008004500001c0001000040017cce0a0000010a0000020800f7ed00000000"], 0x20) 85.732278ms ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/rdma_rxe/parameters/add\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)='eth0\x00', 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) accept(r1, 0x0, 0x0) close(r2) close(r1) 0s ago: executing program 1 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 47.714154][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.726195][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. syzkaller login: [ 73.183452][ T4173] cgroup: Unknown subsys name 'net' [ 73.319325][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.849494][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.354814][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 76.466021][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 76.516345][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 76.587240][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 76.635414][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.643020][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.651629][ T4192] device bridge_slave_0 entered promiscuous mode [ 76.665354][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.673132][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.681890][ T4192] device bridge_slave_1 entered promiscuous mode [ 76.712514][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 76.762915][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.770173][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.778180][ T4197] device bridge_slave_0 entered promiscuous mode [ 76.790651][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.797769][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.806375][ T4194] device bridge_slave_0 entered promiscuous mode [ 76.829399][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.835973][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.843847][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.853871][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.861828][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.870028][ T4197] device bridge_slave_1 entered promiscuous mode [ 76.886329][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.893772][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.902180][ T4194] device bridge_slave_1 entered promiscuous mode [ 76.910991][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.984204][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.996740][ T4192] team0: Port device team_slave_0 added [ 77.016617][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.024065][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.032498][ T4186] device bridge_slave_0 entered promiscuous mode [ 77.042166][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.053806][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.064338][ T4192] team0: Port device team_slave_1 added [ 77.077450][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.084870][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.093497][ T4185] device bridge_slave_0 entered promiscuous mode [ 77.102181][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.109454][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.117363][ T4186] device bridge_slave_1 entered promiscuous mode [ 77.154326][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.163745][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.171318][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.179913][ T4185] device bridge_slave_1 entered promiscuous mode [ 77.187928][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.195054][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.222002][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.249744][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.265360][ T4197] team0: Port device team_slave_0 added [ 77.279202][ T4197] team0: Port device team_slave_1 added [ 77.285441][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.292799][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.318877][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.338889][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.394880][ T4194] team0: Port device team_slave_0 added [ 77.410264][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.437300][ T4194] team0: Port device team_slave_1 added [ 77.444212][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.451936][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.478538][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.495548][ T4192] device hsr_slave_0 entered promiscuous mode [ 77.503357][ T4192] device hsr_slave_1 entered promiscuous mode [ 77.512493][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.524780][ T4186] team0: Port device team_slave_0 added [ 77.539213][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.546221][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.573405][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.618170][ T4186] team0: Port device team_slave_1 added [ 77.637545][ T4185] team0: Port device team_slave_0 added [ 77.645585][ T4185] team0: Port device team_slave_1 added [ 77.670221][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.678124][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.707454][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.720226][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.727235][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.753983][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.779819][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.786821][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.812825][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.836848][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.844349][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.870932][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.907729][ T4197] device hsr_slave_0 entered promiscuous mode [ 77.915676][ T4197] device hsr_slave_1 entered promiscuous mode [ 77.922656][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.931562][ T4197] Cannot create hsr debugfs directory [ 77.937665][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.945206][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.971639][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.987787][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.995350][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.024064][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 78.028401][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.066588][ T4186] device hsr_slave_0 entered promiscuous mode [ 78.073711][ T4186] device hsr_slave_1 entered promiscuous mode [ 78.080884][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.088729][ T4186] Cannot create hsr debugfs directory [ 78.108687][ T4187] Bluetooth: hci3: command 0x0409 tx timeout [ 78.109211][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 78.115338][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 78.143307][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 78.152333][ T4194] device hsr_slave_0 entered promiscuous mode [ 78.159526][ T4194] device hsr_slave_1 entered promiscuous mode [ 78.166347][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.174261][ T4194] Cannot create hsr debugfs directory [ 78.263028][ T4185] device hsr_slave_0 entered promiscuous mode [ 78.271406][ T4185] device hsr_slave_1 entered promiscuous mode [ 78.278280][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.286030][ T4185] Cannot create hsr debugfs directory [ 78.570829][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.583041][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.601830][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.614485][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.662001][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.678107][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.688757][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.698352][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.807679][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.824166][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.834729][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.845695][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.858111][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.916695][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.929119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.942713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.956728][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.967202][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.992537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.002393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.012654][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.020060][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.029773][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.043015][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.059600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.073252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.084739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.095080][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.102267][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.111584][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.155594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.165149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.176353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.185622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.194543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.203815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.215088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.223799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.232184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.251443][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.276358][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.288320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.297188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.310821][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.323021][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.337800][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.347985][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.360973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.370205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.379530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.389599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.398187][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.405348][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.414216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.428130][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.467833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.485193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.494761][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.502872][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.517733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.535082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.581191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.595336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.605104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.615449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.644470][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.655906][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.682967][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.697554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.707463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.717948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.733082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.741756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.769982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.797043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.813527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.825351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.836093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.857099][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.867157][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.904371][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.916256][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.933484][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.940702][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.958470][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.975262][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.991928][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.002174][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.011570][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.018727][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.031375][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.059201][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.080309][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.097916][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.109343][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 80.117564][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.126615][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.150401][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.172253][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.180496][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 80.186668][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 80.207544][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.216079][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 80.223257][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.232040][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 80.239440][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.254337][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.264916][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.273714][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.311518][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.323130][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.332132][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.341538][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.350349][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.359157][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.368265][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.382264][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.391323][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.398880][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.409685][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.419232][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.428319][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.435479][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.444087][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.453048][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.461718][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.468874][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.477420][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.486002][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.505265][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.517086][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.569089][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.578485][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.588166][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.599411][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.607948][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.615115][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.623559][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.633167][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.642599][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.653500][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.676167][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.685417][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.735705][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.756622][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.765552][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.777278][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.786867][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.796949][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.808363][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.825001][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.835238][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.856129][ T4192] device veth0_vlan entered promiscuous mode [ 80.878308][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.887334][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.897332][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.906331][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.918274][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.927459][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.936785][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.950102][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.962591][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.970878][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.993701][ T4192] device veth1_vlan entered promiscuous mode [ 81.012135][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.020555][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.031251][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.046442][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.056867][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.066076][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.075597][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.086019][ T4197] device veth0_vlan entered promiscuous mode [ 81.094345][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.109732][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.121814][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.131716][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.141261][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.154411][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.174369][ T4197] device veth1_vlan entered promiscuous mode [ 81.192960][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.226895][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.242873][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.257063][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.269256][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.309043][ T4192] device veth0_macvtap entered promiscuous mode [ 81.317338][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.332924][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.346568][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.404666][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.416316][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.434499][ T4192] device veth1_macvtap entered promiscuous mode [ 81.450044][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.459869][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.477758][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.492264][ T4194] device veth0_vlan entered promiscuous mode [ 81.505048][ T4197] device veth0_macvtap entered promiscuous mode [ 81.516757][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.525429][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.535973][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.555034][ T4194] device veth1_vlan entered promiscuous mode [ 81.579268][ T4197] device veth1_macvtap entered promiscuous mode [ 81.591878][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.600601][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.615832][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.628091][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.638805][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.647834][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.660755][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.669562][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.683116][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.702983][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.721156][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.731449][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.741202][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.755942][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.769385][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.783981][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.803938][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.814269][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.845254][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.856460][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.869240][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.880631][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.891762][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.901243][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.909169][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.918100][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.935136][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.945525][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.971655][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.981625][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.998594][ T4194] device veth0_macvtap entered promiscuous mode [ 82.014161][ T4194] device veth1_macvtap entered promiscuous mode [ 82.026980][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.042426][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.053302][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.062947][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.141933][ T4186] device veth0_vlan entered promiscuous mode [ 82.155618][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.167262][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.176242][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.186368][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.190159][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 82.200638][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.209156][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.244418][ T4186] device veth1_vlan entered promiscuous mode [ 82.258839][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.260140][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 82.276273][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 82.284458][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 82.286880][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.291507][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 82.309261][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.320580][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.332806][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.347474][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.357991][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.367336][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.376648][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.388238][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.410678][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.422357][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.432235][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.444226][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.453871][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.465232][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.476724][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.487490][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.499565][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.507011][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.516432][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.539331][ T4185] device veth0_vlan entered promiscuous mode [ 82.549559][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.561736][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.570975][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.578976][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.593740][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.603256][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.613504][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.622539][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.657461][ T298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.667636][ T298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.676785][ T4185] device veth1_vlan entered promiscuous mode [ 82.693421][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.704502][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.736630][ T4186] device veth0_macvtap entered promiscuous mode [ 82.753284][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.761486][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.773921][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.787962][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.808352][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.835402][ T4186] device veth1_macvtap entered promiscuous mode [ 82.861248][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.870417][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.885918][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.897386][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.907846][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.917169][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.948292][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.960966][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.974390][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.986114][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.996617][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.007490][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.019191][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.030958][ T4185] device veth0_macvtap entered promiscuous mode [ 83.049662][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.070031][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.087393][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.123195][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.152174][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.162972][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.176101][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.187075][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.199321][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.212815][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.228324][ T4185] device veth1_macvtap entered promiscuous mode [ 83.237421][ T4268] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.276090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.292682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.312688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.368429][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.385684][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.395180][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.410474][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.434152][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.467901][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.480641][ T4277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 83.489713][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.505112][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.515688][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.527185][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.540209][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.553317][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.567333][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.615844][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.626481][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.641581][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.652531][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.689651][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.714873][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.760195][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.774950][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.796615][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.808040][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.820147][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.831020][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.843594][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.855564][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.875013][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.894600][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.903877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.924249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.940356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.963155][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.995047][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.020037][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029396][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.101584][ T4275] infiniband syz0: set active [ 84.106549][ T4275] infiniband syz0: added veth0 [ 84.165572][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.205965][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.253258][ T4275] RDS/IB: syz0: added [ 84.258047][ T4275] smc: adding ib device syz0 with port count 1 [ 84.265075][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 84.271750][ T4275] smc: ib device syz0 port 1 has pnetid [ 84.281015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.340781][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 84.346948][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 84.367617][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 84.381468][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.384705][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 84.410029][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.432631][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.464877][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.473448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.483514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.527372][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.535904][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.546638][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.683131][ T4300] tipc: Enabling of bearer rejected, failed to enable media [ 84.853413][ T4307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 85.236280][ T4313] [ 85.238667][ T4313] ====================================================== [ 85.245722][ T4313] WARNING: possible circular locking dependency detected [ 85.252792][ T4313] syzkaller #0 Not tainted [ 85.257270][ T4313] ------------------------------------------------------ [ 85.264352][ T4313] syz.3.17/4313 is trying to acquire lock: [ 85.270187][ T4313] ffffffff8d232ad0 (devices_rwsem){++++}-{3:3}, at: ib_register_device+0xcb/0x12e0 [ 85.279562][ T4313] [ 85.279562][ T4313] but task is already holding lock: [ 85.286956][ T4313] ffffffff8c1d4a08 (param_lock){+.+.}-{3:3}, at: param_attr_store+0xcb/0x300 [ 85.295793][ T4313] [ 85.295793][ T4313] which lock already depends on the new lock. [ 85.295793][ T4313] [ 85.306492][ T4313] [ 85.306492][ T4313] the existing dependency chain (in reverse order) is: [ 85.315539][ T4313] [ 85.315539][ T4313] -> #5 (param_lock){+.+.}-{3:3}: [ 85.322795][ T4313] __mutex_lock_common+0x1e5/0x2400 [ 85.328597][ T4313] mutex_lock_nested+0x17/0x20 [ 85.333915][ T4313] ieee80211_init_rate_ctrl_alg+0x171/0x5e0 [ 85.340344][ T4313] ieee80211_register_hw+0x23c6/0x3a60 [ 85.346361][ T4313] mac80211_hwsim_new_radio+0x209d/0x4050 [ 85.352640][ T4313] init_mac80211_hwsim+0x581/0x720 [ 85.358309][ T4313] do_one_initcall+0x272/0x730 [ 85.363634][ T4313] do_initcall_level+0x13d/0x1f0 [ 85.369134][ T4313] do_initcalls+0x4b/0x90 [ 85.374025][ T4313] kernel_init_freeable+0x3d5/0x560 [ 85.379788][ T4313] kernel_init+0x19/0x1b0 [ 85.384689][ T4313] ret_from_fork+0x1f/0x30 [ 85.389690][ T4313] [ 85.389690][ T4313] -> #4 (rtnl_mutex){+.+.}-{3:3}: [ 85.396947][ T4313] __mutex_lock_common+0x1e5/0x2400 [ 85.402731][ T4313] mutex_lock_nested+0x17/0x20 [ 85.408065][ T4313] ib_get_eth_speed+0x16b/0x500 [ 85.413486][ T4313] rxe_query_port+0x58/0x190 [ 85.418642][ T4313] ib_query_port+0x15e/0x7e0 [ 85.423805][ T4313] rxe_port_immutable+0xe0/0x240 [ 85.429313][ T4313] ib_register_device+0xd42/0x12e0 [ 85.434990][ T4313] rxe_register_device+0x256/0x360 [ 85.440679][ T4313] rxe_net_add+0x77/0xe0 [ 85.445511][ T4313] rxe_newlink+0x66/0x100 [ 85.450411][ T4313] nldev_newlink+0x524/0x580 [ 85.455531][ T4313] rdma_nl_rcv+0x6d8/0xa00 [ 85.460521][ T4313] netlink_unicast+0x78f/0x940 [ 85.465945][ T4313] netlink_sendmsg+0x8ba/0xbe0 [ 85.471268][ T4313] ____sys_sendmsg+0x5be/0x8f0 [ 85.476571][ T4313] ___sys_sendmsg+0x236/0x2e0 [ 85.481808][ T4313] __se_sys_sendmsg+0x1b7/0x2a0 [ 85.487219][ T4313] do_syscall_64+0x4c/0xa0 [ 85.492196][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.498722][ T4313] [ 85.498722][ T4313] -> #3 (&rxe->usdev_lock){+.+.}-{3:3}: [ 85.507032][ T4313] __mutex_lock_common+0x1e5/0x2400 [ 85.512890][ T4313] mutex_lock_nested+0x17/0x20 [ 85.518207][ T4313] rxe_query_port+0x46/0x190 [ 85.523329][ T4313] ib_query_port+0x15e/0x7e0 [ 85.528635][ T4313] ib_setup_port_attrs+0x27b/0x2140 [ 85.534406][ T4313] add_one_compat_dev+0x3da/0x5c0 [ 85.539968][ T4313] enable_device_and_get+0x2ac/0x3d0 [ 85.545816][ T4313] ib_register_device+0x1039/0x12e0 [ 85.551578][ T4313] rxe_register_device+0x256/0x360 [ 85.557240][ T4313] rxe_net_add+0x77/0xe0 [ 85.562049][ T4313] rxe_newlink+0x66/0x100 [ 85.566937][ T4313] nldev_newlink+0x524/0x580 [ 85.572053][ T4313] rdma_nl_rcv+0x6d8/0xa00 [ 85.577014][ T4313] netlink_unicast+0x78f/0x940 [ 85.582326][ T4313] netlink_sendmsg+0x8ba/0xbe0 [ 85.587649][ T4313] ____sys_sendmsg+0x5be/0x8f0 [ 85.593130][ T4313] ___sys_sendmsg+0x236/0x2e0 [ 85.598517][ T4313] __se_sys_sendmsg+0x1b7/0x2a0 [ 85.603938][ T4313] do_syscall_64+0x4c/0xa0 [ 85.609016][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.615479][ T4313] [ 85.615479][ T4313] -> #2 (&device->compat_devs_mutex){+.+.}-{3:3}: [ 85.624097][ T4313] __mutex_lock_common+0x1e5/0x2400 [ 85.629993][ T4313] mutex_lock_nested+0x17/0x20 [ 85.635375][ T4313] add_one_compat_dev+0xee/0x5c0 [ 85.640861][ T4313] enable_device_and_get+0x2ac/0x3d0 [ 85.646707][ T4313] ib_register_device+0x1039/0x12e0 [ 85.652450][ T4313] rxe_register_device+0x256/0x360 [ 85.658092][ T4313] rxe_net_add+0x77/0xe0 [ 85.662860][ T4313] rxe_newlink+0x66/0x100 [ 85.667740][ T4313] nldev_newlink+0x524/0x580 [ 85.672861][ T4313] rdma_nl_rcv+0x6d8/0xa00 [ 85.677804][ T4313] netlink_unicast+0x78f/0x940 [ 85.683104][ T4313] netlink_sendmsg+0x8ba/0xbe0 [ 85.688402][ T4313] ____sys_sendmsg+0x5be/0x8f0 [ 85.693787][ T4313] ___sys_sendmsg+0x236/0x2e0 [ 85.699360][ T4313] __se_sys_sendmsg+0x1b7/0x2a0 [ 85.704782][ T4313] do_syscall_64+0x4c/0xa0 [ 85.709930][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.716384][ T4313] [ 85.716384][ T4313] -> #1 (rdma_nets_rwsem){.+.+}-{3:3}: [ 85.724348][ T4313] down_read+0x44/0x2e0 [ 85.729077][ T4313] enable_device_and_get+0x275/0x3d0 [ 85.734934][ T4313] ib_register_device+0x1039/0x12e0 [ 85.740679][ T4313] rxe_register_device+0x256/0x360 [ 85.746673][ T4313] rxe_net_add+0x77/0xe0 [ 85.751457][ T4313] rxe_newlink+0x66/0x100 [ 85.756476][ T4313] nldev_newlink+0x524/0x580 [ 85.761792][ T4313] rdma_nl_rcv+0x6d8/0xa00 [ 85.762058][ T4297] NFSD: attempt to initialize umh client tracking in a container ignored. [ 85.766761][ T4313] netlink_unicast+0x78f/0x940 [ 85.766787][ T4313] netlink_sendmsg+0x8ba/0xbe0 [ 85.766807][ T4313] ____sys_sendmsg+0x5be/0x8f0 [ 85.766828][ T4313] ___sys_sendmsg+0x236/0x2e0 [ 85.785005][ T4297] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 85.785925][ T4313] __se_sys_sendmsg+0x1b7/0x2a0 [ 85.785955][ T4313] do_syscall_64+0x4c/0xa0 [ 85.785974][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.785996][ T4313] [ 85.785996][ T4313] -> #0 (devices_rwsem){++++}-{3:3}: [ 85.786027][ T4313] __lock_acquire+0x2c66/0x7b50 [ 85.786049][ T4313] lock_acquire+0x19e/0x400 [ 85.786069][ T4313] down_write+0x38/0x60 [ 85.786089][ T4313] ib_register_device+0xcb/0x12e0 [ 85.786110][ T4313] rxe_register_device+0x256/0x360 [ 85.786133][ T4313] rxe_net_add+0x77/0xe0 [ 85.786151][ T4313] rxe_param_set_add+0x395/0x590 [ 85.786170][ T4313] param_attr_store+0x20a/0x300 [ 85.797313][ T4297] NFSD: Unable to initialize client recovery tracking! (-22) [ 85.797367][ T4313] module_attr_store+0x5b/0x80 [ 85.812865][ T4297] NFSD: starting 90-second grace period (net f00003d6) [ 85.816563][ T4313] kernfs_fop_write_iter+0x3a8/0x500 [ 85.816595][ T4313] vfs_write+0x748/0xd70 [ 85.902553][ T4313] ksys_write+0x153/0x260 [ 85.907447][ T4313] do_syscall_64+0x4c/0xa0 [ 85.912427][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.918898][ T4313] [ 85.918898][ T4313] other info that might help us debug this: [ 85.918898][ T4313] [ 85.929261][ T4313] Chain exists of: [ 85.929261][ T4313] devices_rwsem --> rtnl_mutex --> param_lock [ 85.929261][ T4313] [ 85.941324][ T4313] Possible unsafe locking scenario: [ 85.941324][ T4313] [ 85.948809][ T4313] CPU0 CPU1 [ 85.954195][ T4313] ---- ---- [ 85.959590][ T4313] lock(param_lock); [ 85.963616][ T4313] lock(rtnl_mutex); [ 85.970128][ T4313] lock(param_lock); [ 85.976668][ T4313] lock(devices_rwsem); [ 85.981069][ T4313] [ 85.981069][ T4313] *** DEADLOCK *** [ 85.981069][ T4313] [ 85.989250][ T4313] 5 locks held by syz.3.17/4313: [ 85.994220][ T4313] #0: ffff88802b59b9f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 86.003465][ T4313] #1: ffff88807c95a460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 86.012402][ T4313] #2: ffff88805ec49c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500 [ 86.022279][ T4313] #3: ffff88801a38ea00 (kn->active){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 86.032090][ T4313] #4: ffffffff8c1d4a08 (param_lock){+.+.}-{3:3}, at: param_attr_store+0xcb/0x300 [ 86.041355][ T4313] [ 86.041355][ T4313] stack backtrace: [ 86.047297][ T4313] CPU: 0 PID: 4313 Comm: syz.3.17 Not tainted syzkaller #0 [ 86.054519][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 86.064601][ T4313] Call Trace: [ 86.067926][ T4313] [ 86.070894][ T4313] dump_stack_lvl+0x188/0x250 [ 86.075638][ T4313] ? load_image+0x410/0x410 [ 86.080157][ T4313] ? show_regs_print_info+0x20/0x20 [ 86.085395][ T4313] ? print_circular_bug+0x12b/0x1a0 [ 86.090615][ T4313] check_noncircular+0x296/0x330 [ 86.095584][ T4313] ? add_chain_block+0x9b0/0x9b0 [ 86.100534][ T4313] ? lockdep_lock+0xf1/0x1f0 [ 86.105179][ T4313] ? mark_lock+0x94/0x320 [ 86.109553][ T4313] ? _find_first_zero_bit+0xd1/0xf0 [ 86.114808][ T4313] __lock_acquire+0x2c66/0x7b50 [ 86.119725][ T4313] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.125815][ T4313] ? verify_lock_unused+0x140/0x140 [ 86.131043][ T4313] ? lock_chain_count+0x20/0x20 [ 86.135957][ T4313] ? __rwlock_init+0x140/0x140 [ 86.140739][ T4313] ? __kernel_text_address+0x9a/0x100 [ 86.146154][ T4313] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 86.152060][ T4313] ? lockdep_hardirqs_on+0x94/0x140 [ 86.157274][ T4313] lock_acquire+0x19e/0x400 [ 86.161810][ T4313] ? ib_register_device+0xcb/0x12e0 [ 86.167060][ T4313] ? __might_sleep+0xf0/0xf0 [ 86.171670][ T4313] ? read_lock_is_recursive+0x10/0x10 [ 86.177064][ T4313] ? __kasan_kmalloc+0xc6/0xe0 [ 86.181849][ T4313] ? __kasan_kmalloc+0xaf/0xe0 [ 86.186655][ T4313] ? crypto_create_tfm_node+0x72/0x340 [ 86.192136][ T4313] ? crypto_alloc_tfm_node+0x177/0x360 [ 86.197632][ T4313] ? rxe_icrc_init+0x1b/0x80 [ 86.202403][ T4313] ? rxe_net_add+0x77/0xe0 [ 86.206859][ T4313] ? rxe_param_set_add+0x395/0x590 [ 86.211995][ T4313] ? param_attr_store+0x20a/0x300 [ 86.217052][ T4313] ? kernfs_fop_write_iter+0x3a8/0x500 [ 86.222562][ T4313] ? vfs_write+0x748/0xd70 [ 86.227043][ T4313] ? ksys_write+0x153/0x260 [ 86.231568][ T4313] ? do_syscall_64+0x4c/0xa0 [ 86.236182][ T4313] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.242270][ T4313] down_write+0x38/0x60 [ 86.246661][ T4313] ? ib_register_device+0xcb/0x12e0 [ 86.252221][ T4313] ib_register_device+0xcb/0x12e0 [ 86.257378][ T4313] ? remove_all_compat_devs+0x260/0x260 [ 86.262975][ T4313] ? crypto_shash_init_tfm+0x1d0/0x310 [ 86.268460][ T4313] ? crc32_pclmul_cra_init+0x9/0x50 [ 86.273718][ T4313] ? crypto_create_tfm_node+0x2ad/0x340 [ 86.279300][ T4313] ? crypto_alloc_tfm_node+0x339/0x360 [ 86.284844][ T4313] rxe_register_device+0x256/0x360 [ 86.289981][ T4313] rxe_net_add+0x77/0xe0 [ 86.294265][ T4313] rxe_param_set_add+0x395/0x590 [ 86.299312][ T4313] ? mutex_lock_io_nested+0x60/0x60 [ 86.304570][ T4313] ? rxe_udp_encap_recv+0x310/0x310 [ 86.311765][ T4313] ? read_lock_is_recursive+0x10/0x10 [ 86.317325][ T4313] param_attr_store+0x20a/0x300 [ 86.322184][ T4313] ? param_attr_show+0x170/0x170 [ 86.327137][ T4313] ? sysfs_kf_read+0x350/0x350 [ 86.331960][ T4313] module_attr_store+0x5b/0x80 [ 86.336778][ T4313] kernfs_fop_write_iter+0x3a8/0x500 [ 86.342126][ T4313] vfs_write+0x748/0xd70 [ 86.346423][ T4313] ? file_end_write+0x250/0x250 [ 86.351284][ T4313] ? mutex_lock_nested+0x17/0x20 [ 86.356236][ T4313] ? __fdget_pos+0x2bf/0x370 [ 86.360842][ T4313] ? ksys_write+0x70/0x260 [ 86.365294][ T4313] ksys_write+0x153/0x260 [ 86.369637][ T4313] ? __ia32_sys_read+0x80/0x80 [ 86.374428][ T4313] ? lockdep_hardirqs_on+0x94/0x140 [ 86.379644][ T4313] do_syscall_64+0x4c/0xa0 [ 86.384095][ T4313] ? clear_bhb_loop+0x30/0x80 [ 86.388792][ T4313] ? clear_bhb_loop+0x30/0x80 [ 86.393503][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.399428][ T4313] RIP: 0033:0x7f6c1ade6e99 [ 86.403877][ T4313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.423514][ T4313] RSP: 002b:00007f6c1903f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.432201][ T4313] RAX: ffffffffffffffda RBX: 00007f6c1b06efa0 RCX: 00007f6c1ade6e99 [ 86.440212][ T4313] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000003 [ 86.448219][ T4313] RBP: 00007f6c1ae7ceaf R08: 0000000000000000 R09: 0000000000000000 [ 86.456236][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.464232][ T4313] R13: 00007f6c1b06f038 R14: 00007f6c1b06efa0 R15: 00007ffc14ac5f48 [ 86.472235][ T4313] [ 86.513591][ T4297] ------------[ cut here ]------------ [ 86.525068][ T4297] kernel BUG at net/sunrpc/svc.c:572! [ 86.540605][ T4297] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 86.546748][ T4297] CPU: 0 PID: 4297 Comm: syz.2.3 Not tainted syzkaller #0 [ 86.553904][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 86.564013][ T4297] RIP: 0010:svc_destroy+0x184/0x190 [ 86.569261][ T4297] Code: 5f 5d e9 ff ae c3 f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 43 c4 f8 e9 17 ff ff ff e8 ac 20 7f f8 <0f> 0b e8 a5 20 7f f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 86.589111][ T4297] RSP: 0018:ffffc900032dfaa0 EFLAGS: 00010283 [ 86.595827][ T4297] RAX: ffffffff88f9e0d4 RBX: ffff88805ffeac50 RCX: 0000000000080000 [ 86.603842][ T4297] RDX: ffffc9000f1a5000 RSI: 0000000000029a66 RDI: 0000000000029a67 [ 86.612068][ T4297] RBP: 0000000000000001 R08: ffff8880b90280c3 R09: 1ffff11017205018 [ 86.620166][ T4297] R10: dffffc0000000000 R11: ffffed1017205019 R12: dffffc0000000000 [ 86.628185][ T4297] R13: ffff88801eee4000 R14: ffff88805ffeac68 R15: ffff8880199d8000 [ 86.636198][ T4297] FS: 00007ffb14c636c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 86.645200][ T4297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.651826][ T4297] CR2: 00007f6c1ae34580 CR3: 000000001e337000 CR4: 00000000003506f0 [ 86.659856][ T4297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.667884][ T4297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.675898][ T4297] Call Trace: [ 86.679209][ T4297] [ 86.682166][ T4297] nfsd_svc+0x7cf/0x9e0 [ 86.686367][ T4297] write_threads+0x2ea/0x350 [ 86.690995][ T4297] ? write_unlock_fs+0x1f0/0x1f0 [ 86.695969][ T4297] ? __might_fault+0xb3/0x110 [ 86.700680][ T4297] ? _copy_from_user+0x111/0x170 [ 86.705661][ T4297] ? simple_transaction_get+0x119/0x140 [ 86.711254][ T4297] nfsctl_transaction_write+0x105/0x150 [ 86.716853][ T4297] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 86.722524][ T4297] vfs_write+0x304/0xd70 [ 86.726812][ T4297] ? file_end_write+0x250/0x250 [ 86.731704][ T4297] ? mutex_lock_nested+0x17/0x20 [ 86.736681][ T4297] ? __fdget_pos+0x2bf/0x370 [ 86.741304][ T4297] ? ksys_write+0x70/0x260 [ 86.745766][ T4297] ksys_write+0x153/0x260 [ 86.750140][ T4297] ? __ia32_sys_read+0x80/0x80 [ 86.754936][ T4297] ? lockdep_hardirqs_on+0x94/0x140 [ 86.760172][ T4297] do_syscall_64+0x4c/0xa0 [ 86.764621][ T4297] ? clear_bhb_loop+0x30/0x80 [ 86.765550][ T4313] eth0 speed is unknown, defaulting to 1000 [ 86.769346][ T4297] ? clear_bhb_loop+0x30/0x80 [ 86.769374][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.769397][ T4297] RIP: 0033:0x7ffb16a2be99 [ 86.769415][ T4297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.769432][ T4297] RSP: 002b:00007ffb14c63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.769455][ T4297] RAX: ffffffffffffffda RBX: 00007ffb16cb4090 RCX: 00007ffb16a2be99 [ 86.806970][ T4313] eth0 speed is unknown, defaulting to 1000 [ 86.810753][ T4297] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000004 [ 86.810779][ T4297] RBP: 00007ffb16ac1eaf R08: 0000000000000000 R09: 0000000000000000 [ 86.810791][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.810803][ T4297] R13: 00007ffb16cb4128 R14: 00007ffb16cb4090 R15: 00007ffe73efa808 [ 86.810826][ T4297] [ 86.810844][ T4297] Modules linked in: [ 86.872852][ T4297] ---[ end trace 53c25224446f15cf ]--- [ 86.872874][ T4297] RIP: 0010:svc_destroy+0x184/0x190 [ 86.892135][ T4313] eth0 speed is unknown, defaulting to 1000 [ 86.926107][ T4297] Code: 5f 5d e9 ff ae c3 f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 43 c4 f8 e9 17 ff ff ff e8 ac 20 7f f8 <0f> 0b e8 a5 20 7f f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 86.948899][ T4297] RSP: 0018:ffffc900032dfaa0 EFLAGS: 00010283 [ 86.955237][ T4297] RAX: ffffffff88f9e0d4 RBX: ffff88805ffeac50 RCX: 0000000000080000 [ 86.964272][ T4297] RDX: ffffc9000f1a5000 RSI: 0000000000029a66 RDI: 0000000000029a67 [ 86.975590][ T4297] RBP: 0000000000000001 R08: ffff8880b90280c3 R09: 1ffff11017205018 [ 86.985364][ T4297] R10: dffffc0000000000 R11: ffffed1017205019 R12: dffffc0000000000 [ 86.994217][ T4297] R13: ffff88801eee4000 R14: ffff88805ffeac68 R15: ffff8880199d8000 [ 87.002759][ T4297] FS: 00007ffb14c636c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 87.012652][ T4297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.020779][ T4297] CR2: 00007fb5022142f8 CR3: 000000001e337000 CR4: 00000000003506f0 [ 87.029773][ T4297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.038040][ T4297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.047066][ T4297] Kernel panic - not syncing: Fatal exception [ 87.053402][ T4297] Kernel Offset: disabled [ 87.058010][ T4297] Rebooting in 86400 seconds..