last executing test programs: 2m27.415462512s ago: executing program 32 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x6) setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="01000000", 0x4) bind(r0, &(0x7f0000000200)=@in={0x2, 0x108, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='3\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000500)=@in={0x2, 0x108, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) close(r0) 2m25.366026181s ago: executing program 33 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(&(0x7f0000000740)=@filename='proc\x00', &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='127.0.0.1 / 2147483647 0 0 0\n\x00', 0x1d) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0) close(r4) 2m25.311147732s ago: executing program 34 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 -4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) r3 = socket(0x2, 0x2, 0x0) sendto(r3, &(0x7f0000000800)='12345678901234567890\x00', 0x14, 0x0, &(0x7f0000000900)=@in={0x2, 0x801, @loopback}, 0x10) 2m19.723032558s ago: executing program 35 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-4\n\x00', 0x3) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m10.202371948s ago: executing program 36 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='inet 2049\n\x00', 0xa) write(r0, &(0x7f0000000700)='tcp 2049\n\x00', 0x9) write(r0, &(0x7f0000000800)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='2\n\x00', 0x2) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000c00)={0x2, 0x801, @loopback}, 0x10) sendto(r2, &(0x7f0000000d00)="000000010000000000000002000186a00000000200000001000000010000002000"/56, 0x38, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x1dcd6500}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001100)="1400000024000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001400)="1400000024000103010000000000000002010000", 0x14}], 0x1}, 0x0) 2m5.56590088s ago: executing program 37 (id=28): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x41}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x801, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='+3 -4\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='4\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\n\x00', 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x801, @loopback}, 0x10) write(r5, &(0x7f00000003c0)="80000040000000010000000000000002000186a300000003000000010000000100000014000000010000000000000000000000000000000000000000000000000000002000"/100, 0x64) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='none\x00', &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) 2m5.492245882s ago: executing program 38 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./var\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./var/run\x00', 0x1ed) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './var/run/rpcbind.sock\x00'}, 0x1a) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\x00/run/rpcbind.sock\x00'}, 0x14) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='4\n\x00', 0x2) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000800)={0x2, 0x108, @loopback}, 0x10) 1m48.339718917s ago: executing program 0 (id=126): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'lo\x00', 'lo\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x20, 0x2710, 0x2710, 0x64, 0x64, 0x64, 0x64, 0x8, 0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x400) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x1, '\x00'}}}}}, 0x0) 1m48.311959818s ago: executing program 0 (id=127): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000080)={0x0, 0x0}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)={0x14, 0x65, 0xffff, 0x1000, 0x7, '9P2000.L'}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x777) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m47.359745811s ago: executing program 0 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="123456780000000000000002000186a30000000300000001000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='nfsd 127.0.0.1 9999999 domain\n', 0x1d) close(r3) 1m43.637281981s ago: executing program 39 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1m37.030323771s ago: executing program 1 (id=153): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x14, 0x114, 0xc, 0x1}], 0x18}, 0x0) 1m36.923849443s ago: executing program 1 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1m36.912205724s ago: executing program 1 (id=155): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'bridge0\x00', @ifru_ivalue=0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syz_tun\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n\x00', 0x2) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c000040000102430bc0a80102e0000016940400002200df090000000104000001ef0101010a000001"], 0x0) 1m36.822857036s ago: executing program 1 (id=156): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b7000000020000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000400)="001122334455", 0x0, 0x2, 0x0, 0x1}, 0x50) 1m36.707750359s ago: executing program 1 (id=157): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000100)={0x2, 0x6bb, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000200)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="009800011a2b3c4d000100000100000000000001000000010001000100"/156, 0x98, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000400)="009800011a2b3c4d000200000100010000000001000000010001000100"/156, 0x98, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000500)="00a800011a2b3c4d0007000000010001000000010000000100000001000000010001000100"/168, 0xa8, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000600)="002000011a2b3c4d000800000002000101000000000003e80001000100000001", 0x20, 0x0, 0x0, 0x0) 1m36.688224029s ago: executing program 1 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./nfsd\x00', &(0x7f0000000540)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000780)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f00000007c0)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000800)=""/1000, 0x3e8) read(r1, &(0x7f0000000c00)=""/1000, 0x3e8) 1m35.660102954s ago: executing program 40 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000008c0)='nfsd 127.0.0.1 2000000000 domain\n\x00', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000009c0)='udp 2049\n\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='1\n\x00', 0x2) (async) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f0000000a80)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000200)=""/1000, 0x3e8) read(r3, &(0x7f0000000300)=""/1000, 0x3e8) read(r1, &(0x7f0000000400)=""/1000, 0x3e8) 1m31.627065542s ago: executing program 41 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="123456780000000000000002000186a30000000300000001000000010000001400"/60, 0x3c, 0x0, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='nfsd 127.0.0.1 9999999 domain\n', 0x1d) close(r3) 1m24.791844147s ago: executing program 42 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./nfsd/portadd\x00', 0x1, 0x0) write(r0, &(0x7f0000000060)='2049\n\x00', 0x5) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000120)={0x2, 0x4e21, @loopback}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\x00', 0x1) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m23.144574997s ago: executing program 3 (id=190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@RTM_NEWMDB={0x38, 0x54, 0x601, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x0, {@ip4=@multicast1, 0x8008}}}]}, 0x38}}, 0x0) 1m22.947778552s ago: executing program 3 (id=191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e}]}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000041000701010000000000000004010000000000000c00010006000600080000001400020010000c000900090073797a3000000000"], 0x3c}}, 0x0) 1m22.864378534s ago: executing program 3 (id=192): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000040)={0x20, 0x10, 0x1, 0x0, 0x0, {0x3}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 1m22.814423365s ago: executing program 3 (id=193): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0) memfd_create(0x0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r7 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) syz_usb_connect(0x6, 0x8e6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x9, 0xf4, 0x10, 0x20, 0x6}, 0xb0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1, [{0x5e, &(0x7f0000001300)=@string={0x5e, 0x3, "f4e41584a73bfeaf7c330d67651caa651319cc4163abb59e32469129d11b9e602ee99a548c6a314b0fc16dac3e177224fda4f81bbe755487beac6d5c355b22ff3339d0ad433610c4274a2ee948b0b7f9ce8d8fab88d8779b02404a12"}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m21.743247311s ago: executing program 3 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x2, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ffff0040950b901700010102030109022700010100a0320904000003ffff0000070581020002000705020200020007058303100008"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000250)={0x0, 0x1dcd6500}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x18, {0x1}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, 0x2}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x28}}, 0x0) 1m20.765261005s ago: executing program 43 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./nfsd\x00', &(0x7f0000000540)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000780)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f00000007c0)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000800)=""/1000, 0x3e8) read(r1, &(0x7f0000000c00)=""/1000, 0x3e8) 1m19.621821823s ago: executing program 3 (id=198): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x40000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000005800010001000000000000000000000008000100020000000800030005000000"], 0x24}}, 0x0) close(r1) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) 1m18.561266488s ago: executing program 2 (id=200): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24, &(0x7f0000000300)=[{&(0x7f0000000340)='hello\x00', 0x6}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000520)=[{&(0x7f0000000540), 0x100}], 0x1}, 0x20) 1m18.338218924s ago: executing program 2 (id=201): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0) memfd_create(0x0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r7 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) syz_usb_connect(0x6, 0x8e6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x9, 0xf4, 0x10, 0x20, 0x6}, 0xb0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1, [{0x5e, &(0x7f0000001300)=@string={0x5e, 0x3, "f4e41584a73bfeaf7c330d67651caa651319cc4163abb59e32469129d11b9e602ee99a548c6a314b0fc16dac3e177224fda4f81bbe755487beac6d5c355b22ff3339d0ad433610c4274a2ee948b0b7f9ce8d8fab88d8779b02404a12"}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m17.088931874s ago: executing program 2 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1388, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="45000028000100004084364dac140001ac14000213881388000000000000000006000004"], 0x28) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m16.525697667s ago: executing program 2 (id=203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000033000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000034000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000035000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000036000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000037000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000038000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000039000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000003a000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) ioctl(r0, 0x8933, &(0x7f0000000200)='lo\x00') sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000330001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000340001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000350001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000360001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000370001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000380001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000390001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="480000003a0001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) 1m16.256563934s ago: executing program 2 (id=204): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 1m16.02060846s ago: executing program 2 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='100', 0x3) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 1m0.876515066s ago: executing program 44 (id=198): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x40000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000005800010001000000000000000000000008000100020000000800030005000000"], 0x24}}, 0x0) close(r1) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) 1m0.530930704s ago: executing program 45 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='100', 0x3) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 41.149437124s ago: executing program 6 (id=206): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x800) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x3, 's'}}}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x2, "1d00"}}}}}, 0x0) 41.071957555s ago: executing program 6 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 40.787828312s ago: executing program 6 (id=228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@null, 0x0, 'syz_tun\x00'}) bind$x25(r2, &(0x7f0000000400), 0x12) connect$x25(r2, &(0x7f0000000500), 0x12) write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x800}, @void, @x25={0x0, 0x0, 0x0, "123456"}}, 0xd) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 40.47008527s ago: executing program 6 (id=229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000000)={&(0x7f0000000020)=@ipv6_newroute={0x3c, 0x18, 0x405, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1234567812345678}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x0, &(0x7f0000000040)={&(0x7f0000000060)=@ipv6_getroute={0x1c, 0x1a, 0x301}, 0x1c}}, 0x0) 40.151793018s ago: executing program 6 (id=230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x0, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x1, 0x0, 0x0, {0x2}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x0, 0x11, 0x1, 0x0, 0x0, {0x2}}}}}, 0x0) 39.983497582s ago: executing program 6 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./export\x00', 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost ./export 2147483647 0 0 0 0\n\x00', 0x26) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/file1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/file2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/file3\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./export/file4\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./export/file5\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./export/file6\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./export/file7\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./export/file8\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export/file9\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./export/file10\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a3000000030000001000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 39.775446037s ago: executing program 5 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8, 0x3e8, 0x19, 0x10, 0x1, 0x1, 0x3e8, 0xa, 0xa}}}}]}, 0x58}}, 0x0) 38.623614865s ago: executing program 5 (id=237): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 38.438168859s ago: executing program 5 (id=239): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 35.758299474s ago: executing program 5 (id=245): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='xprtsec\x00', 0x0, 0x0) 35.51538927s ago: executing program 5 (id=247): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 35.377943423s ago: executing program 5 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='3\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='0\x00', 0x2) close(r2) 35.195566078s ago: executing program 4 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="0011223344556677", 0x8, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) 34.987691483s ago: executing program 4 (id=251): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, {[{{@ipv6={@loopback, @loopback, [], [], 'lo\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'lo\x00'}}}, {{@ipv6={@loopback, @loopback, [], [], 'lo\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'lo\x00'}}}, {{@ipv6={@loopback, @loopback, [], [], 'lo\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'lo\x00'}}}, {{@ipv6={@loopback, @loopback, [], [], 'lo\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'lo\x00'}}}, {{@ipv6={@loopback, @loopback, [], [], 'lo\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 34.904245315s ago: executing program 4 (id=252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000800), 0xc, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c01000010006c0000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000007f000001000000000000000000000000000004d26c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000200000020000000480008006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000f0001001234123400007f000001000000000000000000000000080022000a000000"], 0x15c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 34.651204111s ago: executing program 4 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x1, 0x1, 0x1, {0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, 0x20}}, 0x0) 34.443397036s ago: executing program 4 (id=254): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 33.548990588s ago: executing program 4 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r12 = socket$inet(0x2, 0x1, 0x0) connect$inet(r12, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r13 = socket$inet(0x2, 0x1, 0x0) connect$inet(r13, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r14 = socket$inet(0x2, 0x1, 0x0) connect$inet(r14, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 24.271522412s ago: executing program 46 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./export\x00', 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost ./export 2147483647 0 0 0 0\n\x00', 0x26) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/file1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/file2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/file3\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./export/file4\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./export/file5\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./export/file6\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./export/file7\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./export/file8\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export/file9\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./export/file10\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a3000000030000001000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 22.581576563s ago: executing program 8 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000200)='bridge0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x601}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'bridge0\x00', 0x1}) r3 = socket(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@nat, 0x100) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) 22.383653758s ago: executing program 8 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) listen(0xffffffffffffffff, 0x5) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/46, 0x2e) socket$inet6(0xa, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42814}, 0x4000014) 21.393318642s ago: executing program 8 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x34}}, 0x0) 21.264114385s ago: executing program 8 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x0, 0x0, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x0, 0x0, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x0, 0x0, 'syz1\x00'}, @NFTA_SET_NAME={0x0, 0x0, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x0, 0x0, 0x0, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x0, 0x0, 0x0, 0x0, 0x4}, @NFTA_SET_FLAGS={0x0, 0x0, 0x0, 0x0, 0x28}, @NFTA_SET_ID={0x0, 0x0, 0x0, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x0, 0x0, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x0, 0x0, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x0, @meta={{0x0, 0x0}, @val={0x0, 0x0, 0x0, 0x0, [@NFTA_META_KEY={0x0, 0x0, 0x0}, @NFTA_META_DREG={0x0, 0x0, 0x0, 0x0, 0x1}]}}}, {0x0, 0x0, 0x0, 0x0, @dynset={{0x0, 0x0}, @val={0x0, 0x0, 0x0, 0x0, [@NFTA_DYNSET_SET_NAME={0x0, 0x0, 'syz1\x00'}, @NFTA_DYNSET_OP={0x0, 0x0, 0x0}, @NFTA_DYNSET_SREG_KEY={0x0, 0x0, 0x0, 0x0, 0x1}, @NFTA_DYNSET_SREG_DATA={0x0, 0x0, 0x0, 0x0, 0x1}]}}}]}]}], {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x200}}, 0x0) 21.143746328s ago: executing program 8 (id=279): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x7) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x10}, 0x10) getsockname$llc(r0, &(0x7f0000000100), &(0x7f0000000200)=0x10) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x10, @random="feffffffffff"}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000300)={@remote, @local, @void, {@generic={0x3, "10106f"}}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000400)={@remote, @local, @void, {@generic={0x4, "10100101"}}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0) 20.2449104s ago: executing program 47 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='3\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='0\x00', 0x2) close(r2) 20.2204514s ago: executing program 8 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) (async) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000600), 0x1000) 18.272955598s ago: executing program 48 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r12 = socket$inet(0x2, 0x1, 0x0) connect$inet(r12, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r13 = socket$inet(0x2, 0x1, 0x0) connect$inet(r13, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r14 = socket$inet(0x2, 0x1, 0x0) connect$inet(r14, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 10.624091192s ago: executing program 0 (id=280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) syz_emit_ethernet(0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000190640fe800000000000000000000000000001fe8000000000000000000000000000014e234e220000000100000001501010000000000068656c6c6f"], 0x0) syz_emit_ethernet(0x57, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000190640fe800000000000000000000000000001fe8000000000000000000000000000014e234e220000000200000002501010000000000068656c6c6f"], 0x0) 9.347778133s ago: executing program 0 (id=289): r0 = socket$inet6(0xa, 0x801, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x1}, 0x1c) write(r0, &(0x7f0000000100)='hello', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e23, 0x1, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 9.154007958s ago: executing program 0 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='./rec\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 4.567782429s ago: executing program 49 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) (async) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000600), 0x1000) 4.285899785s ago: executing program 9 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) close(r4) 4.13808452s ago: executing program 9 (id=303): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000800)={0x2}, 0x0) 3.153429953s ago: executing program 7 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800008}]}, 0x30}}, 0x0) 3.007547917s ago: executing program 9 (id=308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='3\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r3, &(0x7f00000005c0)='1\n', 0x2) close(r3) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@link_local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2}}}}}, 0x0) 2.979525768s ago: executing program 7 (id=309): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) listen(r1, 0x5) 2.815815132s ago: executing program 7 (id=310): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 2.771994983s ago: executing program 9 (id=311): r0 = socket(0x2, 0x3, 0x84) sendto$inet(r0, &(0x7f0000000000)="010010e20000000000000000010000380000000100010000000a000a000000008002002400"/68, 0x44, 0x0, &(0x7f0000000100)={0x2, 0x10e2, @loopback}, 0x10) 2.47142411s ago: executing program 9 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='3\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) close(r5) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x20202c8, @multicast1, {[@ra={0x94, 0x4}]}}, "2200334f0000000106000001e1010203c0a80101"}}}}, 0x0) 1.885906864s ago: executing program 7 (id=313): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1127, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x30}}, 0x0) 1.727880578s ago: executing program 9 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000140)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='8\n\x00', 0x2) 894.946308ms ago: executing program 7 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3210, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x3210, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x9a, &(0x7f0000000200), 0x4) 0s ago: executing program 7 (id=316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) write(r2, &(0x7f0000000240)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @local, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 188.069889][ C1] ? hrtimer_interrupt+0x980/0x980 [ 188.075104][ C1] ? read_tsc+0x9/0x20 [ 188.079195][ C1] hrtimer_run_softirq+0x177/0x290 [ 188.084328][ C1] handle_softirqs+0x27d/0x820 [ 188.089121][ C1] ? read_tsc+0x9/0x20 [ 188.093219][ C1] ? ktime_get+0x24b/0x280 [ 188.097651][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 188.102472][ C1] ? do_softirq+0x1a0/0x1a0 [ 188.107082][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 188.112304][ C1] __irq_exit_rcu+0xd3/0x190 [ 188.116916][ C1] ? irq_exit_rcu+0x20/0x20 [ 188.121444][ C1] irq_exit_rcu+0x9/0x20 [ 188.125702][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 188.131357][ C1] [ 188.134297][ C1] [ 188.137261][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.143254][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 188.149861][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 188.169477][ C1] RSP: 0018:ffffc900001d79c0 EFLAGS: 00000206 [ 188.175554][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: e5114628f9f1ae00 [ 188.183567][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 188.191566][ C1] RBP: ffffc900001d7a58 R08: ffffffff911eb5b7 R09: 1ffffffff223d6b6 [ 188.199552][ C1] R10: dffffc0000000000 R11: fffffbfff223d6b7 R12: dffffc0000000000 [ 188.207548][ C1] R13: ffff88801e6dd028 R14: ffffffff9755a0f8 R15: 1ffff9200003af38 [ 188.215546][ C1] ? _raw_spin_unlock+0x40/0x40 [ 188.220420][ C1] ? debug_object_active_state+0x6f/0x370 [ 188.226164][ C1] kvfree_rcu_bulk+0x10e/0x470 [ 188.230946][ C1] ? kvfree_rcu_bulk+0x135/0x470 [ 188.235898][ C1] kfree_rcu_work+0x337/0x3b0 [ 188.240594][ C1] ? rcu_core+0x17f0/0x17f0 [ 188.245110][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.250327][ C1] ? process_scheduled_works+0x975/0x1600 [ 188.256069][ C1] ? process_scheduled_works+0x975/0x1600 [ 188.261819][ C1] process_scheduled_works+0xa60/0x1600 [ 188.267404][ C1] ? worker_attach_to_pool+0x370/0x370 [ 188.272885][ C1] ? assign_work+0x3cc/0x5d0 [ 188.277509][ C1] worker_thread+0xa5e/0xfe0 [ 188.282164][ C1] kthread+0x2fa/0x390 [ 188.286282][ C1] ? pr_cont_work+0x550/0x550 [ 188.290978][ C1] ? kthread_blkcg+0xd0/0xd0 [ 188.295591][ C1] ret_from_fork+0x48/0x80 [ 188.300041][ C1] ? kthread_blkcg+0xd0/0xd0 [ 188.304750][ C1] ret_from_fork_asm+0x11/0x20 [ 188.309549][ C1] [ 188.312595][ C0] CPU: 0 PID: 6557 Comm: syz-executor Not tainted syzkaller #0 [ 188.312742][ C1] FAULT_INJECTION: forcing a failure. [ 188.312742][ C1] name failslab, interval 1, probability 100, space 0, times 78 [ 188.320156][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 188.320171][ C0] Call Trace: [ 188.320180][ C0] [ 188.320187][ C0] dump_stack_lvl+0x18c/0x250 [ 188.353921][ C0] ? show_regs_print_info+0x20/0x20 [ 188.359137][ C0] ? load_image+0x420/0x420 [ 188.363665][ C0] ? mark_lock+0x94/0x320 [ 188.368027][ C0] ? verify_lock_unused+0x140/0x140 [ 188.373259][ C0] ? mark_lock+0x94/0x320 [ 188.377616][ C0] should_fail_ex+0x394/0x4c0 [ 188.382317][ C0] should_failslab+0x9/0x20 [ 188.386835][ C0] slab_pre_alloc_hook+0x59/0x300 [ 188.391903][ C0] ? __lock_acquire+0x1262/0x7d80 [ 188.396942][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 188.402162][ C0] ? __alloc_skb+0x103/0x2c0 [ 188.406776][ C0] __alloc_skb+0x103/0x2c0 [ 188.411219][ C0] __netdev_alloc_skb+0x10c/0x500 [ 188.416254][ C0] ? kmalloc_reserve+0x240/0x240 [ 188.421208][ C0] __ieee80211_beacon_get+0xd5d/0x1520 [ 188.426687][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 188.432257][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 188.437736][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 188.444524][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 188.450092][ C0] __iterate_interfaces+0x225/0x4c0 [ 188.455331][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 188.461610][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 188.468823][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 188.475084][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 188.482125][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 188.487334][ C0] ? hw_scan_work+0xf10/0xf10 [ 188.492064][ C0] __hrtimer_run_queues+0x525/0xc10 [ 188.497292][ C0] ? hrtimer_interrupt+0x980/0x980 [ 188.502416][ C0] ? read_tsc+0x9/0x20 [ 188.506505][ C0] hrtimer_run_softirq+0x177/0x290 [ 188.511636][ C0] handle_softirqs+0x27d/0x820 [ 188.516409][ C0] ? read_tsc+0x9/0x20 [ 188.520511][ C0] ? ktime_get+0x24b/0x280 [ 188.524949][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 188.529732][ C0] ? do_softirq+0x1a0/0x1a0 [ 188.534269][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 188.539505][ C0] __irq_exit_rcu+0xd3/0x190 [ 188.544107][ C0] ? irq_exit_rcu+0x20/0x20 [ 188.548625][ C0] irq_exit_rcu+0x9/0x20 [ 188.552879][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 188.558541][ C0] [ 188.561499][ C0] [ 188.564464][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.570486][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 188.577011][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 188.596739][ C0] RSP: 0018:ffffc900322deba0 EFLAGS: 00000206 [ 188.602821][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 5426a186b0869c00 [ 188.610805][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 188.618819][ C0] RBP: ffffc900322dec30 R08: ffffffff911eb50f R09: 1ffffffff223d6a1 [ 188.626822][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a2 R12: dffffc0000000000 [ 188.634804][ C0] R13: 0000000000000a06 R14: ffffffff8e3d9280 R15: 1ffff9200645bd74 [ 188.642823][ C0] ? _raw_spin_unlock+0x40/0x40 [ 188.647692][ C0] ? veth_get_iflink+0x204/0x260 [ 188.652656][ C0] ? linkwatch_urgent_event+0xe2/0x3c0 [ 188.658145][ C0] linkwatch_fire_event+0x1cc/0x210 [ 188.663448][ C0] netif_carrier_on+0x9f/0x130 [ 188.668234][ C0] veth_open+0x1de/0x230 [ 188.672498][ C0] __dev_open+0x2cb/0x430 [ 188.676842][ C0] ? dev_open+0x190/0x190 [ 188.681194][ C0] __dev_change_flags+0x1e8/0x6a0 [ 188.686226][ C0] ? kasan_quarantine_put+0xd8/0x220 [ 188.691548][ C0] ? dev_get_flags+0x1c0/0x1c0 [ 188.696321][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 188.701973][ C0] dev_change_flags+0x7c/0x1a0 [ 188.706748][ C0] do_setlink+0xb69/0x3f40 [ 188.711180][ C0] ? arch_stack_walk+0x160/0x190 [ 188.716151][ C0] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 188.722320][ C0] ? stack_trace_save+0xaa/0x100 [ 188.727275][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 188.732425][ C0] ? __nla_validate+0x50/0x50 [ 188.737138][ C0] ? validate_linkmsg+0x719/0x910 [ 188.742177][ C0] rtnl_newlink+0x1848/0x2170 [ 188.746898][ C0] ? rtnl_setlink+0x4e0/0x4e0 [ 188.751586][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 188.757749][ C0] ? kasan_set_track+0x5f/0x70 [ 188.762531][ C0] ? rcu_is_watching+0x15/0xb0 [ 188.767329][ C0] ? trace_contention_end+0x39/0xe0 [ 188.772545][ C0] ? __mutex_lock+0x30d/0xc80 [ 188.777256][ C0] ? rtnl_setlink+0x4e0/0x4e0 [ 188.781948][ C0] rtnetlink_rcv_msg+0x843/0xf90 [ 188.786921][ C0] ? rtnetlink_rcv_msg+0x220/0xf90 [ 188.792083][ C0] ? rtnetlink_bind+0x80/0x80 [ 188.796809][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 188.802830][ C0] ? lock_chain_count+0x20/0x20 [ 188.807697][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 188.813097][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 188.818317][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 188.823724][ C0] ? _local_bh_enable+0xa0/0xa0 [ 188.828601][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 188.833733][ C0] ? __dev_queue_xmit+0x1bc2/0x3630 [ 188.838969][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 188.844162][ C0] ? ref_tracker_free+0x686/0x830 [ 188.849242][ C0] netlink_rcv_skb+0x235/0x4c0 [ 188.854036][ C0] ? rtnetlink_bind+0x80/0x80 [ 188.858727][ C0] ? netlink_ack+0x1160/0x1160 [ 188.863556][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 188.868602][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.873814][ C0] netlink_unicast+0x7b1/0x930 [ 188.878609][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 188.883412][ C0] ? netlink_getsockopt+0x590/0x590 [ 188.888624][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 188.894272][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 188.899570][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 188.905044][ C0] __sys_sendto+0x4a9/0x6b0 [ 188.909566][ C0] ? __ia32_sys_getpeername+0x90/0x90 [ 188.914961][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 188.920612][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 188.926609][ C0] ? __fput+0x67e/0x940 [ 188.930775][ C0] ? lock_chain_count+0x20/0x20 [ 188.935649][ C0] __x64_sys_sendto+0xde/0xf0 [ 188.940338][ C0] do_syscall_64+0x55/0xb0 [ 188.944777][ C0] ? clear_bhb_loop+0x40/0x90 [ 188.949464][ C0] ? clear_bhb_loop+0x40/0x90 [ 188.954160][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.960067][ C0] RIP: 0033:0x7fa87a35e6ce [ 188.964496][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.984142][ C0] RSP: 002b:00007ffc6e2f6cc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 188.992573][ C0] RAX: ffffffffffffffda RBX: 0000555572bc1500 RCX: 00007fa87a35e6ce [ 189.000558][ C0] RDX: 000000000000002c RSI: 00007fa87b154670 RDI: 0000000000000003 [ 189.008536][ C0] RBP: 0000000000000001 R08: 00007ffc6e2f6d44 R09: 000000000000000c [ 189.016521][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 189.024499][ C0] R13: 0000000000000000 R14: 00007fa87b154670 R15: 0000000000000000 [ 189.032492][ C0] [ 189.035532][ C1] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 189.036619][ C0] FAULT_INJECTION: forcing a failure. [ 189.036619][ C0] name failslab, interval 1, probability 100, space 0, times 77 [ 189.042831][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 189.042845][ C1] Workqueue: events kfree_rcu_work [ 189.042868][ C1] Call Trace: [ 189.042875][ C1] [ 189.042883][ C1] dump_stack_lvl+0x18c/0x250 [ 189.042906][ C1] ? show_regs_print_info+0x20/0x20 [ 189.087090][ C1] ? load_image+0x420/0x420 [ 189.091616][ C1] ? mark_lock+0x94/0x320 [ 189.095961][ C1] ? verify_lock_unused+0x140/0x140 [ 189.101178][ C1] ? mark_lock+0x94/0x320 [ 189.105538][ C1] should_fail_ex+0x394/0x4c0 [ 189.110258][ C1] should_failslab+0x9/0x20 [ 189.114809][ C1] slab_pre_alloc_hook+0x59/0x300 [ 189.119941][ C1] ? __lock_acquire+0x1262/0x7d80 [ 189.124984][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 189.130201][ C1] ? __alloc_skb+0x103/0x2c0 [ 189.134804][ C1] __alloc_skb+0x103/0x2c0 [ 189.139250][ C1] __netdev_alloc_skb+0x10c/0x500 [ 189.144294][ C1] ? kmalloc_reserve+0x240/0x240 [ 189.149256][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 189.154734][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 189.160309][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 189.165787][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 189.172579][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 189.178145][ C1] __iterate_interfaces+0x225/0x4c0 [ 189.183363][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 189.189620][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 189.196828][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 189.203082][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 189.210122][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 189.215337][ C1] ? hw_scan_work+0xf10/0xf10 [ 189.220045][ C1] __hrtimer_run_queues+0x525/0xc10 [ 189.225268][ C1] ? hrtimer_interrupt+0x980/0x980 [ 189.230389][ C1] ? read_tsc+0x9/0x20 [ 189.234505][ C1] hrtimer_run_softirq+0x177/0x290 [ 189.239635][ C1] handle_softirqs+0x27d/0x820 [ 189.244411][ C1] ? read_tsc+0x9/0x20 [ 189.248497][ C1] ? ktime_get+0x24b/0x280 [ 189.252984][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 189.257764][ C1] ? do_softirq+0x1a0/0x1a0 [ 189.262284][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 189.267519][ C1] __irq_exit_rcu+0xd3/0x190 [ 189.272125][ C1] ? irq_exit_rcu+0x20/0x20 [ 189.276644][ C1] irq_exit_rcu+0x9/0x20 [ 189.280910][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 189.286570][ C1] [ 189.289537][ C1] [ 189.292497][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.298498][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 189.305051][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 189.324665][ C1] RSP: 0018:ffffc900001d79c0 EFLAGS: 00000206 [ 189.330748][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: e5114628f9f1ae00 [ 189.338747][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 189.346734][ C1] RBP: ffffc900001d7a58 R08: ffffffff911eb5b7 R09: 1ffffffff223d6b6 [ 189.354729][ C1] R10: dffffc0000000000 R11: fffffbfff223d6b7 R12: dffffc0000000000 [ 189.362730][ C1] R13: ffff88801e6dd028 R14: ffffffff9755a0f8 R15: 1ffff9200003af38 [ 189.370727][ C1] ? _raw_spin_unlock+0x40/0x40 [ 189.375598][ C1] ? debug_object_active_state+0x6f/0x370 [ 189.381352][ C1] kvfree_rcu_bulk+0x10e/0x470 [ 189.386128][ C1] ? kvfree_rcu_bulk+0x135/0x470 [ 189.391079][ C1] kfree_rcu_work+0x337/0x3b0 [ 189.395770][ C1] ? rcu_core+0x17f0/0x17f0 [ 189.400307][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.405522][ C1] ? process_scheduled_works+0x975/0x1600 [ 189.411270][ C1] ? process_scheduled_works+0x975/0x1600 [ 189.417012][ C1] process_scheduled_works+0xa60/0x1600 [ 189.422623][ C1] ? worker_attach_to_pool+0x370/0x370 [ 189.428099][ C1] ? assign_work+0x3cc/0x5d0 [ 189.432714][ C1] worker_thread+0xa5e/0xfe0 [ 189.437343][ C1] kthread+0x2fa/0x390 [ 189.441424][ C1] ? pr_cont_work+0x550/0x550 [ 189.446123][ C1] ? kthread_blkcg+0xd0/0xd0 [ 189.450733][ C1] ret_from_fork+0x48/0x80 [ 189.455169][ C1] ? kthread_blkcg+0xd0/0xd0 [ 189.459775][ C1] ret_from_fork_asm+0x11/0x20 [ 189.464570][ C1] [ 189.467604][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 189.467716][ C1] FAULT_INJECTION: forcing a failure. [ 189.467716][ C1] name failslab, interval 1, probability 100, space 0, times 76 [ 189.474901][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 189.474914][ C0] Call Trace: [ 189.474923][ C0] [ 189.474930][ C0] dump_stack_lvl+0x18c/0x250 [ 189.508709][ C0] ? verify_lock_unused+0x140/0x140 [ 189.513926][ C0] ? show_regs_print_info+0x20/0x20 [ 189.519136][ C0] ? load_image+0x420/0x420 [ 189.523673][ C0] should_fail_ex+0x394/0x4c0 [ 189.528367][ C0] should_failslab+0x9/0x20 [ 189.532891][ C0] slab_pre_alloc_hook+0x59/0x300 [ 189.537945][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 189.543195][ C0] ? __alloc_skb+0x103/0x2c0 [ 189.547804][ C0] __alloc_skb+0x103/0x2c0 [ 189.552245][ C0] ndisc_alloc_skb+0xa6/0x450 [ 189.556938][ C0] ndisc_send_rs+0x27d/0x690 [ 189.561546][ C0] ? ipv6_get_lladdr+0x2b/0x3e0 [ 189.566425][ C0] addrconf_rs_timer+0x36b/0x640 [ 189.571388][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 189.577480][ C0] call_timer_fn+0x189/0x540 [ 189.582090][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 189.588172][ C0] ? call_timer_fn+0xd2/0x540 [ 189.592861][ C0] ? __run_timers+0x810/0x810 [ 189.597557][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.602778][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 189.607996][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 189.614079][ C0] __run_timers+0x570/0x810 [ 189.618592][ C0] ? lock_chain_count+0x20/0x20 [ 189.623469][ C0] ? detach_timer+0x2b0/0x2b0 [ 189.628166][ C0] ? lock_chain_count+0x20/0x20 [ 189.633035][ C0] run_timer_softirq+0x67/0xf0 [ 189.637814][ C0] handle_softirqs+0x27d/0x820 [ 189.642612][ C0] ? run_ksoftirqd+0xa8/0x100 [ 189.647306][ C0] ? do_softirq+0x1a0/0x1a0 [ 189.651827][ C0] run_ksoftirqd+0xa8/0x100 [ 189.656340][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 189.661555][ C0] ? takeover_tasklets+0x770/0x770 [ 189.666688][ C0] ? takeover_tasklets+0x770/0x770 [ 189.671813][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 189.677031][ C0] smpboot_thread_fn+0x651/0x9f0 [ 189.682004][ C0] ? smpboot_thread_fn+0x4d/0x9f0 [ 189.687046][ C0] kthread+0x2fa/0x390 [ 189.691123][ C0] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 189.697562][ C0] ? kthread_blkcg+0xd0/0xd0 [ 189.702169][ C0] ret_from_fork+0x48/0x80 [ 189.706599][ C0] ? kthread_blkcg+0xd0/0xd0 [ 189.711204][ C0] ret_from_fork_asm+0x11/0x20 [ 189.716012][ C0] [ 189.719046][ C1] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 189.722465][ C0] FAULT_INJECTION: forcing a failure. [ 189.722465][ C0] name failslab, interval 1, probability 100, space 0, times 75 [ 189.726384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 189.749310][ C1] Workqueue: events kfree_rcu_work [ 189.754440][ C1] Call Trace: [ 189.757733][ C1] [ 189.760589][ C1] dump_stack_lvl+0x18c/0x250 [ 189.765283][ C1] ? show_regs_print_info+0x20/0x20 [ 189.770498][ C1] ? load_image+0x420/0x420 [ 189.775029][ C1] ? mark_lock+0x94/0x320 [ 189.779377][ C1] ? verify_lock_unused+0x140/0x140 [ 189.784590][ C1] ? mark_lock+0x94/0x320 [ 189.788974][ C1] should_fail_ex+0x394/0x4c0 [ 189.793688][ C1] should_failslab+0x9/0x20 [ 189.798216][ C1] slab_pre_alloc_hook+0x59/0x300 [ 189.803263][ C1] ? __lock_acquire+0x1262/0x7d80 [ 189.808303][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 189.813515][ C1] ? __alloc_skb+0x103/0x2c0 [ 189.818127][ C1] __alloc_skb+0x103/0x2c0 [ 189.822604][ C1] __netdev_alloc_skb+0x10c/0x500 [ 189.827670][ C1] ? kmalloc_reserve+0x240/0x240 [ 189.832648][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 189.838125][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 189.843703][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 189.849186][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 189.855977][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 189.861545][ C1] __iterate_interfaces+0x225/0x4c0 [ 189.866764][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 189.873031][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 189.880243][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 189.886499][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 189.893574][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 189.898786][ C1] ? hw_scan_work+0xf10/0xf10 [ 189.903484][ C1] __hrtimer_run_queues+0x525/0xc10 [ 189.908727][ C1] ? hrtimer_interrupt+0x980/0x980 [ 189.913850][ C1] ? read_tsc+0x9/0x20 [ 189.917949][ C1] hrtimer_run_softirq+0x177/0x290 [ 189.923082][ C1] handle_softirqs+0x27d/0x820 [ 189.927857][ C1] ? read_tsc+0x9/0x20 [ 189.931956][ C1] ? ktime_get+0x24b/0x280 [ 189.936390][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 189.941178][ C1] ? do_softirq+0x1a0/0x1a0 [ 189.945700][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 189.950929][ C1] __irq_exit_rcu+0xd3/0x190 [ 189.955530][ C1] ? irq_exit_rcu+0x20/0x20 [ 189.960088][ C1] irq_exit_rcu+0x9/0x20 [ 189.964356][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 189.970028][ C1] [ 189.972969][ C1] [ 189.975916][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.981919][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 189.988443][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 190.008059][ C1] RSP: 0018:ffffc900001d79c0 EFLAGS: 00000206 [ 190.014141][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: e5114628f9f1ae00 [ 190.022131][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 190.030119][ C1] RBP: ffffc900001d7a58 R08: ffffffff911eb5b7 R09: 1ffffffff223d6b6 [ 190.038113][ C1] R10: dffffc0000000000 R11: fffffbfff223d6b7 R12: dffffc0000000000 [ 190.046096][ C1] R13: ffff88801e6dd028 R14: ffffffff9755a0f8 R15: 1ffff9200003af38 [ 190.054094][ C1] ? _raw_spin_unlock+0x40/0x40 [ 190.058970][ C1] ? debug_object_active_state+0x6f/0x370 [ 190.064713][ C1] kvfree_rcu_bulk+0x10e/0x470 [ 190.069488][ C1] ? kvfree_rcu_bulk+0x135/0x470 [ 190.074443][ C1] kfree_rcu_work+0x337/0x3b0 [ 190.079138][ C1] ? rcu_core+0x17f0/0x17f0 [ 190.083674][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.088898][ C1] ? process_scheduled_works+0x975/0x1600 [ 190.094636][ C1] ? process_scheduled_works+0x975/0x1600 [ 190.100372][ C1] process_scheduled_works+0xa60/0x1600 [ 190.105958][ C1] ? worker_attach_to_pool+0x370/0x370 [ 190.111444][ C1] ? assign_work+0x3cc/0x5d0 [ 190.116055][ C1] worker_thread+0xa5e/0xfe0 [ 190.120680][ C1] kthread+0x2fa/0x390 [ 190.124760][ C1] ? pr_cont_work+0x550/0x550 [ 190.129451][ C1] ? kthread_blkcg+0xd0/0xd0 [ 190.134049][ C1] ret_from_fork+0x48/0x80 [ 190.138478][ C1] ? kthread_blkcg+0xd0/0xd0 [ 190.143092][ C1] ret_from_fork_asm+0x11/0x20 [ 190.147896][ C1] [ 190.150941][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 190.151062][ C1] FAULT_INJECTION: forcing a failure. [ 190.151062][ C1] name failslab, interval 1, probability 100, space 0, times 30 [ 190.158248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.181150][ C0] Call Trace: [ 190.184447][ C0] [ 190.187390][ C0] dump_stack_lvl+0x18c/0x250 [ 190.192093][ C0] ? verify_lock_unused+0x140/0x140 [ 190.197311][ C0] ? show_regs_print_info+0x20/0x20 [ 190.202532][ C0] ? load_image+0x420/0x420 [ 190.207067][ C0] should_fail_ex+0x394/0x4c0 [ 190.211791][ C0] should_failslab+0x9/0x20 [ 190.216316][ C0] slab_pre_alloc_hook+0x59/0x300 [ 190.221367][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 190.226595][ C0] ? __alloc_skb+0x103/0x2c0 [ 190.231198][ C0] __alloc_skb+0x103/0x2c0 [ 190.235629][ C0] ndisc_alloc_skb+0xa6/0x450 [ 190.240328][ C0] ndisc_send_rs+0x27d/0x690 [ 190.244934][ C0] ? ipv6_get_lladdr+0x2b/0x3e0 [ 190.249807][ C0] addrconf_rs_timer+0x36b/0x640 [ 190.254781][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 190.260884][ C0] call_timer_fn+0x189/0x540 [ 190.265491][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 190.271612][ C0] ? call_timer_fn+0xd2/0x540 [ 190.276300][ C0] ? __run_timers+0x810/0x810 [ 190.280999][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.286219][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 190.291439][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 190.297522][ C0] __run_timers+0x570/0x810 [ 190.302044][ C0] ? lock_chain_count+0x20/0x20 [ 190.306929][ C0] ? detach_timer+0x2b0/0x2b0 [ 190.311630][ C0] ? lock_chain_count+0x20/0x20 [ 190.316514][ C0] run_timer_softirq+0x67/0xf0 [ 190.321295][ C0] handle_softirqs+0x27d/0x820 [ 190.326077][ C0] ? run_ksoftirqd+0xa8/0x100 [ 190.330777][ C0] ? do_softirq+0x1a0/0x1a0 [ 190.335321][ C0] run_ksoftirqd+0xa8/0x100 [ 190.339843][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 190.345063][ C0] ? takeover_tasklets+0x770/0x770 [ 190.350192][ C0] ? takeover_tasklets+0x770/0x770 [ 190.355315][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 190.360523][ C0] smpboot_thread_fn+0x651/0x9f0 [ 190.365478][ C0] ? smpboot_thread_fn+0x4d/0x9f0 [ 190.370529][ C0] kthread+0x2fa/0x390 [ 190.374613][ C0] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 190.381051][ C0] ? kthread_blkcg+0xd0/0xd0 [ 190.385665][ C0] ret_from_fork+0x48/0x80 [ 190.390108][ C0] ? kthread_blkcg+0xd0/0xd0 [ 190.394720][ C0] ret_from_fork_asm+0x11/0x20 [ 190.399535][ C0] [ 190.402611][ C1] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 190.405125][ C0] FAULT_INJECTION: forcing a failure. [ 190.405125][ C0] name failslab, interval 1, probability 100, space 0, times 2 [ 190.409921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.409936][ C1] Workqueue: events kfree_rcu_work [ 190.409958][ C1] Call Trace: [ 190.409966][ C1] [ 190.409974][ C1] dump_stack_lvl+0x18c/0x250 [ 190.448856][ C1] ? show_regs_print_info+0x20/0x20 [ 190.454091][ C1] ? load_image+0x420/0x420 [ 190.458614][ C1] ? mark_lock+0x94/0x320 [ 190.462957][ C1] ? verify_lock_unused+0x140/0x140 [ 190.468172][ C1] ? mark_lock+0x94/0x320 [ 190.472520][ C1] should_fail_ex+0x394/0x4c0 [ 190.477231][ C1] should_failslab+0x9/0x20 [ 190.481759][ C1] slab_pre_alloc_hook+0x59/0x300 [ 190.486807][ C1] ? __lock_acquire+0x1262/0x7d80 [ 190.491846][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 190.497059][ C1] ? __alloc_skb+0x103/0x2c0 [ 190.501692][ C1] __alloc_skb+0x103/0x2c0 [ 190.506127][ C1] __netdev_alloc_skb+0x10c/0x500 [ 190.511173][ C1] ? kmalloc_reserve+0x240/0x240 [ 190.516130][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 190.521612][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 190.527184][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 190.532664][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 190.539448][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 190.545020][ C1] __iterate_interfaces+0x225/0x4c0 [ 190.550228][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 190.556479][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 190.563719][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 190.569982][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 190.577019][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 190.582235][ C1] ? hw_scan_work+0xf10/0xf10 [ 190.586927][ C1] __hrtimer_run_queues+0x525/0xc10 [ 190.592154][ C1] ? hrtimer_interrupt+0x980/0x980 [ 190.597281][ C1] ? read_tsc+0x9/0x20 [ 190.601383][ C1] hrtimer_run_softirq+0x177/0x290 [ 190.606515][ C1] handle_softirqs+0x27d/0x820 [ 190.611294][ C1] ? read_tsc+0x9/0x20 [ 190.615384][ C1] ? ktime_get+0x24b/0x280 [ 190.619837][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 190.624616][ C1] ? do_softirq+0x1a0/0x1a0 [ 190.629145][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 190.634374][ C1] __irq_exit_rcu+0xd3/0x190 [ 190.638976][ C1] ? irq_exit_rcu+0x20/0x20 [ 190.643502][ C1] irq_exit_rcu+0x9/0x20 [ 190.647760][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 190.653429][ C1] [ 190.656382][ C1] [ 190.659330][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 190.665324][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 190.671973][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 190.691589][ C1] RSP: 0018:ffffc900001d79c0 EFLAGS: 00000206 [ 190.697666][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: e5114628f9f1ae00 [ 190.705649][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 190.713629][ C1] RBP: ffffc900001d7a58 R08: ffffffff911eb5b7 R09: 1ffffffff223d6b6 [ 190.721615][ C1] R10: dffffc0000000000 R11: fffffbfff223d6b7 R12: dffffc0000000000 [ 190.729603][ C1] R13: ffff88801e6dd028 R14: ffffffff9755a0f8 R15: 1ffff9200003af38 [ 190.737606][ C1] ? _raw_spin_unlock+0x40/0x40 [ 190.742510][ C1] ? debug_object_active_state+0x6f/0x370 [ 190.748266][ C1] kvfree_rcu_bulk+0x10e/0x470 [ 190.753041][ C1] ? kvfree_rcu_bulk+0x135/0x470 [ 190.757991][ C1] kfree_rcu_work+0x337/0x3b0 [ 190.762702][ C1] ? rcu_core+0x17f0/0x17f0 [ 190.767227][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.772443][ C1] ? process_scheduled_works+0x975/0x1600 [ 190.778179][ C1] ? process_scheduled_works+0x975/0x1600 [ 190.783934][ C1] process_scheduled_works+0xa60/0x1600 [ 190.789514][ C1] ? worker_attach_to_pool+0x370/0x370 [ 190.794991][ C1] ? assign_work+0x3cc/0x5d0 [ 190.799604][ C1] worker_thread+0xa5e/0xfe0 [ 190.804227][ C1] kthread+0x2fa/0x390 [ 190.808305][ C1] ? pr_cont_work+0x550/0x550 [ 190.813009][ C1] ? kthread_blkcg+0xd0/0xd0 [ 190.817627][ C1] ret_from_fork+0x48/0x80 [ 190.822059][ C1] ? kthread_blkcg+0xd0/0xd0 [ 190.826674][ C1] ret_from_fork_asm+0x11/0x20 [ 190.831466][ C1] [ 190.834492][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 190.841805][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.851886][ C0] Call Trace: [ 190.855200][ C0] [ 190.858158][ C0] dump_stack_lvl+0x18c/0x250 [ 190.862871][ C0] ? show_regs_print_info+0x20/0x20 [ 190.868100][ C0] ? load_image+0x420/0x420 [ 190.872647][ C0] ? verify_lock_unused+0x140/0x140 [ 190.877890][ C0] ? addrconf_rs_timer+0x2b5/0x640 [ 190.883031][ C0] should_fail_ex+0x394/0x4c0 [ 190.887748][ C0] should_failslab+0x9/0x20 [ 190.892287][ C0] slab_pre_alloc_hook+0x59/0x300 [ 190.897440][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 190.902678][ C0] ? __alloc_skb+0x103/0x2c0 [ 190.907310][ C0] __alloc_skb+0x103/0x2c0 [ 190.911762][ C0] wg_packet_send_keepalive+0x65/0x2b0 [ 190.917270][ C0] call_timer_fn+0x189/0x540 [ 190.921900][ C0] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 190.927992][ C0] ? call_timer_fn+0xd2/0x540 [ 190.932731][ C0] ? __run_timers+0x810/0x810 [ 190.937485][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.942733][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 190.947978][ C0] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 190.954079][ C0] __run_timers+0x570/0x810 [ 190.958616][ C0] ? lock_chain_count+0x20/0x20 [ 190.963513][ C0] ? detach_timer+0x2b0/0x2b0 [ 190.968224][ C0] ? lock_chain_count+0x20/0x20 [ 190.973113][ C0] run_timer_softirq+0x67/0xf0 [ 190.977917][ C0] handle_softirqs+0x27d/0x820 [ 190.982715][ C0] ? run_ksoftirqd+0xa8/0x100 [ 190.987443][ C0] ? do_softirq+0x1a0/0x1a0 [ 190.991984][ C0] run_ksoftirqd+0xa8/0x100 [ 190.996518][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 191.001745][ C0] ? takeover_tasklets+0x770/0x770 [ 191.006906][ C0] ? takeover_tasklets+0x770/0x770 [ 191.012050][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 191.017262][ C0] smpboot_thread_fn+0x651/0x9f0 [ 191.022214][ C0] ? smpboot_thread_fn+0x4d/0x9f0 [ 191.027251][ C0] kthread+0x2fa/0x390 [ 191.031331][ C0] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 191.037756][ C0] ? kthread_blkcg+0xd0/0xd0 [ 191.042357][ C0] ret_from_fork+0x48/0x80 [ 191.046784][ C0] ? kthread_blkcg+0xd0/0xd0 [ 191.051392][ C0] ret_from_fork_asm+0x11/0x20 [ 191.056179][ C0] [ 191.101223][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.115848][ T5778] Bluetooth: hci14: command tx timeout [ 191.121432][ T5778] Bluetooth: hci15: command tx timeout [ 191.227186][ T6640] CPU: 1 PID: 6640 Comm: syz.2.205 Not tainted syzkaller #0 [ 191.234525][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 191.244623][ T6640] Call Trace: [ 191.247928][ T6640] [ 191.250892][ T6640] dump_stack_lvl+0x18c/0x250 [ 191.255601][ T6640] ? show_regs_print_info+0x20/0x20 [ 191.260826][ T6640] ? load_image+0x420/0x420 [ 191.265367][ T6640] ? __lock_acquire+0x7d80/0x7d80 [ 191.270455][ T6640] ? __lock_acquire+0x7d80/0x7d80 [ 191.275539][ T6640] should_fail_ex+0x394/0x4c0 [ 191.280270][ T6640] should_failslab+0x9/0x20 [ 191.284824][ T6640] slab_pre_alloc_hook+0x59/0x300 [ 191.289902][ T6640] kmem_cache_alloc_lru+0x4d/0x2b0 [ 191.295046][ T6640] ? sock_alloc_inode+0x28/0xc0 [ 191.299931][ T6640] sock_alloc_inode+0x28/0xc0 [ 191.304650][ T6640] ? sockfs_init_fs_context+0xb0/0xb0 [ 191.310055][ T6640] new_inode_pseudo+0x63/0x1d0 [ 191.314868][ T6640] __sock_create+0x12d/0x940 [ 191.319497][ T6640] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 191.325512][ T6640] __sys_socket+0xd7/0x1b0 [ 191.329969][ T6640] __x64_sys_socket+0x7a/0x90 [ 191.334690][ T6640] do_syscall_64+0x55/0xb0 [ 191.339148][ T6640] ? clear_bhb_loop+0x40/0x90 [ 191.343844][ T6640] ? clear_bhb_loop+0x40/0x90 [ 191.348576][ T6640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.354484][ T6640] RIP: 0033:0x7feb0f99de99 [ 191.358914][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.378534][ T6640] RSP: 002b:00007feb10822028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 191.386978][ T6640] RAX: ffffffffffffffda RBX: 00007feb0fc25fa0 RCX: 00007feb0f99de99 [ 191.394964][ T6640] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 191.402952][ T6640] RBP: 00007feb0fa33eaf R08: 0000000000000000 R09: 0000000000000000 [ 191.410940][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.418926][ T6640] R13: 00007feb0fc26038 R14: 00007feb0fc25fa0 R15: 00007ffeaa910568 [ 191.426919][ T6640] [ 191.434759][ T6640] socket: no more sockets [ 191.994193][ T5778] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 192.021063][ T5778] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 192.029171][ T5778] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 192.052963][ T5778] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 192.062124][ T5778] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 192.070414][ T5778] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 192.289770][ T6592] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.340174][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.351498][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.389082][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.429057][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.438904][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.489519][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.530113][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.569057][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.578943][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.609291][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.629098][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.652807][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.662999][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.678036][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.688577][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.700021][ T5778] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 192.708887][ T5778] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 192.709937][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.728519][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.739251][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.749297][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.760158][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.770961][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.779256][ T5778] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 192.782781][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.799159][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.809890][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.821816][ T5778] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 192.831112][ T5778] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 192.831132][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.850427][ T5778] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 192.851267][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.867637][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.878517][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.906403][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.037478][ T6592] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.139374][ T5783] Bluetooth: hci15: command tx timeout [ 193.163281][ T6557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.187017][ T6557] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.210463][ T6557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.241343][ T6557] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.321529][ T6592] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.396550][ T6652] lo speed is unknown, defaulting to 1000 [ 193.478106][ T6238] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.587912][ T6592] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.674298][ T6238] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.713796][ T6649] lo speed is unknown, defaulting to 1000 [ 193.826132][ T6238] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.951408][ T6238] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.112314][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.120380][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.190528][ T5783] Bluetooth: hci16: command tx timeout [ 194.262491][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268847][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.338332][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.346953][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.700592][ T6592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.877863][ T6592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.911149][ T6592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.979310][ T5783] Bluetooth: hci17: command tx timeout [ 194.989456][ T6592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.262435][ T6652] chnl_net:caif_netlink_parms(): no params data found [ 195.399581][ T6649] chnl_net:caif_netlink_parms(): no params data found [ 195.829961][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.999325][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.006514][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.039376][ T6649] bridge_slave_0: entered allmulticast mode [ 196.052261][ T6649] bridge_slave_0: entered promiscuous mode [ 196.070965][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.078098][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.109201][ T6649] bridge_slave_1: entered allmulticast mode [ 196.133039][ T6649] bridge_slave_1: entered promiscuous mode [ 196.266647][ T5783] Bluetooth: hci16: command tx timeout [ 196.312806][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.347473][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.365047][ T6652] bridge_slave_0: entered allmulticast mode [ 196.381172][ T6652] bridge_slave_0: entered promiscuous mode [ 196.394307][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.533835][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.542322][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.552949][ T6652] bridge_slave_1: entered allmulticast mode [ 196.560659][ T6652] bridge_slave_1: entered promiscuous mode [ 196.580697][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.587871][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.683133][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.697763][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.762344][ T6652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.785880][ T6652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.804939][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.812136][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.922335][ T6649] team0: Port device team_slave_0 added [ 196.961433][ T6652] team0: Port device team_slave_0 added [ 196.971425][ T6649] team0: Port device team_slave_1 added [ 197.059875][ T5783] Bluetooth: hci17: command tx timeout [ 197.077453][ T6652] team0: Port device team_slave_1 added [ 197.200194][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.207166][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.258764][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.350612][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.375718][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.449261][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.505517][ T6652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.513634][ T6652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.544816][ T6652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.558448][ T6652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.566784][ T6714] syz.4.213 uses obsolete (PF_INET,SOCK_PACKET) [ 197.574363][ T6652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.619730][ T6652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.825745][ T6649] hsr_slave_0: entered promiscuous mode [ 197.850801][ T6649] hsr_slave_1: entered promiscuous mode [ 197.859740][ T6649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.867562][ T6649] Cannot create hsr debugfs directory [ 198.132673][ T6652] hsr_slave_0: entered promiscuous mode [ 198.163166][ T6652] hsr_slave_1: entered promiscuous mode [ 198.199663][ T6652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.207263][ T6652] Cannot create hsr debugfs directory [ 198.260223][ T6238] hsr_slave_0: left promiscuous mode [ 198.269839][ T6238] hsr_slave_1: left promiscuous mode [ 198.276246][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.299269][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.317568][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.339663][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.349802][ T5783] Bluetooth: hci16: command tx timeout [ 198.357100][ T6238] bridge_slave_1: left allmulticast mode [ 198.362974][ T6238] bridge_slave_1: left promiscuous mode [ 198.369596][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.384444][ T6238] bridge_slave_0: left allmulticast mode [ 198.390414][ T6238] bridge_slave_0: left promiscuous mode [ 198.396129][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.433958][ T6238] veth1_macvtap: left promiscuous mode [ 198.440099][ T6238] veth0_macvtap: left promiscuous mode [ 198.445859][ T6238] veth1_vlan: left promiscuous mode [ 198.455210][ T6238] veth0_vlan: left promiscuous mode [ 199.085632][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 199.131244][ T6238] team0 (unregistering): Port device team_slave_0 removed [ 199.140084][ T5783] Bluetooth: hci17: command tx timeout [ 199.187500][ T6238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.245662][ T6238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.630217][ T6238] bond0 (unregistering): Released all slaves [ 199.957935][ T6731] netlink: 108 bytes leftover after parsing attributes in process `syz.4.216'. [ 200.082892][ T6649] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.185978][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.366906][ T6649] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.421018][ T5783] Bluetooth: hci16: command tx timeout [ 200.562580][ T6649] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.604566][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 200.650363][ T6745] (null): rxe_set_mtu: Set mtu to 1024 [ 200.656574][ T6745] rdma_rxe: rxe_newlink: failed to add veth0 [ 200.679272][ T6745] (null): rxe_set_mtu: Set mtu to 1024 [ 200.711747][ T6649] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.769099][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 200.787810][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 200.994802][ T6652] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.086088][ T6652] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.191217][ T6652] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.219514][ T5783] Bluetooth: hci17: command tx timeout [ 201.264008][ T6592] veth0_vlan: entered promiscuous mode [ 201.278377][ T6592] veth1_vlan: entered promiscuous mode [ 201.353485][ T6745] infiniband syz1: set active [ 201.358699][ T6745] infiniband syz1: added veth1 [ 201.372192][ T6745] syz1: rxe_create_cq: returned err = -12 [ 201.378045][ T6745] infiniband syz1: Couldn't create ib_mad CQ [ 201.385005][ T6745] infiniband syz1: Couldn't open port 1 [ 201.403106][ T6652] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.492277][ T6745] RDS/IB: syz1: added [ 201.496371][ T6745] smc: adding ib device syz1 with port count 1 [ 201.514142][ T6745] smc: ib device syz1 port 1 has pnetid [ 201.546603][ T6238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.652344][ T6592] veth0_macvtap: entered promiscuous mode [ 201.697808][ T6238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.772162][ T6592] veth1_macvtap: entered promiscuous mode [ 201.811771][ T6238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.848203][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.858824][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.881857][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.907221][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.927392][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.950839][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.979116][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.999217][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.019072][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.049102][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.069302][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.087113][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.107838][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.130199][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.146027][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.157614][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.170418][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.181505][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.193356][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.204112][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.214658][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.225535][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.235600][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.276275][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.289288][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.301024][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.311179][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.322153][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.334703][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.372524][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.408251][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.418568][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.429482][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.439665][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.452807][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.463283][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.476168][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.486401][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.497945][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.508576][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.519514][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.530601][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.541305][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.555974][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.566822][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.577169][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.600477][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.610870][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.622489][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.632718][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.644363][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.660606][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.671504][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.681925][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.692763][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.704749][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.716677][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.728608][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.777901][ T6238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.878805][ T6592] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.890281][ T6592] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.899720][ T6592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.908539][ T6592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.166064][ T6652] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.191212][ T6652] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.244044][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.254162][ T6652] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.267820][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.282216][ T6652] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.534991][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.548334][ T6649] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 203.558326][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.583365][ T6649] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 203.638633][ T6649] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 203.664162][ T6649] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 204.018386][ T6780] loop5: detected capacity change from 0 to 1024 [ 205.452426][ T6649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.481489][ T6652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.631509][ T6649] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.652044][ T6652] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.776078][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.783303][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.827721][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.834926][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.866067][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.873271][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.883336][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.890518][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.092849][ T6649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.631698][ T6652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.660712][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 206.666881][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 206.673693][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 206.679984][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 206.711692][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.760192][ T147] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 206.998350][ T147] usb 6-1: config 1 interface 1 has no altsetting 0 [ 207.062992][ T147] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 207.073524][ T147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 207.101087][ T147] usb 6-1: Product: syz [ 207.105296][ T147] usb 6-1: Manufacturer: syz [ 207.611817][ T6652] veth0_vlan: entered promiscuous mode [ 207.662673][ T6652] veth1_vlan: entered promiscuous mode [ 207.697867][ T6649] veth0_vlan: entered promiscuous mode [ 207.743651][ T6649] veth1_vlan: entered promiscuous mode [ 207.810447][ T6652] veth0_macvtap: entered promiscuous mode [ 207.850330][ T6652] veth1_macvtap: entered promiscuous mode [ 207.874946][ T147] speedtch 6-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 207.898304][ T147] usb 6-1: selecting invalid altsetting 0 [ 207.905852][ T147] speedtch 6-1:1.0: usbatm_usb_probe: bind failed: -71! [ 207.922922][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.934806][ T147] speedtch: probe of 6-1:1.0 failed with error -71 [ 207.942750][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.956609][ T147] usb 6-1: selecting invalid altsetting 0 [ 207.962789][ T147] usbtest: probe of 6-1:1.1 failed with error -22 [ 207.969434][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.983555][ T147] usb 6-1: selecting invalid altsetting 0 [ 207.989559][ T147] speedtch: probe of 6-1:1.1 failed with error -22 [ 208.002016][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.026301][ T147] usb 6-1: USB disconnect, device number 2 [ 208.032338][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.059157][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.070937][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.084266][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.094425][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.106229][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.116991][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.128077][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.138202][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.149575][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.160399][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.170952][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.184996][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.196252][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.206435][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.217206][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.227517][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.238460][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.248843][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.259887][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.270013][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.283206][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.293284][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.304512][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.314682][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.325350][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.337337][ T6652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.384601][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.400366][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.410715][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.421958][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.432521][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.444115][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.469069][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.519235][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.549775][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.576202][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.591452][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.611540][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.638049][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.649415][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.670009][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.704877][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.725143][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.746084][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.767097][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.789291][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.803521][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.815160][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.826664][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.841094][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.851640][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.862594][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.872739][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.883771][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.907310][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.928055][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.951910][ T6652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.982338][ T6652] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.994181][ T6652] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.008622][ T6652] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.034552][ T6652] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.071759][ T6649] veth0_macvtap: entered promiscuous mode [ 209.185527][ T6649] veth1_macvtap: entered promiscuous mode [ 209.293588][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.340119][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.382546][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.409098][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.418942][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.430087][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.459214][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.479867][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.512369][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.529407][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.549081][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.579275][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.599112][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.630860][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.640990][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.679582][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.699135][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.720831][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.745238][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.764760][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.774929][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.785968][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.796158][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.818705][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.828899][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.839797][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.849858][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.862398][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.872563][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.884030][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.894140][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.905768][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.928711][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.988023][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.996569][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.013073][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.055397][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.065577][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.076319][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.087748][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.098722][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.108842][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.119642][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.165630][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.190272][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.210224][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.235561][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.252121][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.277763][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.299248][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.320521][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.350842][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.371791][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.382289][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.393036][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.403142][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.413915][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.426625][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.460287][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.478421][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.501631][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.524190][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.552559][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.563090][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.573736][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.584212][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.595580][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.614272][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.684818][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.702230][ T6649] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.712302][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.739955][ T6649] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.748693][ T6649] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.759406][ T6649] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.325564][ T6867] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 211.475828][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.509187][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.622922][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.643983][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.483635][ T6903] loop8: detected capacity change from 0 to 1024 [ 212.538748][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.234'. [ 213.337284][ T6908] netlink: 44 bytes leftover after parsing attributes in process `syz.4.235'. [ 214.066423][ T6238] hsr_slave_0: left promiscuous mode [ 214.232665][ T6238] hsr_slave_1: left promiscuous mode [ 214.306362][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.449378][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.632324][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.650842][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.685739][ T6238] bridge_slave_1: left allmulticast mode [ 214.707038][ T6238] bridge_slave_1: left promiscuous mode [ 214.740024][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.800532][ T6238] bridge_slave_0: left allmulticast mode [ 214.808299][ T6238] bridge_slave_0: left promiscuous mode [ 214.814142][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.933550][ T6238] veth1_macvtap: left promiscuous mode [ 214.943790][ T6238] veth0_macvtap: left promiscuous mode [ 214.949723][ T6238] veth1_vlan: left promiscuous mode [ 214.955242][ T6238] veth0_vlan: left promiscuous mode [ 215.586863][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 215.632847][ T6238] team0 (unregistering): Port device team_slave_0 removed [ 215.688788][ T6238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.737337][ T6238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.096865][ T6238] bond0 (unregistering): Released all slaves [ 216.182802][ T6928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 216.249216][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.8.244'. [ 216.631178][ T6954] lo speed is unknown, defaulting to 1000 [ 216.928531][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.755437][ T6985] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 220.860105][ T7085] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.009263][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.271'. [ 227.059390][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 228.139340][ T5778] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 228.159354][ T5778] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 228.171319][ T5778] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 228.189172][ T5778] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 228.200657][ T5778] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 228.213620][ T5778] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 229.136936][ T7210] lo speed is unknown, defaulting to 1000 [ 229.525402][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.8.275'. [ 229.825587][ T7236] loop8: detected capacity change from 0 to 1024 [ 230.259596][ T5779] Bluetooth: hci12: command tx timeout [ 231.106687][ T7210] chnl_net:caif_netlink_parms(): no params data found [ 231.234014][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.241421][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.248676][ T7210] bridge_slave_0: entered allmulticast mode [ 231.257279][ T7210] bridge_slave_0: entered promiscuous mode [ 231.266963][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.274689][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.282313][ T7210] bridge_slave_1: entered allmulticast mode [ 231.289988][ T7210] bridge_slave_1: entered promiscuous mode [ 231.330311][ T7210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.345716][ T7210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.384093][ T7210] team0: Port device team_slave_0 added [ 231.393323][ T7210] team0: Port device team_slave_1 added [ 231.424855][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.431951][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.458147][ T7210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.474497][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.482428][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.508627][ T7210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.560919][ T7210] hsr_slave_0: entered promiscuous mode [ 231.567372][ T7210] hsr_slave_1: entered promiscuous mode [ 231.575076][ T7210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.583390][ T7210] Cannot create hsr debugfs directory [ 231.777638][ T7210] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.962326][ T7210] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.088794][ T7210] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.180161][ T5779] Bluetooth: hci5: command 0x0406 tx timeout [ 232.180171][ T5084] Bluetooth: hci6: command 0x0406 tx timeout [ 232.206339][ T7210] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.251482][ T5778] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 232.263322][ T5778] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 232.279434][ T5778] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 232.287468][ T5778] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 232.295317][ T5778] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 232.303789][ T5778] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 232.339910][ T51] Bluetooth: hci12: command tx timeout [ 232.382548][ T7277] lo speed is unknown, defaulting to 1000 [ 232.474705][ T7210] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 232.490563][ T7210] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 232.512402][ T7210] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 232.533814][ T7210] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 232.664848][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.703521][ T7210] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.719938][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.727210][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.781615][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.788794][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.137615][ T7210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.207884][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 233.309686][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.316972][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.324996][ T7277] bridge_slave_0: entered allmulticast mode [ 233.332630][ T7277] bridge_slave_0: entered promiscuous mode [ 233.341828][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.351413][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.358624][ T7277] bridge_slave_1: entered allmulticast mode [ 233.390836][ T7277] bridge_slave_1: entered promiscuous mode [ 233.433352][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.463127][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.519595][ T7277] team0: Port device team_slave_0 added [ 233.538880][ T7277] team0: Port device team_slave_1 added [ 233.609513][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.616486][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.649094][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.662484][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.669686][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.698403][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.825195][ T7277] hsr_slave_0: entered promiscuous mode [ 233.849807][ T7277] hsr_slave_1: entered promiscuous mode [ 233.856577][ T7277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.883806][ T7277] Cannot create hsr debugfs directory [ 233.976105][ T7210] veth0_vlan: entered promiscuous mode [ 234.050160][ T7210] veth1_vlan: entered promiscuous mode [ 234.311761][ T7277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.339268][ T5778] Bluetooth: hci13: command tx timeout [ 234.347898][ T5778] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 234.358215][ T5778] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 234.369623][ T5778] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 234.380708][ T5778] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 234.388821][ T5778] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 234.413613][ T7210] veth0_macvtap: entered promiscuous mode [ 234.419782][ T5778] Bluetooth: hci12: command tx timeout [ 234.431206][ T5084] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 234.481749][ T7210] veth1_macvtap: entered promiscuous mode [ 234.551816][ T7277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.721812][ T7277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.765220][ T7301] lo speed is unknown, defaulting to 1000 [ 234.772600][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.807822][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.838696][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.859272][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.879086][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.897783][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.929119][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.959213][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.979497][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.999060][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.029031][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.049025][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.058960][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.072384][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.082503][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.094100][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.113373][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.124230][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.144637][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.155792][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.166004][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.176810][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.187900][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.198609][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.208825][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.266370][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.276721][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.287554][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.300118][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.318811][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.328772][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.339920][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.351844][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.365202][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.376357][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.391800][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.409926][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.425333][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.435939][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.445805][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.456512][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.466901][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.477640][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.487725][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.498582][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.508692][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.524994][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.535776][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.546838][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.556939][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.567625][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.577683][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.588400][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.598512][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.609271][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.625416][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.635960][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.647209][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.657783][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.667713][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.678276][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.688211][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.698882][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.710431][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.721003][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.738072][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.805076][ T7277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.833765][ T7210] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.842730][ T7210] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.854099][ T7210] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.867435][ T7210] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.114763][ T6936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.139931][ T6936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.169406][ T7277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.196041][ T7277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.231916][ T7277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.282245][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.284040][ T7277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.310680][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.420190][ T51] Bluetooth: hci13: command tx timeout [ 236.507154][ T51] Bluetooth: hci18: command tx timeout [ 236.519422][ T5778] Bluetooth: hci12: command tx timeout [ 236.628704][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.695028][ T7328] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 236.741399][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.789490][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 236.894170][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.901349][ T7240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.010320][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.017511][ T7239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.028928][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.037243][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.044681][ T7301] bridge_slave_0: entered allmulticast mode [ 237.052267][ T7301] bridge_slave_0: entered promiscuous mode [ 237.070817][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.078062][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.086272][ T7301] bridge_slave_1: entered allmulticast mode [ 237.096436][ T7301] bridge_slave_1: entered promiscuous mode [ 237.178946][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.211619][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.281170][ T7301] team0: Port device team_slave_0 added [ 237.294171][ T7301] team0: Port device team_slave_1 added [ 237.301858][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 237.387845][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.403243][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.528678][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.546882][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.556116][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.587503][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.754416][ T7301] hsr_slave_0: entered promiscuous mode [ 237.787843][ T7301] hsr_slave_1: entered promiscuous mode [ 237.807799][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.823414][ T7301] Cannot create hsr debugfs directory [ 238.155977][ T7301] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.212198][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.302959][ T7301] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.398910][ T7277] veth0_vlan: entered promiscuous mode [ 238.454832][ T7301] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.495891][ T7277] veth1_vlan: entered promiscuous mode [ 238.501527][ T5084] Bluetooth: hci13: command tx timeout [ 238.558733][ T7301] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.579102][ T5084] Bluetooth: hci18: command tx timeout [ 238.640263][ T7277] veth0_macvtap: entered promiscuous mode [ 238.671668][ T7277] veth1_macvtap: entered promiscuous mode [ 238.769400][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.857984][ T7373] loop7: detected capacity change from 0 to 1024 [ 238.881842][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.995724][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.199072][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.375097][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.537111][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.603723][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.670123][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.697144][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.729098][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.739314][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.749987][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.760577][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.771107][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.781708][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.792328][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.802256][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.812862][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.825844][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.836501][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.846595][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.857314][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.868187][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.878898][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.890840][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.901911][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.913020][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.928875][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.939162][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.950858][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.961072][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.971782][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.981832][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.992546][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.015109][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.047547][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.069143][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.099497][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.119036][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.149826][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.200992][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.220092][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.250091][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.269200][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.297095][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.307427][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.329355][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.409180][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.429285][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.449415][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.460127][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.470335][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.485601][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.501430][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.512265][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.522576][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.533453][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.548113][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.560772][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.570959][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.581926][ T5084] Bluetooth: hci13: command tx timeout [ 240.587509][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.597716][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.608458][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.619019][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.629815][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.642864][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.653681][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.663744][ T5084] Bluetooth: hci18: command tx timeout [ 240.669480][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.680273][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.692656][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.737711][ T7277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.753104][ T7277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.762639][ T7277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.772094][ T7277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.905722][ T7301] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 240.965569][ T7301] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 240.984822][ T7301] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 240.997779][ T7301] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 241.052072][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.080701][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.190353][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.206534][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.851340][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.903582][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.927167][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.934400][ T6936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.975117][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.982316][ T6936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.424477][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.522274][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.288'. [ 242.549816][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.288'. [ 242.570936][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.288'. [ 242.599189][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.288'. [ 242.626663][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.288'. [ 242.648855][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.288'. [ 242.672402][ T7419] (null): rxe_set_mtu: Set mtu to 1024 [ 242.678168][ T7419] rdma_rxe: rxe_newlink: failed to add veth0 [ 242.702182][ T7419] (null): rxe_set_mtu: Set mtu to 1024 [ 242.707993][ T7419] rdma_rxe: rxe_newlink: failed to add veth1 [ 242.740278][ T5084] Bluetooth: hci18: command tx timeout [ 243.133748][ T7301] veth0_vlan: entered promiscuous mode [ 243.148383][ T7301] veth1_vlan: entered promiscuous mode [ 243.220756][ T7301] veth0_macvtap: entered promiscuous mode [ 243.249663][ T7301] veth1_macvtap: entered promiscuous mode [ 243.280156][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.313454][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.359890][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.409213][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.439141][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.463540][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.481471][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.493363][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.503469][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.530965][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.551328][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.574802][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.596452][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.616670][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.628669][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.649087][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.666894][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.689119][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.711859][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.729298][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.739483][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.750130][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.760116][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.779584][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.789654][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.801309][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.811257][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.825266][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.835333][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.848408][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.863504][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.874101][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.884077][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.894981][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.905316][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.921728][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.935921][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.966623][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.999031][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.022258][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.044581][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.071581][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.100582][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.126108][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.148595][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.168707][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.194644][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.215909][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.242305][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.262681][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.284603][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.307242][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.339314][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.356357][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.377006][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.399142][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.432989][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.456251][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.489054][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.509581][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.522811][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.537858][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.548667][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.579109][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.590608][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.604992][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.616454][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.669243][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.689291][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.709185][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.731319][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.769326][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.789191][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.822360][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.852832][ T7301] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.869083][ T7301] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.887265][ T7301] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.905067][ T7301] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.676593][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.684687][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.725573][ T7238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.739102][ T7238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.790785][ T7520] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 247.619382][ T5084] Bluetooth: hci8: command 0x0406 tx timeout [ 248.015216][ T6162] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 248.046923][ T51] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 248.061011][ T51] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 248.068881][ T51] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 248.087977][ T51] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 248.097698][ T51] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 248.110626][ T51] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 248.255595][ T7538] lo speed is unknown, defaulting to 1000 [ 248.290647][ T6162] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 248.813601][ T6162] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 248.839690][ T7534] ceph: No mds server is up or the cluster is laggy [ 249.431951][ T7588] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.528341][ T7538] chnl_net:caif_netlink_parms(): no params data found [ 249.655407][ T7593] bridge0: port 3(syz_tun) entered blocking state [ 249.670464][ T7593] bridge0: port 3(syz_tun) entered disabled state [ 249.685975][ T7593] syz_tun: entered allmulticast mode [ 249.726500][ T7593] syz_tun: entered promiscuous mode [ 249.742179][ T7593] bridge0: port 3(syz_tun) entered blocking state [ 249.748759][ T7593] bridge0: port 3(syz_tun) entered forwarding state [ 249.874230][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.881836][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.889666][ T7538] bridge_slave_0: entered allmulticast mode [ 249.897054][ T7538] bridge_slave_0: entered promiscuous mode [ 249.907031][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.914379][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.922230][ T7538] bridge_slave_1: entered allmulticast mode [ 249.930638][ T7538] bridge_slave_1: entered promiscuous mode [ 249.992741][ T7538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.016115][ T7538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.096694][ T7538] team0: Port device team_slave_0 added [ 250.117524][ T7538] team0: Port device team_slave_1 added [ 250.172770][ T7593] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 250.189814][ T51] Bluetooth: hci19: command tx timeout [ 250.224703][ T7593] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 250.240960][ T7593] syz.9.312 (7593) used greatest stack depth: 20776 bytes left [ 250.257763][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.309409][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.381975][ T7538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.415712][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.433035][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.464517][ T7538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.561873][ T7538] hsr_slave_0: entered promiscuous mode [ 250.568962][ T7538] hsr_slave_1: entered promiscuous mode [ 250.624964][ T7538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.646904][ T7538] Cannot create hsr debugfs directory [ 250.861004][ T7538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.010421][ T7538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.152291][ T7538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.241832][ T7538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.402244][ T7538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.414467][ T7538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.426119][ T7538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.437678][ T7538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.543401][ T7538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.568334][ T7538] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.581490][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.588667][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.611300][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.618479][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.878512][ T7538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.943047][ T7538] veth0_vlan: entered promiscuous mode [ 251.957318][ T7538] veth1_vlan: entered promiscuous mode [ 252.002570][ T7538] veth0_macvtap: entered promiscuous mode [ 252.052409][ T7538] veth1_macvtap: entered promiscuous mode [ 252.095315][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.110655][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.122507][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.133136][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.143050][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.155325][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.165661][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.176409][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.190630][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.201523][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.217643][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.230466][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.241721][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.253948][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.264760][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.275724][ T5779] Bluetooth: hci19: command tx timeout [ 252.283169][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.293994][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.304571][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.318139][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.328681][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.338574][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.349800][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.359802][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.370331][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.380611][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.391168][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.401121][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.411837][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.426578][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.437273][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.447347][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.458023][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.468138][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.478916][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.489304][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.503687][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.511579][ T28] INFO: task syz.0.9:5879 blocked for more than 154 seconds. [ 252.524541][ T28] Not tainted syzkaller #0 [ 252.532134][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 252.534994][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.549116][ T28] task:syz.0.9 state:D stack:27912 pid:5879 ppid:5775 flags:0x00004004 [ 252.563633][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.582304][ T28] Call Trace: [ 252.591782][ T28] [ 252.594911][ T28] __schedule+0x15ae/0x4660 [ 252.599948][ T28] ? asan.module_dtor+0x20/0x20 [ 252.604838][ T28] ? __mutex_lock+0x66e/0xc80 [ 252.609680][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 252.615259][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 252.624342][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.637225][ T28] schedule+0xbd/0x170 [ 252.642425][ T28] schedule_preempt_disabled+0x13/0x20 [ 252.647936][ T28] __mutex_lock+0x673/0xc80 [ 252.652859][ T28] ? __mutex_lock+0x4d2/0xc80 [ 252.657589][ T28] ? nfsd_svc+0x65/0xab0 [ 252.662132][ T5779] Bluetooth: hci9: command 0x0406 tx timeout [ 252.668211][ T5778] Bluetooth: hci10: command 0x0406 tx timeout [ 252.708799][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.729024][ T28] ? mutex_lock_nested+0x20/0x20 [ 252.759136][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.779132][ T28] ? net_generic+0x1e/0x240 [ 252.783784][ T28] ? net_generic+0x1e/0x240 [ 252.788333][ T28] nfsd_svc+0x65/0xab0 [ 252.796050][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.830143][ T28] ? qword_get+0x5a9/0x640 [ 252.834623][ T28] write_threads+0x393/0x510 [ 252.839819][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.853496][ T28] ? write_unlock_fs+0x450/0x450 [ 252.858488][ T28] ? __might_fault+0xaa/0x120 [ 252.864927][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.875530][ T28] ? __might_fault+0xaa/0x120 [ 252.880307][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.890252][ T28] ? simple_transaction_get+0x11d/0x140 [ 252.895867][ T28] nfsctl_transaction_write+0x10c/0x150 [ 252.903677][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.914193][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 252.919966][ T28] vfs_write+0x299/0x9a0 [ 252.930174][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.941525][ T28] ? file_end_write+0x250/0x250 [ 252.946429][ T28] ? __fget_files+0x28/0x460 [ 252.951144][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.962689][ T28] ? __fget_files+0x3fc/0x460 [ 252.967424][ T28] ? __fdget_pos+0x2a3/0x330 [ 252.972151][ T28] ? ksys_write+0x74/0x260 [ 252.976616][ T28] ksys_write+0x151/0x260 [ 252.981497][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.991537][ T28] ? __ia32_sys_read+0x90/0x90 [ 252.996352][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 253.001690][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.012164][ T28] do_syscall_64+0x55/0xb0 [ 253.016638][ T28] ? clear_bhb_loop+0x40/0x90 [ 253.021543][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.034756][ T28] ? clear_bhb_loop+0x40/0x90 [ 253.039783][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.045720][ T28] RIP: 0033:0x7f9f88f9de99 [ 253.051462][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.062483][ T28] RSP: 002b:00007f9f89ef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.071073][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.081047][ T28] RAX: ffffffffffffffda RBX: 00007f9f89226090 RCX: 00007f9f88f9de99 [ 253.089118][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.099641][ T28] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000004 [ 253.107678][ T28] RBP: 00007f9f89033eaf R08: 0000000000000000 R09: 0000000000000000 [ 253.115837][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.125785][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.136750][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.160207][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.170949][ T28] R13: 00007f9f89226128 R14: 00007f9f89226090 R15: 00007ffeaf300b68 [ 253.181143][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.191544][ T28] [ 253.191599][ T28] INFO: task syz.1.23:5924 blocked for more than 155 seconds. [ 253.191613][ T28] Not tainted syzkaller #0 [ 253.191624][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.191631][ T28] task:syz.1.23 state:D stack:27912 pid:5924 ppid:5774 flags:0x00004004 [ 253.191666][ T28] Call Trace: [ 253.191673][ T28] [ 253.191685][ T28] __schedule+0x15ae/0x4660 [ 253.191733][ T28] ? asan.module_dtor+0x20/0x20 [ 253.191759][ T28] ? __mutex_lock+0x66e/0xc80 [ 253.219282][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.262106][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.272956][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.283105][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.293710][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.305291][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.309232][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 253.315925][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.331109][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 253.331227][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.351436][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.360561][ T28] schedule+0xbd/0x170 [ 253.361665][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.365372][ T28] schedule_preempt_disabled+0x13/0x20 [ 253.375829][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.375841][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.375854][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.375868][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.375881][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.375893][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.375906][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.375917][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.375930][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.448183][ T28] __mutex_lock+0x673/0xc80 [ 253.463294][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.510145][ T28] ? __mutex_lock+0x4d2/0xc80 [ 253.514969][ T28] ? write_ports+0xb7/0xfa0 [ 253.529024][ T28] ? mutex_lock_nested+0x20/0x20 [ 253.534037][ T28] write_ports+0xb7/0xfa0 [ 253.538438][ T28] ? write_versions+0xe00/0xe00 [ 253.562545][ T28] ? __might_fault+0xaa/0x120 [ 253.567276][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 253.573065][ T28] ? __virt_addr_valid+0x10c/0x380 [ 253.578237][ T28] ? __virt_addr_valid+0x10c/0x380 [ 253.583643][ T28] ? __might_fault+0xaa/0x120 [ 253.588355][ T28] ? __might_fault+0xc6/0x120 [ 253.593345][ T28] ? __might_fault+0xaa/0x120 [ 253.598081][ T28] ? simple_transaction_get+0x11d/0x140 [ 253.604179][ T28] nfsctl_transaction_write+0x10c/0x150 [ 253.610903][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 253.616578][ T28] vfs_write+0x299/0x9a0 [ 253.621475][ T28] ? file_end_write+0x250/0x250 [ 253.626595][ T28] ? __fget_files+0x28/0x460 [ 253.639436][ T28] ? __fget_files+0x3fc/0x460 [ 253.647581][ T28] ? __fdget_pos+0x2a3/0x330 [ 253.652643][ T28] ? ksys_write+0x74/0x260 [ 253.657102][ T28] ksys_write+0x151/0x260 [ 253.670602][ T28] ? __ia32_sys_read+0x90/0x90 [ 253.675430][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 253.680737][ T28] do_syscall_64+0x55/0xb0 [ 253.685182][ T28] ? clear_bhb_loop+0x40/0x90 [ 253.690093][ T28] ? clear_bhb_loop+0x40/0x90 [ 253.694906][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.701876][ T28] RIP: 0033:0x7fb92499de99 [ 253.708676][ T28] RSP: 002b:00007fb922bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.718146][ T28] RAX: ffffffffffffffda RBX: 00007fb924c25fa0 RCX: 00007fb92499de99 [ 253.727673][ T28] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 253.741307][ T28] RBP: 00007fb924a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 253.754303][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.762371][ T28] R13: 00007fb924c26038 R14: 00007fb924c25fa0 R15: 00007ffd0f2b6dc8 [ 253.770880][ T28] [ 253.773967][ T28] INFO: task syz.1.23:5927 blocked for more than 156 seconds. [ 253.799143][ T28] Not tainted syzkaller #0 [ 253.804121][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.812878][ T28] task:syz.1.23 state:D stack:27912 pid:5927 ppid:5774 flags:0x00004004 [ 253.822330][ T28] Call Trace: [ 253.825633][ T28] [ 253.828593][ T28] __schedule+0x15ae/0x4660 [ 253.833253][ T28] ? asan.module_dtor+0x20/0x20 [ 253.838145][ T28] ? __mutex_lock+0x66e/0xc80 [ 253.843693][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 253.854537][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 253.861564][ T28] schedule+0xbd/0x170 [ 253.865682][ T28] schedule_preempt_disabled+0x13/0x20 [ 253.871581][ T28] __mutex_lock+0x673/0xc80 [ 253.876136][ T28] ? __mutex_lock+0x4d2/0xc80 [ 253.881191][ T28] ? nfsd_svc+0x65/0xab0 [ 253.885476][ T28] ? mutex_lock_nested+0x20/0x20 [ 253.890650][ T28] ? net_generic+0x1e/0x240 [ 253.895195][ T28] ? net_generic+0x1e/0x240 [ 253.900413][ T28] nfsd_svc+0x65/0xab0 [ 253.906544][ T28] ? qword_get+0x5a9/0x640 [ 253.911103][ T28] write_threads+0x393/0x510 [ 253.915734][ T28] ? write_unlock_fs+0x450/0x450 [ 253.920805][ T28] ? __might_fault+0xaa/0x120 [ 253.925510][ T28] ? __might_fault+0xaa/0x120 [ 253.930632][ T28] ? simple_transaction_get+0x11d/0x140 [ 253.936227][ T28] nfsctl_transaction_write+0x10c/0x150 [ 253.944269][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 253.953644][ T28] vfs_write+0x299/0x9a0 [ 253.957943][ T28] ? file_end_write+0x250/0x250 [ 253.963140][ T28] ? __fget_files+0x28/0x460 [ 253.967783][ T28] ? __fget_files+0x3fc/0x460 [ 253.973296][ T28] ? __fdget_pos+0x2a3/0x330 [ 253.977937][ T28] ? ksys_write+0x74/0x260 [ 253.985418][ T28] ksys_write+0x151/0x260 [ 253.990062][ T28] ? __ia32_sys_read+0x90/0x90 [ 253.994896][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 254.002303][ T28] do_syscall_64+0x55/0xb0 [ 254.006797][ T28] ? clear_bhb_loop+0x40/0x90 [ 254.011758][ T28] ? clear_bhb_loop+0x40/0x90 [ 254.016482][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.022701][ T28] RIP: 0033:0x7fb92499de99 [ 254.027158][ T28] RSP: 002b:00007fb922bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.036094][ T28] RAX: ffffffffffffffda RBX: 00007fb924c26090 RCX: 00007fb92499de99 [ 254.044333][ T28] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000004 [ 254.055987][ T28] RBP: 00007fb924a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 254.079174][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.087194][ T28] R13: 00007fb924c26128 R14: 00007fb924c26090 R15: 00007ffd0f2b6dc8 [ 254.119262][ T28] [ 254.122379][ T28] INFO: task syz.2.24:5931 blocked for more than 156 seconds. [ 254.149940][ T28] Not tainted syzkaller #0 [ 254.179804][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.188507][ T28] task:syz.2.24 state:D stack:27016 pid:5931 ppid:5776 flags:0x00004004 [ 254.198478][ T28] Call Trace: [ 254.201839][ T28] [ 254.204802][ T28] __schedule+0x15ae/0x4660 [ 254.209469][ T28] ? asan.module_dtor+0x20/0x20 [ 254.214362][ T28] ? __mutex_lock+0x66e/0xc80 [ 254.219265][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 254.224766][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 254.231371][ T28] schedule+0xbd/0x170 [ 254.235515][ T28] schedule_preempt_disabled+0x13/0x20 [ 254.241978][ T28] __mutex_lock+0x673/0xc80 [ 254.246528][ T28] ? __mutex_lock+0x4d2/0xc80 [ 254.251312][ T28] ? write_versions+0x96/0xe00 [ 254.259485][ T28] ? mutex_lock_nested+0x20/0x20 [ 254.264565][ T28] write_versions+0x96/0xe00 [ 254.284821][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 254.305729][ T28] ? __virt_addr_valid+0x10c/0x380 [ 254.319021][ T28] ? write_pool_threads+0x7d0/0x7d0 [ 254.324273][ T28] ? __might_fault+0xaa/0x120 [ 254.340021][ T5084] Bluetooth: hci19: command tx timeout [ 254.345589][ T28] ? __might_fault+0xc6/0x120 [ 254.350602][ T28] ? __might_fault+0xaa/0x120 [ 254.355328][ T28] ? simple_transaction_get+0x11d/0x140 [ 254.379071][ T28] nfsctl_transaction_write+0x10c/0x150 [ 254.384760][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 254.390706][ T28] vfs_write+0x299/0x9a0 [ 254.395004][ T28] ? file_end_write+0x250/0x250 [ 254.400158][ T28] ? __fget_files+0x28/0x460 [ 254.404809][ T28] ? __fget_files+0x3fc/0x460 [ 254.409805][ T28] ? __fdget_pos+0x2a3/0x330 [ 254.414435][ T28] ? ksys_write+0x74/0x260 [ 254.418889][ T28] ksys_write+0x151/0x260 [ 254.426852][ T28] ? __ia32_sys_read+0x90/0x90 [ 254.431872][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 254.437119][ T28] do_syscall_64+0x55/0xb0 [ 254.442349][ T28] ? clear_bhb_loop+0x40/0x90 [ 254.447118][ T28] ? clear_bhb_loop+0x40/0x90 [ 254.469024][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.475055][ T28] RIP: 0033:0x7ff88e19de99 [ 254.506341][ T28] RSP: 002b:00007ff88f0cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.519007][ T28] RAX: ffffffffffffffda RBX: 00007ff88e425fa0 RCX: 00007ff88e19de99 [ 254.527030][ T28] RDX: 0000000000000009 RSI: 0000200000000300 RDI: 0000000000000003 [ 254.559098][ T28] RBP: 00007ff88e233eaf R08: 0000000000000000 R09: 0000000000000000 [ 254.592467][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.603021][ T28] R13: 00007ff88e426038 R14: 00007ff88e425fa0 R15: 00007ffefb4f4868 [ 254.612168][ T28] [ 254.615425][ T28] INFO: task syz.2.24:5933 blocked for more than 156 seconds. [ 254.626969][ T28] Not tainted syzkaller #0 [ 254.634813][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.643761][ T28] task:syz.2.24 state:D stack:27016 pid:5933 ppid:5776 flags:0x00004004 [ 254.653201][ T28] Call Trace: [ 254.656516][ T28] [ 254.663003][ T28] __schedule+0x15ae/0x4660 [ 254.689195][ T28] ? asan.module_dtor+0x20/0x20 [ 254.694103][ T28] ? __mutex_lock+0x66e/0xc80 [ 254.698810][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 254.719303][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 254.725512][ T28] schedule+0xbd/0x170 [ 254.731450][ T28] schedule_preempt_disabled+0x13/0x20 [ 254.736957][ T28] __mutex_lock+0x673/0xc80 [ 254.742636][ T28] ? __mutex_lock+0x4d2/0xc80 [ 254.747371][ T28] ? write_ports+0xb7/0xfa0 [ 254.752292][ T28] ? mutex_lock_nested+0x20/0x20 [ 254.757297][ T28] write_ports+0xb7/0xfa0 [ 254.761965][ T28] ? write_versions+0xe00/0xe00 [ 254.766853][ T28] ? __might_fault+0xaa/0x120 [ 254.774863][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 254.789000][ T28] ? __virt_addr_valid+0x10c/0x380 [ 254.794184][ T28] ? __virt_addr_valid+0x10c/0x380 [ 254.808995][ T28] ? __might_fault+0xaa/0x120 [ 254.813726][ T28] ? __might_fault+0xc6/0x120 [ 254.818444][ T28] ? __might_fault+0xaa/0x120 [ 254.829120][ T28] ? simple_transaction_get+0x11d/0x140 [ 254.834735][ T28] nfsctl_transaction_write+0x10c/0x150 [ 254.840435][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 254.846298][ T28] vfs_write+0x299/0x9a0 [ 254.851806][ T28] ? file_end_write+0x250/0x250 [ 254.856706][ T28] ? __fget_files+0x28/0x460 [ 254.861393][ T28] ? __fget_files+0x3fc/0x460 [ 254.866253][ T28] ? __fdget_pos+0x2a3/0x330 [ 254.876691][ T28] ? ksys_write+0x74/0x260 [ 254.883014][ T28] ksys_write+0x151/0x260 [ 254.887394][ T28] ? __ia32_sys_read+0x90/0x90 [ 254.892829][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 254.898079][ T28] do_syscall_64+0x55/0xb0 [ 254.903737][ T28] ? clear_bhb_loop+0x40/0x90 [ 254.913816][ T28] ? clear_bhb_loop+0x40/0x90 [ 254.918547][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.925900][ T28] RIP: 0033:0x7ff88e19de99 [ 254.930526][ T28] RSP: 002b:00007ff88f0ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.939185][ T28] RAX: ffffffffffffffda RBX: 00007ff88e426090 RCX: 00007ff88e19de99 [ 254.947197][ T28] RDX: 0000000000000009 RSI: 0000200000000500 RDI: 0000000000000004 [ 254.955592][ T28] RBP: 00007ff88e233eaf R08: 0000000000000000 R09: 0000000000000000 [ 254.965306][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.979323][ T28] R13: 00007ff88e426128 R14: 00007ff88e426090 R15: 00007ffefb4f4868 [ 254.987356][ T28] [ 254.993088][ T28] INFO: task syz.2.24:5934 blocked for more than 157 seconds. [ 255.001236][ T28] Not tainted syzkaller #0 [ 255.006204][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.016014][ T28] task:syz.2.24 state:D stack:27016 pid:5934 ppid:5776 flags:0x00004004 [ 255.025772][ T28] Call Trace: [ 255.042409][ T28] [ 255.045383][ T28] __schedule+0x15ae/0x4660 [ 255.050552][ T28] ? asan.module_dtor+0x20/0x20 [ 255.055448][ T28] ? __mutex_lock+0x66e/0xc80 [ 255.063066][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 255.068579][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 255.075050][ T28] schedule+0xbd/0x170 [ 255.087448][ T28] schedule_preempt_disabled+0x13/0x20 [ 255.093228][ T28] __mutex_lock+0x673/0xc80 [ 255.097848][ T28] ? __mutex_lock+0x4d2/0xc80 [ 255.103721][ T28] ? nfsd_svc+0x65/0xab0 [ 255.108011][ T28] ? mutex_lock_nested+0x20/0x20 [ 255.113368][ T28] ? net_generic+0x1e/0x240 [ 255.117919][ T28] ? net_generic+0x1e/0x240 [ 255.122732][ T28] nfsd_svc+0x65/0xab0 [ 255.126842][ T28] ? qword_get+0x5a9/0x640 [ 255.133321][ T28] write_threads+0x393/0x510 [ 255.138070][ T28] ? write_unlock_fs+0x450/0x450 [ 255.146455][ T28] ? __might_fault+0xaa/0x120 [ 255.151385][ T28] ? __might_fault+0xaa/0x120 [ 255.156132][ T28] ? simple_transaction_get+0x11d/0x140 [ 255.161940][ T28] nfsctl_transaction_write+0x10c/0x150 [ 255.167526][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 255.173514][ T28] vfs_write+0x299/0x9a0 [ 255.189635][ T28] ? file_end_write+0x250/0x250 [ 255.194625][ T28] ? __fget_files+0x28/0x460 [ 255.199546][ T28] ? __fget_files+0x3fc/0x460 [ 255.204318][ T28] ? __fdget_pos+0x2a3/0x330 [ 255.208943][ T28] ? ksys_write+0x74/0x260 [ 255.215367][ T28] ksys_write+0x151/0x260 [ 255.220432][ T28] ? __ia32_sys_read+0x90/0x90 [ 255.225256][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 255.230840][ T28] do_syscall_64+0x55/0xb0 [ 255.235295][ T28] ? clear_bhb_loop+0x40/0x90 [ 255.257632][ T28] ? clear_bhb_loop+0x40/0x90 [ 255.262929][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.268870][ T28] RIP: 0033:0x7ff88e19de99 [ 255.273702][ T28] RSP: 002b:00007ff88f08a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.285126][ T28] RAX: ffffffffffffffda RBX: 00007ff88e426180 RCX: 00007ff88e19de99 [ 255.295427][ T28] RDX: 0000000000000002 RSI: 0000200000000700 RDI: 0000000000000005 [ 255.303725][ T28] RBP: 00007ff88e233eaf R08: 0000000000000000 R09: 0000000000000000 [ 255.311941][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.320266][ T28] R13: 00007ff88e426218 R14: 00007ff88e426180 R15: 00007ffefb4f4868 [ 255.328292][ T28] [ 255.348407][ T28] INFO: task syz.3.26:5939 blocked for more than 157 seconds. [ 255.367888][ T28] Not tainted syzkaller #0 [ 255.373123][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.390353][ T28] task:syz.3.26 state:D stack:27912 pid:5939 ppid:5773 flags:0x00004004 [ 255.401029][ T28] Call Trace: [ 255.404341][ T28] [ 255.407305][ T28] __schedule+0x15ae/0x4660 [ 255.411977][ T28] ? asan.module_dtor+0x20/0x20 [ 255.417093][ T28] ? __mutex_lock+0x66e/0xc80 [ 255.421989][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 255.427486][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 255.434740][ T28] schedule+0xbd/0x170 [ 255.438855][ T28] schedule_preempt_disabled+0x13/0x20 [ 255.444808][ T28] __mutex_lock+0x673/0xc80 [ 255.449682][ T28] ? __mutex_lock+0x4d2/0xc80 [ 255.454415][ T28] ? write_versions+0x96/0xe00 [ 255.460654][ T28] ? mutex_lock_nested+0x20/0x20 [ 255.465666][ T28] write_versions+0x96/0xe00 [ 255.470556][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 255.475647][ T28] ? __virt_addr_valid+0x10c/0x380 [ 255.481112][ T28] ? write_pool_threads+0x7d0/0x7d0 [ 255.489289][ T28] ? __might_fault+0xaa/0x120 [ 255.494006][ T28] ? __might_fault+0xc6/0x120 [ 255.498711][ T28] ? __might_fault+0xaa/0x120 [ 255.503851][ T28] ? simple_transaction_get+0x11d/0x140 [ 255.509672][ T28] nfsctl_transaction_write+0x10c/0x150 [ 255.515259][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 255.522320][ T28] vfs_write+0x299/0x9a0 [ 255.526615][ T28] ? file_end_write+0x250/0x250 [ 255.531729][ T28] ? __fget_files+0x28/0x460 [ 255.536361][ T28] ? __fget_files+0x3fc/0x460 [ 255.541731][ T28] ? __fdget_pos+0x2a3/0x330 [ 255.546471][ T28] ? ksys_write+0x74/0x260 [ 255.551208][ T28] ksys_write+0x151/0x260 [ 255.555588][ T28] ? __ia32_sys_read+0x90/0x90 [ 255.560639][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 255.565887][ T28] do_syscall_64+0x55/0xb0 [ 255.570626][ T28] ? clear_bhb_loop+0x40/0x90 [ 255.575348][ T28] ? clear_bhb_loop+0x40/0x90 [ 255.580319][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.586271][ T28] RIP: 0033:0x7f0d8359de99 [ 255.599048][ T28] RSP: 002b:00007f0d844b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.607509][ T28] RAX: ffffffffffffffda RBX: 00007f0d83825fa0 RCX: 00007f0d8359de99 [ 255.615574][ T28] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 255.625458][ T28] RBP: 00007f0d83633eaf R08: 0000000000000000 R09: 0000000000000000 [ 255.634819][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.643167][ T28] R13: 00007f0d83826038 R14: 00007f0d83825fa0 R15: 00007ffdb530eaf8 [ 255.651476][ T28] [ 255.673200][ T28] INFO: task syz.3.26:5940 blocked for more than 158 seconds. [ 255.682615][ T28] Not tainted syzkaller #0 [ 255.687593][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.702531][ T28] task:syz.3.26 state:D stack:27912 pid:5940 ppid:5773 flags:0x00004004 [ 255.742981][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.749574][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.760067][ T28] Call Trace: [ 255.763396][ T28] [ 255.766355][ T28] __schedule+0x15ae/0x4660 [ 255.771216][ T28] ? asan.module_dtor+0x20/0x20 [ 255.776112][ T28] ? __mutex_lock+0x66e/0xc80 [ 255.781554][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 255.787072][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 255.797118][ T28] schedule+0xbd/0x170 [ 255.801508][ T28] schedule_preempt_disabled+0x13/0x20 [ 255.807014][ T28] __mutex_lock+0x673/0xc80 [ 255.814559][ T28] ? __mutex_lock+0x4d2/0xc80 [ 255.819631][ T28] ? write_ports+0xb7/0xfa0 [ 255.824201][ T28] ? mutex_lock_nested+0x20/0x20 [ 255.829740][ T28] write_ports+0xb7/0xfa0 [ 255.834130][ T28] ? write_versions+0xe00/0xe00 [ 255.839801][ T28] ? __might_fault+0xaa/0x120 [ 255.844520][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 255.852979][ T28] ? __virt_addr_valid+0x10c/0x380 [ 255.858168][ T28] ? __virt_addr_valid+0x10c/0x380 [ 255.864132][ T28] ? __might_fault+0xaa/0x120 [ 255.868858][ T28] ? __might_fault+0xc6/0x120 [ 255.874014][ T28] ? __might_fault+0xaa/0x120 [ 255.878731][ T28] ? simple_transaction_get+0x11d/0x140 [ 255.884715][ T28] nfsctl_transaction_write+0x10c/0x150 [ 255.891297][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 255.900585][ T28] vfs_write+0x299/0x9a0 [ 255.904915][ T28] ? file_end_write+0x250/0x250 [ 255.909897][ T28] ? __fget_files+0x28/0x460 [ 255.915229][ T28] ? __fget_files+0x3fc/0x460 [ 255.920026][ T28] ? __fdget_pos+0x2a3/0x330 [ 255.924660][ T28] ? ksys_write+0x74/0x260 [ 255.929254][ T28] ksys_write+0x151/0x260 [ 255.933649][ T28] ? __ia32_sys_read+0x90/0x90 [ 255.938485][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 255.943946][ T28] do_syscall_64+0x55/0xb0 [ 255.948392][ T28] ? clear_bhb_loop+0x40/0x90 [ 255.959214][ T28] ? clear_bhb_loop+0x40/0x90 [ 255.963948][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.969964][ T28] RIP: 0033:0x7f0d8359de99 [ 255.974410][ T28] RSP: 002b:00007f0d8448f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.982948][ T28] RAX: ffffffffffffffda RBX: 00007f0d83826090 RCX: 00007f0d8359de99 [ 255.991004][ T28] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 256.002330][ T28] RBP: 00007f0d83633eaf R08: 0000000000000000 R09: 0000000000000000 [ 256.010680][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.018686][ T28] R13: 00007f0d83826128 R14: 00007f0d83826090 R15: 00007ffdb530eaf8 [ 256.035228][ T28] [ 256.038319][ T28] INFO: task syz.3.26:5941 blocked for more than 158 seconds. [ 256.046020][ T28] Not tainted syzkaller #0 [ 256.051033][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.059773][ T28] task:syz.3.26 state:D stack:27912 pid:5941 ppid:5773 flags:0x00004004 [ 256.069092][ T28] Call Trace: [ 256.072401][ T28] [ 256.075355][ T28] __schedule+0x15ae/0x4660 [ 256.080899][ T28] ? asan.module_dtor+0x20/0x20 [ 256.085797][ T28] ? __mutex_lock+0x66e/0xc80 [ 256.092370][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 256.097882][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 256.111585][ T28] schedule+0xbd/0x170 [ 256.115710][ T28] schedule_preempt_disabled+0x13/0x20 [ 256.127104][ T28] __mutex_lock+0x673/0xc80 [ 256.131769][ T28] ? __mutex_lock+0x4d2/0xc80 [ 256.136493][ T28] ? nfsd_svc+0x65/0xab0 [ 256.140853][ T28] ? mutex_lock_nested+0x20/0x20 [ 256.145831][ T28] ? net_generic+0x1e/0x240 [ 256.150486][ T28] ? net_generic+0x1e/0x240 [ 256.155034][ T28] nfsd_svc+0x65/0xab0 [ 256.159207][ T28] ? qword_get+0x5a9/0x640 [ 256.163706][ T28] write_threads+0x393/0x510 [ 256.168332][ T28] ? write_unlock_fs+0x450/0x450 [ 256.173384][ T28] ? __might_fault+0xaa/0x120 [ 256.178106][ T28] ? __might_fault+0xaa/0x120 [ 256.183440][ T28] ? simple_transaction_get+0x11d/0x140 [ 256.189210][ T28] nfsctl_transaction_write+0x10c/0x150 [ 256.194904][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 256.200680][ T28] vfs_write+0x299/0x9a0 [ 256.210665][ T28] ? file_end_write+0x250/0x250 [ 256.215657][ T28] ? __fget_files+0x28/0x460 [ 256.220415][ T28] ? __fget_files+0x3fc/0x460 [ 256.225189][ T28] ? __fdget_pos+0x2a3/0x330 [ 256.230229][ T28] ? ksys_write+0x74/0x260 [ 256.234695][ T28] ksys_write+0x151/0x260 [ 256.239275][ T28] ? __ia32_sys_read+0x90/0x90 [ 256.244093][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 256.249585][ T28] do_syscall_64+0x55/0xb0 [ 256.254034][ T28] ? clear_bhb_loop+0x40/0x90 [ 256.258767][ T28] ? clear_bhb_loop+0x40/0x90 [ 256.264117][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.270234][ T28] RIP: 0033:0x7f0d8359de99 [ 256.274681][ T28] RSP: 002b:00007f0d8446e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.283530][ T28] RAX: ffffffffffffffda RBX: 00007f0d83826180 RCX: 00007f0d8359de99 [ 256.291831][ T28] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 256.300040][ T28] RBP: 00007f0d83633eaf R08: 0000000000000000 R09: 0000000000000000 [ 256.311413][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.321656][ T28] R13: 00007f0d83826218 R14: 00007f0d83826180 R15: 00007ffdb530eaf8 [ 256.330723][ T28] [ 256.360478][ T28] [ 256.360478][ T28] Showing all locks held in the system: [ 256.373796][ T28] 1 lock held by khungtaskd/28: [ 256.378679][ T28] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 256.389324][ T28] 2 locks held by kworker/0:2/147: [ 256.394464][ T28] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 256.406481][ T28] #1: ffffc90002ec7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 256.421924][ T28] 2 locks held by kworker/u4:6/1133: [ 256.427258][ T28] 2 locks held by getty/5531: [ 256.432065][ T28] #0: ffff88802dcd90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 256.442131][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 256.452586][ T28] 3 locks held by kworker/1:4/5824: [ 256.457814][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 256.468914][ T28] #1: ffffc9000496fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 256.481916][ T28] #2: ffff888027062240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x285/0x32c0 [ 256.492286][ T28] 3 locks held by syz.0.9/5873: [ 256.497180][ T28] #0: ffff88802c098fc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.507443][ T28] #1: ffff88805bc62418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.519747][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 256.528639][ T28] 3 locks held by syz.0.9/5879: [ 256.533730][ T28] #0: ffff88802e4414c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.543226][ T28] #1: ffff88805bc62418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.552449][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 256.561509][ T28] 3 locks held by syz.1.23/5924: [ 256.566471][ T28] #0: ffff8880311f2ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.576266][ T28] #1: ffff88802cdb8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.586234][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 256.596743][ T28] 3 locks held by syz.1.23/5927: [ 256.601927][ T28] #0: ffff88807cd360c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.616811][ T28] #1: ffff88802cdb8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.626104][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 256.634949][ T28] 3 locks held by syz.2.24/5931: [ 256.640930][ T28] #0: ffff88802fb6cfc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.650477][ T28] #1: ffff88802d76c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.660688][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 256.671844][ T28] 3 locks held by syz.2.24/5933: [ 256.676814][ T28] #0: ffff8880219c19c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.686443][ T28] #1: ffff88802d76c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.695694][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 256.704784][ T28] 3 locks held by syz.2.24/5934: [ 256.710909][ T28] #0: ffff8880219c14c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.725153][ T28] #1: ffff88802d76c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.734880][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 256.744297][ T28] 3 locks held by syz.3.26/5939: [ 256.749474][ T28] #0: ffff88802c4a0fc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.758775][ T28] #1: ffff888027a48418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.768108][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 256.777432][ T28] 3 locks held by syz.3.26/5940: [ 256.783749][ T28] #0: ffff888021057248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.793264][ T28] #1: ffff888027a48418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.802609][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 256.811643][ T28] 3 locks held by syz.3.26/5941: [ 256.824737][ T28] #0: ffff8880210560c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.834209][ T28] #1: ffff888027a48418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.843454][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 256.852230][ T28] 3 locks held by syz.4.27/5966: [ 256.857189][ T28] #0: ffff888030ed54c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.866744][ T28] #1: ffff88807e2d8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.875984][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 256.885163][ T28] 1 lock held by syz.4.27/5968: [ 256.891278][ T28] #0: ffff888030ed54c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.902100][ T28] 1 lock held by syz.4.27/5969: [ 256.906980][ T28] #0: ffff888030ed54c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.917178][ T28] 3 locks held by syz.4.27/5970: [ 256.927841][ T28] #0: ffff88802492d248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.938223][ T28] #1: ffff88807e2d8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.947539][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 256.956343][ T28] 3 locks held by syz.5.28/6011: [ 256.961510][ T28] #0: ffff88802fdb4d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 256.970989][ T28] #1: ffff88807a77a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 256.983319][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 256.995942][ T28] 3 locks held by syz.5.28/6014: [ 257.001103][ T28] #0: ffff88802f109248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.012415][ T28] #1: ffff88807a77a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.024292][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.034568][ T28] 3 locks held by syz.5.28/6017: [ 257.040522][ T28] #0: ffff88807cd36848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.049974][ T28] #1: ffff88807a77a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.060592][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.069250][ T28] 3 locks held by syz.6.32/6026: [ 257.074342][ T28] #0: ffff888077552848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.083793][ T28] #1: ffff88802d76a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.093032][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.102126][ T28] 3 locks held by syz.6.32/6027: [ 257.107086][ T28] #0: ffff888077552ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.116434][ T28] #1: ffff88802d76a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.139024][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.147709][ T28] 3 locks held by syz.8.86/6224: [ 257.153152][ T28] #0: ffff888018ac0848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.162684][ T28] #1: ffff88805c6a2418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.171800][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.180784][ T28] 3 locks held by syz.8.86/6226: [ 257.185743][ T28] #0: ffff888030ec0348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.195101][ T28] #1: ffff88805c6a2418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.204320][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.213175][ T28] 3 locks held by kworker/u4:10/6238: [ 257.218593][ T28] #0: ffff88802cfb3538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 257.234356][ T28] #1: ffffc9000c5c7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 257.247625][ T28] #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xce/0x1550 [ 257.257314][ T28] 3 locks held by syz.7.112/6318: [ 257.264081][ T28] #0: ffff888030009248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.273611][ T28] #1: ffff88802f00e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.282915][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 257.292375][ T28] 3 locks held by syz.7.112/6319: [ 257.297423][ T28] #0: ffff88803061f4c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.307273][ T28] #1: ffff88802f00e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.316615][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.325833][ T28] 3 locks held by syz.7.112/6320: [ 257.336639][ T28] #0: ffff88803061f748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.346813][ T28] #1: ffff88802f00e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.356102][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.364932][ T28] 3 locks held by syz.0.130/6366: [ 257.371939][ T28] #0: ffff8880275234c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.382488][ T28] #1: ffff88802f024418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.391809][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.400995][ T28] 3 locks held by syz.0.130/6367: [ 257.406151][ T28] #0: ffff888027522848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.415824][ T28] #1: ffff88802f024418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.425111][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.439603][ T28] 3 locks held by syz.9.149/6426: [ 257.444665][ T28] #0: ffff88802f9d39c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.455120][ T28] #1: ffff88807c006418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.466689][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.475576][ T28] 3 locks held by syz.1.158/6452: [ 257.483507][ T28] #0: ffff88802c4a19c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.493056][ T28] #1: ffff88802ff1e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.502329][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 257.511705][ T28] 3 locks held by syz.1.158/6453: [ 257.516755][ T28] #0: ffff88802b5ec348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.526379][ T28] #1: ffff88802ff1e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.542178][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.551926][ T28] 3 locks held by syz.1.158/6454: [ 257.556988][ T28] #0: ffff88802b5ecfc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.566583][ T28] #1: ffff88802ff1e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.575910][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.584739][ T28] 3 locks held by syz.6.232/6894: [ 257.591780][ T28] #0: ffff88803036a5c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.601357][ T28] #1: ffff88807db54418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.610636][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.622886][ T28] 3 locks held by syz.5.249/6959: [ 257.627961][ T28] #0: ffff88803bebcd48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.643534][ T28] #1: ffff88805ac0c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.652639][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.661800][ T28] 3 locks held by syz.5.249/6965: [ 257.666847][ T28] #0: ffff88803bebc348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.678644][ T28] #1: ffff88805ac0c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.688817][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.697741][ T28] 3 locks held by syz.4.255/7002: [ 257.705045][ T28] #0: ffff888022582ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.714586][ T28] #1: ffff88807d7e6418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.723865][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 257.733251][ T28] 3 locks held by syz.4.255/7003: [ 257.744068][ T28] #0: ffff88802fcd6848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.755125][ T28] #1: ffff88807d7e6418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.764395][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.773580][ T28] 3 locks held by syz.4.255/7006: [ 257.778627][ T28] #0: ffff888027522ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.789905][ T28] #1: ffff88807d7e6418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.799182][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.807772][ T28] 3 locks held by kworker/u4:12/7238: [ 257.814950][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 257.826940][ T28] #1: ffffc90004b9fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 257.838216][ T28] #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 257.851871][ T28] 3 locks held by syz.8.281/7272: [ 257.856930][ T28] #0: ffff8880219c7248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.867873][ T28] #1: ffff88805ce68418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.877135][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 257.886557][ T28] 3 locks held by syz.8.281/7273: [ 257.892596][ T28] #0: ffff8880396a0ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.902859][ T28] #1: ffff88805ce68418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.911957][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 257.921804][ T28] 3 locks held by syz.8.281/7274: [ 257.926908][ T28] #0: ffff8880396a1c48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.936347][ T28] #1: ffff88805ce68418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.950639][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 257.959548][ T28] 3 locks held by syz.0.290/7432: [ 257.964593][ T28] #0: ffff8880296999c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 257.975041][ T28] #1: ffff888039fe8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 257.984167][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_recoverydir+0xfe/0x550 [ 257.993854][ T28] 3 locks held by syz.0.290/7435: [ 257.998926][ T28] #0: ffff8880367325c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 258.011211][ T28] #1: ffff888039fe8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 258.021546][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 258.031642][ T28] 3 locks held by syz.0.290/7438: [ 258.036691][ T28] #0: ffff8880315a45c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 258.053035][ T28] #1: ffff888039fe8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 258.062337][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 258.071421][ T28] 3 locks held by syz.0.290/7441: [ 258.076467][ T28] #0: ffff88802fe42848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 258.086380][ T28] #1: ffff888039fe8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 258.095652][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 258.105626][ T28] 1 lock held by syz.0.290/7442: [ 258.111058][ T28] #0: ffff88802fe42848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 258.122970][ T28] 2 locks held by syz-executor/7538: [ 258.128299][ T28] #0: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 258.137623][ T28] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 258.154652][ T28] 3 locks held by syz.9.314/7613: [ 258.161429][ T28] #0: ffff88806cd6e5c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 258.171009][ T28] #1: ffff888047550418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 258.180739][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 258.190876][ T28] 3 locks held by syz.9.314/7617: [ 258.195939][ T28] #0: ffff888085904d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 258.205525][ T28] #1: ffff888047550418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 258.214817][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 258.223746][ T28] 1 lock held by syz.7.316/7631: [ 258.228707][ T28] #0: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 258.247432][ T28] [ 258.296806][ T28] ============================================= [ 258.296806][ T28] [ 258.305810][ T28] NMI backtrace for cpu 1 [ 258.310178][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 258.317413][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 258.327490][ T28] Call Trace: [ 258.330794][ T28] [ 258.333747][ T28] dump_stack_lvl+0x18c/0x250 [ 258.338452][ T28] ? __wake_up_klogd+0xd9/0x100 [ 258.343367][ T28] ? show_regs_print_info+0x20/0x20 [ 258.348593][ T28] ? load_image+0x420/0x420 [ 258.353169][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 258.358146][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 258.364350][ T28] ? load_image+0x420/0x420 [ 258.368890][ T28] ? wq_watchdog_touch+0xef/0x170 [ 258.373955][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 258.380121][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 258.386268][ T28] watchdog+0xf59/0xfa0 [ 258.390457][ T28] ? watchdog+0x1e1/0xfa0 [ 258.394820][ T28] kthread+0x2fa/0x390 [ 258.398918][ T28] ? hungtask_pm_notify+0x50/0x50 [ 258.404025][ T28] ? kthread_blkcg+0xd0/0xd0 [ 258.408659][ T28] ret_from_fork+0x48/0x80 [ 258.413098][ T28] ? kthread_blkcg+0xd0/0xd0 [ 258.417700][ T28] ret_from_fork_asm+0x11/0x20 [ 258.422491][ T28] [ 258.428167][ T28] Sending NMI from CPU 1 to CPUs 0: [ 258.434105][ C0] NMI backtrace for cpu 0 [ 258.434114][ C0] CPU: 0 PID: 7240 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 258.434129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 258.434138][ C0] Workqueue: bat_events batadv_nc_worker [ 258.434159][ C0] RIP: 0010:lock_release+0x2b4/0x8c0 [ 258.434178][ C0] Code: 04 33 84 c0 0f 85 b5 04 00 00 45 89 2e 45 85 ff 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 08 0f 85 86 02 00 00 48 8b 44 24 20 <42> 0f b6 04 28 84 c0 0f 85 62 04 00 00 48 8b 04 24 89 10 4c 89 e0 [ 258.434191][ C0] RSP: 0018:ffffc90004c2fa40 EFLAGS: 00000087 [ 258.434203][ C0] RAX: 1ffff110048f151b RBX: 1ffff110048f152a RCX: 0000000000000001 [ 258.434214][ C0] RDX: 0000000000000002 RSI: ffffffff8d131da0 RDI: ffff88802478a930 [ 258.434224][ C0] RBP: ffffc90004c2fb50 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 258.434236][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff88802478a930 [ 258.434247][ C0] R13: dffffc0000000000 R14: ffff88802478a950 R15: 1ffff92000985f54 [ 258.434258][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 258.434271][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.434281][ C0] CR2: 000055ba6ea56660 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 258.434294][ C0] Call Trace: [ 258.434299][ C0] [ 258.434307][ C0] ? batadv_nc_worker+0xd2/0x600 [ 258.434324][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 258.434341][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 258.434359][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 258.434383][ C0] ? batadv_nc_worker+0xd2/0x600 [ 258.434399][ C0] batadv_nc_worker+0x28b/0x600 [ 258.434416][ C0] ? process_scheduled_works+0x975/0x1600 [ 258.434437][ C0] process_scheduled_works+0xa60/0x1600 [ 258.434466][ C0] ? worker_attach_to_pool+0x370/0x370 [ 258.434487][ C0] ? assign_work+0x3cc/0x5d0 [ 258.434507][ C0] worker_thread+0xa5e/0xfe0 [ 258.434530][ C0] ? _raw_spin_unlock+0x40/0x40 [ 258.434551][ C0] ? __kthread_parkme+0x71/0x1c0 [ 258.434568][ C0] kthread+0x2fa/0x390 [ 258.434581][ C0] ? pr_cont_work+0x550/0x550 [ 258.434599][ C0] ? kthread_blkcg+0xd0/0xd0 [ 258.434613][ C0] ret_from_fork+0x48/0x80 [ 258.434631][ C0] ? kthread_blkcg+0xd0/0xd0 [ 258.434646][ C0] ret_from_fork_asm+0x11/0x20 [ 258.434671][ C0] [ 258.685176][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 258.692058][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 258.699280][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 258.709361][ T28] Call Trace: [ 258.712661][ T28] [ 258.715652][ T28] dump_stack_lvl+0x18c/0x250 [ 258.720364][ T28] ? show_regs_print_info+0x20/0x20 [ 258.725613][ T28] ? load_image+0x420/0x420 [ 258.730169][ T28] panic+0x2ca/0x720 [ 258.734103][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 258.738636][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 258.744214][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 258.749645][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 258.755857][ T28] watchdog+0xf98/0xfa0 [ 258.760061][ T28] ? watchdog+0x1e1/0xfa0 [ 258.764431][ T28] kthread+0x2fa/0x390 [ 258.768533][ T28] ? hungtask_pm_notify+0x50/0x50 [ 258.773602][ T28] ? kthread_blkcg+0xd0/0xd0 [ 258.778240][ T28] ret_from_fork+0x48/0x80 [ 258.782683][ T28] ? kthread_blkcg+0xd0/0xd0 [ 258.787301][ T28] ret_from_fork_asm+0x11/0x20 [ 258.792138][ T28] [ 258.795759][ T28] Kernel Offset: disabled [ 258.800113][ T28] Rebooting in 86400 seconds..