last executing test programs:

13m43.776915682s ago: executing program 32 (id=13):
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000"], 0x10}}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
getpid()
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0)

13m38.59028664s ago: executing program 33 (id=16):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0)

12m33.299805892s ago: executing program 34 (id=79):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

3m53.77540901s ago: executing program 35 (id=685):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x2, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r2, r3, 0x25, 0x0, 0x0, @void, @value=0x0}, 0x30)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0)
recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0)

3m51.756103559s ago: executing program 36 (id=687):
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'dummy0\x00', {0x1}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100005060000000000000000000000000000000000000000000000000b000300636f6e666967000008000500020000002000120009000100766c616e00000000100002000800010002000000"], 0x50}}, 0x0)

2m36.94651102s ago: executing program 37 (id=833):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='1000\n', 0x5)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000200), 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@mpls_newroute={0x0, 0x18, 0x605, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}, [@RTA_DST={0x0, 0x0, {0x100, 0x0, 0x1}}, @RTA_NEWDST={0x0, 0x0, [{0x200, 0x0, 0x1}]}, @RTA_OIF={0x0, 0x0, 0x1}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000200), 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@mpls_getroute={0x0, 0x1a, 0x301}, 0x1c}}, 0x0)

2m13.827582765s ago: executing program 38 (id=984):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85)
close(r2)
r3 = socket(0x2, 0x1, 0x6)
connect(r3, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10)
write(r3, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r3, &(0x7f0000000800)=""/100, 0x100)
close(r3)

2m8.19925712s ago: executing program 39 (id=1013):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='-3 +4\n\x00', 0x7)

2m8.085488415s ago: executing program 40 (id=1012):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='1\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)="013030303030302032303030303030303030203020302030206b726235200030303030303066666666666666663030303030303030303030303030303031323030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303020636c69656e740a", 0x8a)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10)
write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74)

2m0.077905378s ago: executing program 41 (id=1039):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x204e, @loopback}, 0x10)
write(r4, &(0x7f0000000500)='test', 0x4)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x204e, @loopback}, 0x10)
write(r5, &(0x7f0000000500)='test', 0x4)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m56.305177598s ago: executing program 42 (id=1048):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='1\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)="013030303030302032303030303030303030203020302030206b726235200030303030303066666666666666663030303030303030303030303030303031323030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303030303020636c69656e740a", 0x96)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10)
write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74)

1m39.144187346s ago: executing program 2 (id=1162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x1, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x1, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x2, 0x1, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0x8, 0x3, '\x00\x00\x00\x00'}]}}}]}]}], {0x14, 0xb, 0x1, 0x0, 0x0, {0x2}}}, 0xe0}}, 0x0)
sendto(r2, &(0x7f0000000500)="12345678", 0x8, 0x0, &(0x7f0000000600)=@in={0x2, 0x1234, @loopback}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'})

1m38.485717499s ago: executing program 2 (id=1164):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\x00', 0x2)

1m38.312283069s ago: executing program 2 (id=1166):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'})

1m37.712201828s ago: executing program 2 (id=1169):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000050)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000060)='addr\x00', &(0x7f0000000070)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='port\x00', &(0x7f00000000a0)='2056\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='xprtsec\x00', &(0x7f00000000e0)='tls\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)

1m37.631220359s ago: executing program 2 (id=1170):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x0, r1, 0x1, 0x0, 0x0, {0x28, 0x0, 0x1}, [@TIPC_NLA_NET={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0xc, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0xd, 0x99aabbccddeeff00}]}]}}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x0, r1, 0x1, 0x0, 0x0, {0x50, 0x0, 0x1}, [@TIPC_NLA_NODE={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "000102030405060708090a0b0c0d0e0f"}, @TIPC_NLA_NODE_KEY={0x34, 0x4, {'gcm(aes)\x00', 0x10, "0123456789abcdef"}}]}]}}}, 0x0)
close(r0)
unshare(0x40000000)

1m34.307065652s ago: executing program 2 (id=1181):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='udp 2049\n\x00', 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000500)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000600), 0x0, &(0x7f0000000040)={[{'soft'}, {'timeo=1'}, {'retrans=1'}, {'proto=udp'}, {'port=2049'}, {'addr=127.0.0.1'}]})

1m32.806907242s ago: executing program 6 (id=1190):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000050)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000060)='addr\x00', &(0x7f0000000070)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='port\x00', &(0x7f00000000a0)='2056\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='xprtsec\x00', &(0x7f00000000e0)='tls\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1m32.708027368s ago: executing program 6 (id=1191):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x50, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=@setlink={0x28, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000070000506000000000000000007000000030000001400018008000100000001000500060001000000"]}}, 0x0)

1m32.697918283s ago: executing program 6 (id=1192):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x4002})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x224e, 0x0, @empty}, 0x1c)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0103002800140036000847297837aa4baaaaaaaaaa2e86dd60fa050000651101fe8000000000000000000000000000aafe8000000000000000000000000000aa4e200e22006590787dbad24e7d1473b84d6177f62cca9a56ffd996cd1dff847ae92664132f6fcb63ea347457c6ad1349c0c3daab09543f4163c7739216b07e07ec9353"], 0x79)

1m32.493693817s ago: executing program 6 (id=1193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x11d8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567890abcdef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfedcba0987654321}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x10)
r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/56, 0x34}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x50}, 0x0)
read$alg(r2, &(0x7f0000000600), 0x44)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
poll(&(0x7f0000000800)=[{r3, 0x1}], 0x1, 0x64)
nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0)

1m32.284670283s ago: executing program 6 (id=1194):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10)

1m32.232112892s ago: executing program 6 (id=1195):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n\x00', 0x2)
close(r4)
r5 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
write(r5, &(0x7f0000000500)='test', 0x4)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r6 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10)
write(r6, &(0x7f0000000500)='test', 0x4)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m25.790879081s ago: executing program 43 (id=1151):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 client\n', 0x96)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x1, @loopback}, 0x10)
write(r2, &(0x7f0000000500)="80000060000000010000000000000002000186a0000000030000000000000006000000010000001800000001000000000000000400000001000000020000000401000000000000060000000000000000000000040000000000000020020100ff00"/124, 0x64)

1m23.281339073s ago: executing program 44 (id=1165):
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10)
write(r4, &(0x7f0000000400)="000000010000000000000002000186a30000000300000001000000010000001c00"/64, 0x40)
nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0)
read(r3, &(0x7f0000000600), 0x1000)

1m22.246287771s ago: executing program 45 (id=1172):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='2\n\x00', 0x3)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
read(r4, &(0x7f0000000800)=""/256, 0x100)

1m19.265759832s ago: executing program 46 (id=1181):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='udp 2049\n\x00', 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000500)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000600), 0x0, &(0x7f0000000040)={[{'soft'}, {'timeo=1'}, {'retrans=1'}, {'proto=udp'}, {'port=2049'}, {'addr=127.0.0.1'}]})

1m16.734583782s ago: executing program 47 (id=1195):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n\x00', 0x2)
close(r4)
r5 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
write(r5, &(0x7f0000000500)='test', 0x4)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r6 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10)
write(r6, &(0x7f0000000500)='test', 0x4)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

51.412483802s ago: executing program 8 (id=1242):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x14c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x14c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c)

51.031916401s ago: executing program 8 (id=1244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n\x00', 0x2)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10)
listen(r3, 0x5)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10)
r5 = accept(r3, 0x0, 0x0)
write(r4, &(0x7f0000000400)="0123456789", 0xa)
read(r5, &(0x7f0000000500), 0xa)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000700)={0x1}, 0x0)

49.704198286s ago: executing program 8 (id=1248):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1', 0x1)
close(r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0)

49.476038806s ago: executing program 8 (id=1251):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
read(r1, &(0x7f0000000500), 0x1000)
write$P9_RVERSION(r1, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x1000, 0x7, '9P2000.L'}, 0x13)
read(r1, &(0x7f0000000500), 0x1000)
write$P9_RATTACH(r1, &(0x7f0000000200)={0x10}, 0x10)
read(r1, &(0x7f0000000500), 0x1000)
write$P9_RSTAT(r1, &(0x7f0000000300)={0x3a, 0x7d, 0x1, {0x0, 0x33, 0x0, 0x0, {}, 0x777}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x777)
mount$9p_fd(0x0, &(0x7f0000000400)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

48.276022667s ago: executing program 8 (id=1261):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000060)=@filename='none\x00', &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='1000', 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1', 0x1)

48.1708737s ago: executing program 8 (id=1263):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='-3\n\x00', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='3\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10)
sendto(r4, &(0x7f00000002c0)='12345678\x00', 0x8, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

43.608167373s ago: executing program 7 (id=1314):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@local, 0x1234, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x18, 0x12, {{'deflate\x00'}}}]}, 0x168}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @local, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e50e", 0x0, 0x6c, 0x1, @local, @local, [], "00001234"}}}}}}}, 0x0)

43.36009895s ago: executing program 7 (id=1316):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

42.2474005s ago: executing program 7 (id=1327):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x5)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000000)="01000000", &(0x7f0000000040)=@tcp=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000000)="02000000", &(0x7f0000000040)=@tcp=r1}, 0x20)
close(r2)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
close(r0)
close(r1)

41.596067989s ago: executing program 7 (id=1337):
r0 = fsopen(&(0x7f0000000020)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000050)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000060)='addr\x00', &(0x7f0000000070)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='port\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='xprtsec\x00', &(0x7f00000000e0)='tls\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

41.393910581s ago: executing program 7 (id=1341):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0)

41.283854298s ago: executing program 7 (id=1343):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x6)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x108, 0x0, @loopback}, 0x1c)
write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9)

36.38632873s ago: executing program 9 (id=1400):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0)

36.165668126s ago: executing program 9 (id=1404):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/56, 0x34}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x50}, 0x0)
read$alg(r3, &(0x7f0000000600), 0x44)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
poll(&(0x7f0000000800)=[{r4, 0x1}], 0x1, 0x64)
nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0)

35.795345751s ago: executing program 9 (id=1405):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\x00', 0x2)

35.643152384s ago: executing program 9 (id=1407):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='1\x00', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='1\x00', 0x1)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x1, 0x0)
write(r5, &(0x7f0000000100)='1\x00', 0x1)
close(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'})
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0)

35.642491845s ago: executing program 9 (id=1408):
syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[], 0x0)

35.553995541s ago: executing program 9 (id=1409):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./nfs_mnt\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)

33.086319621s ago: executing program 48 (id=1263):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='-3\n\x00', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='3\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10)
sendto(r4, &(0x7f00000002c0)='12345678\x00', 0x8, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

26.070296421s ago: executing program 49 (id=1343):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x6)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x108, 0x0, @loopback}, 0x1c)
write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9)

20.428091814s ago: executing program 50 (id=1409):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./nfs_mnt\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)

19.344100656s ago: executing program 1 (id=1500):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000550)='1', 0x1)

19.327659351s ago: executing program 1 (id=1501):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10)
connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10)

19.005062257s ago: executing program 1 (id=1502):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/56, 0x34}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x50}, 0x0)
read$alg(r3, &(0x7f0000000600), 0x44)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
poll(&(0x7f0000000800)=[{r4, 0x1}], 0x1, 0x64)
nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0)

18.560305667s ago: executing program 1 (id=1506):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0)

18.034103069s ago: executing program 1 (id=1508):
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'dummy0\x00', {0x1}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000100005060000000000000000000000000000000000000000000000000b000300636f6e666967000008000500010000001c00120009000100766c616e000000000c0002000600010001000000"], 0x4c}}, 0x0)

17.53571555s ago: executing program 1 (id=1512):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portadd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2049\n\x00', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1\n\x00', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])

10.285699604s ago: executing program 5 (id=1546):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0)

10.157577853s ago: executing program 5 (id=1548):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000000}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x40}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000800)=0x64, 0x4)
sendto$inet(r1, &(0x7f0000000a00)='\x00', 0x400, 0x0, &(0x7f0000000b00)={0x2, 0x1f90, @private=0xa000001}, 0x10)

9.939717973s ago: executing program 5 (id=1549):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs/cache/nfs_dns/flush\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/100, 0x64)

9.699756419s ago: executing program 5 (id=1551):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0)

9.143785526s ago: executing program 5 (id=1554):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x11d8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfedcba0987654321}]}]}, 0x2c}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/56, 0x34}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x50}, 0x0)
read$alg(r3, &(0x7f0000000600), 0x44)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
poll(&(0x7f0000000800)=[{r4, 0x1}], 0x1, 0x64)
nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0)

8.775719584s ago: executing program 5 (id=1557):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10)
write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
read(r3, &(0x7f0000000600), 0x1000)

3.384409554s ago: executing program 0 (id=1576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1})
r1 = socket(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="240000001400050000000000000000002d000000020000000500020008000000", 0x20}], 0x1}, 0x0)
r2 = socket(0x2d, 0x2, 0x0)
setsockopt(r2, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4)
ioctl(r2, 0x89e2, &(0x7f0000000600)='\x00\x00\b\x00')
sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "000000000000080019000000000000000200"}, 0x34, &(0x7f0000000900)=[{&(0x7f0000000a00)="01020304", 0x4}], 0x1}, 0x0)

3.121994645s ago: executing program 0 (id=1578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000800)='0\x00', 0x2)

3.035365012s ago: executing program 0 (id=1579):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

2.768034738s ago: executing program 0 (id=1584):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_LINK={0x8, 0x5, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x50}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1})

2.692255595s ago: executing program 4 (id=1585):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
sendto$inet6(r0, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000100)={0xa, 0x1f40, 0x0, @mcast2}, 0x1c)

2.659356271s ago: executing program 4 (id=1586):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)

2.555489761s ago: executing program 4 (id=1587):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)

2.463817607s ago: executing program 51 (id=1512):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portadd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2049\n\x00', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1\n\x00', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])

2.420340265s ago: executing program 0 (id=1590):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x10, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x38}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f0000000200)={0x11, 0x3, r3}, 0x14)
sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0)
sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0)
sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

2.390443504s ago: executing program 3 (id=1591):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10)
connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10)

2.073281982s ago: executing program 3 (id=1592):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200), 0x0)

1.624301275s ago: executing program 3 (id=1593):
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) (async)

1.545703292s ago: executing program 4 (id=1594):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

1.436494883s ago: executing program 3 (id=1595):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\x00', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)

1.306335096s ago: executing program 0 (id=1596):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='2\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x80)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
read(r4, &(0x7f0000000800)=""/256, 0x100)

1.249130073s ago: executing program 3 (id=1597):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0)

1.052411254s ago: executing program 3 (id=1598):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
r5 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10)

480.159686ms ago: executing program 4 (id=1599):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc/sys/net/sctp/checksum_disable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00)='1', 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000900)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xc0a80101}})
bind(r0, &(0x7f0000000a00)=@in={0x2, 0x4e23, @rand_addr=0xc0a80101}, 0x10)
listen(r0, 0x5)
write(r3, &(0x7f0000000b00)="0000080045000054000040004084b6d2c0a80102c0a8010110e24e230000000000000000010000380102030400010000000a000a00000000800200240102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20", 0x58)

0s ago: executing program 4 (id=1600):
r0 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x2}, 0x1c) (async)
write(r0, &(0x7f0000000100)='hello', 0x5)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e23, 0x1, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.882'.
[  777.783481][T10759] netlink: 'syz.7.882': attribute type 2 has an invalid length.
[  777.791121][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.791514][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.818139][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.876339][T10758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.904526][T10758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.961664][  T200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.134216][T10768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.979778][T10785] svc: failed to register nfsdv3 RPC service (errno 111).
[  779.001047][T10785] svc: failed to register nfsaclv3 RPC service (errno 111).
[  779.146651][T10786] NFSD: Failed to start, no listeners configured.
[  780.796217][T10811] tipc: Started in network mode
[  780.796237][T10811] tipc: Node identity 1000001, cluster identity 4369
[  780.796250][T10811] tipc: Node number set to 16777217
[  780.796544][T10811] tipc: Cannot configure node identity twice
[  780.798532][T10811] tipc: New replicast peer: 127.0.0.1
[  780.842304][T10811] tipc: Enabled bearer <udp:syz0>, priority 10
[  781.127252][T10253] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  781.151933][T10253] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  781.210246][T10798] NFSD: Unable to initialize client recovery tracking! (-110)
[  781.210264][T10798] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  781.210275][T10798] NFSD: starting 90-second grace period (net f00003b2)
[  781.425331][T10253] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  781.931338][T10253] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  781.932208][T10815] ceph: No mds server is up or the cluster is laggy
[  782.343640][T10822] FAULT_INJECTION: forcing a failure.
[  782.343640][T10822] name fail_futex, interval 1, probability 0, space 0, times 0
[  782.343673][T10822] CPU: 1 UID: 0 PID: 10822 Comm: syz.5.907 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  782.343695][T10822] Tainted: [L]=SOFTLOCKUP
[  782.343700][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  782.343711][T10822] Call Trace:
[  782.343725][T10822]  <TASK>
[  782.343732][T10822]  dump_stack_lvl+0xe8/0x150
[  782.343761][T10822]  should_fail_ex+0x467/0x600
[  782.343788][T10822]  __se_sys_futex+0x180/0x450
[  782.343816][T10822]  ? __pfx___se_sys_futex+0x10/0x10
[  782.343837][T10822]  ? rcu_is_watching+0x15/0xb0
[  782.343863][T10822]  ? __x64_sys_futex+0x21/0xf0
[  782.343886][T10822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.343905][T10822]  do_syscall_64+0x174/0x580
[  782.343927][T10822]  ? trace_irq_disable+0x3b/0x140
[  782.343947][T10822]  ? clear_bhb_loop+0x40/0x90
[  782.343969][T10822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.343988][T10822] RIP: 0033:0x7fbc557ede99
[  782.344004][T10822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  782.344020][T10822] RSP: 002b:00007ffe50d1be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  782.344039][T10822] RAX: ffffffffffffffda RBX: 00000000000bef5d RCX: 00007fbc557ede99
[  782.344054][T10822] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbc55a75fac
[  782.344067][T10822] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000
[  782.344080][T10822] R10: 00007ffe50d1bf70 R11: 0000000000000246 R12: 00007ffe50d1bf90
[  782.344093][T10822] R13: 00007fbc55a75fac R14: 00000000000bef8f R15: 00007ffe50d1bf70
[  782.344119][T10822]  </TASK>
[  782.569615][  T823] net_ratelimit: 24 callbacks suppressed
[  782.569635][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.991397][T10832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.991628][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.991830][T10832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.994085][T10832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.994369][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.009572][ T6166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.009840][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.012320][ T6166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.012658][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.061662][ T5856] rpcbind: server 127.0.0.1 not responding, timed out
[  783.279370][T10837] NFSD: Failed to start, no listeners configured.
[  784.545873][T10840] NFSD: Failed to start, no listeners configured.
[  784.671340][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  784.758617][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  784.776104][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  784.777214][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  784.797854][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  785.313407][T10889] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[  785.353511][T10888] tipc: Resetting bearer <eth:syzkaller0>
[  785.621426][T10888] tipc: Disabling bearer <eth:syzkaller0>
[  786.183093][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.8.934'.
[  786.970907][ T4910] Bluetooth: hci5: command tx timeout
[  787.013896][T10911] netlink: 'syz.7.935': attribute type 5 has an invalid length.
[  787.254749][ T5826] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  787.770809][T10253] net_ratelimit: 29 callbacks suppressed
[  787.770830][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.909484][ T5856] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.442043][T10939] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  788.657538][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.822390][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.828779][ T5856] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.909227][T10963] bridge0: port 3(syz_tun) entered blocking state
[  788.909378][T10963] bridge0: port 3(syz_tun) entered disabled state
[  788.909482][T10963] syz_tun: entered allmulticast mode
[  788.912919][T10963] syz_tun: entered promiscuous mode
[  788.921488][T10963] bridge0: port 3(syz_tun) entered blocking state
[  788.921649][T10963] bridge0: port 3(syz_tun) entered listening state
[  789.052301][ T4910] Bluetooth: hci5: command tx timeout
[  789.111024][T10972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.135794][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.196823][T10864] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.197018][T10864] bridge0: port 1(bridge_slave_0) entered disabled state
[  789.197226][T10864] bridge_slave_0: entered allmulticast mode
[  789.208174][T10864] bridge_slave_0: entered promiscuous mode
[  789.236547][T10864] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.236672][T10864] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.236834][T10864] bridge_slave_1: entered allmulticast mode
[  789.238539][T10972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.253000][T10864] bridge_slave_1: entered promiscuous mode
[  789.306213][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.308839][T10976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.309500][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.352347][T10970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.692172][ T5856] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.997064][T10993] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  790.278476][T10864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  790.589060][ T5856] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.643453][T10864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  790.685422][T10864] team0: Port device team_slave_0 added
[  790.691170][T10864] team0: Port device team_slave_1 added
[  790.785824][T10864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  790.785836][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  790.785851][T10864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  790.789351][T10864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  790.789366][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  790.789392][T10864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  790.905625][T10864] hsr_slave_0: entered promiscuous mode
[  790.906915][T10864] hsr_slave_1: entered promiscuous mode
[  790.907744][T10864] debugfs: 'hsr0' already exists in 'hsr'
[  790.907768][T10864] Cannot create hsr debugfs directory
[  791.130596][ T4910] Bluetooth: hci5: command tx timeout
[  791.520514][T11032] tipc: New replicast peer: 127.0.0.1
[  791.520914][T11032] tipc: Enabled bearer <udp:syz0>, priority 10
[  791.568414][T11034] atomic_op ffff888069422a18 conn xmit_atomic 0000000000000000
[  792.841550][ T5856] bridge_slave_1: left allmulticast mode
[  792.841575][ T5856] bridge_slave_1: left promiscuous mode
[  792.841814][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[  792.962135][ T5856] bridge_slave_0: left allmulticast mode
[  792.962171][ T5856] bridge_slave_0: left promiscuous mode
[  792.962424][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[  792.970950][ T5730] net_ratelimit: 9 callbacks suppressed
[  792.970969][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.218023][ T4910] Bluetooth: hci5: command tx timeout
[  793.730351][  T164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.730720][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.859428][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.859653][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.022054][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.060327][ T6165] rpcbind: server 127.0.0.1 not responding, timed out
[  794.264922][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  794.341266][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  794.362233][ T5856] bond0 (unregistering): Released all slaves
[  794.731316][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.940297][T11088] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  795.079411][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.223095][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.243989][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.370330][ T5616] Bluetooth: hci1: command 0x0406 tx timeout
[  796.292865][T11121] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  796.769258][T11130] bridge0: port 3(gretap0) entered blocking state
[  796.770004][T11130] bridge0: port 3(gretap0) entered disabled state
[  796.828040][T11130] gretap0: entered allmulticast mode
[  796.952152][T11130] gretap0: entered promiscuous mode
[  797.015266][T11130] bridge0: port 3(gretap0) entered blocking state
[  797.021983][T11130] bridge0: port 3(gretap0) entered forwarding state
[  797.060755][T11131] bridge0: port 4(erspan0) entered blocking state
[  797.060879][T11131] bridge0: port 4(erspan0) entered disabled state
[  797.061024][T11131] erspan0: entered allmulticast mode
[  797.062533][T11131] erspan0: entered promiscuous mode
[  797.063057][T11131] bridge0: port 4(erspan0) entered blocking state
[  797.063119][T11131] bridge0: port 4(erspan0) entered forwarding state
[  798.171466][T10262] net_ratelimit: 18 callbacks suppressed
[  798.171487][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.440298][ T5856] hsr_slave_0: left promiscuous mode
[  798.482823][ T5856] hsr_slave_1: left promiscuous mode
[  798.484160][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  798.484178][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0
[  798.511929][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  798.511955][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  798.602120][ T5856] veth1_macvtap: left promiscuous mode
[  798.602231][ T5856] veth0_macvtap: left promiscuous mode
[  798.602463][ T5856] veth1_vlan: left promiscuous mode
[  798.602567][ T5856] veth0_vlan: left promiscuous mode
[  798.895009][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.228414][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.344043][ T5856] team0 (unregistering): Port device team_slave_1 removed
[  799.401862][ T5856] team0 (unregistering): Port device team_slave_0 removed
[  799.734642][T10864] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  799.766742][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  799.767773][T11162] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  799.767814][T10864] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  799.815641][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  799.816536][T10864] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  799.866480][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  799.877989][T11163] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  799.878473][T10864] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  799.977623][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  800.219078][T10864] 8021q: adding VLAN 0 to HW filter on device bond0
[  800.219369][T11173] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  800.271052][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.295399][T10864] 8021q: adding VLAN 0 to HW filter on device team0
[  800.363204][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state
[  800.363307][ T6166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  800.401298][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[  800.401441][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  800.896579][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1021'.
[  800.896904][T11182] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1021'.
[  801.301085][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.427479][T10864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  801.555213][T10864] veth0_vlan: entered promiscuous mode
[  801.618197][T10864] veth1_vlan: entered promiscuous mode
[  801.727878][T10864] veth0_macvtap: entered promiscuous mode
[  801.741789][T10864] veth1_macvtap: entered promiscuous mode
[  801.775692][T10864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  801.791179][T10864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  801.798228][ T6165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  801.798751][ T6165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  801.825482][ T6165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  801.828117][ T6165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  801.966088][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.253380][    C1] tipc: RX(10101): key[1] is activated
[  802.357206][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.213213][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.213235][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.287088][ T6166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.287109][ T6166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.371224][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.431636][T11207] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  804.176049][    C0] bridge0: port 3(syz_tun) entered learning state
[  804.410731][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.982605][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.369930][T11240] tipc: Started in network mode
[  805.369949][T11240] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568
[  805.384919][T11240] tipc: New replicast peer: 127.0.0.1
[  805.385186][T11240] tipc: Enabled bearer <udp:syz0>, priority 10
[  805.454129][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.094077][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.235340][T11247] netlink: 'syz.1.1041': attribute type 13 has an invalid length.
[  806.494523][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.500337][T10041] tipc: Node number set to 3210880763
[  807.501625][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  807.533271][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.542257][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  807.564001][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  807.581684][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  807.605619][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  808.043015][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.587240][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.690274][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  809.069230][T11259] bridge0: port 1(bridge_slave_0) entered blocking state
[  809.071167][T11259] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.071382][T11259] bridge_slave_0: entered allmulticast mode
[  809.101492][T11259] bridge_slave_0: entered promiscuous mode
[  809.142673][T11259] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.142787][T11259] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.143007][T11259] bridge_slave_1: entered allmulticast mode
[  809.144741][T11259] bridge_slave_1: entered promiscuous mode
[  809.302805][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  809.307928][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  809.344136][T11259] team0: Port device team_slave_0 added
[  809.346217][T11259] team0: Port device team_slave_1 added
[  809.375989][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0
[  809.376007][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  809.376023][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  809.377347][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1
[  809.377360][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  809.377375][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  809.455921][T11259] hsr_slave_0: entered promiscuous mode
[  809.457268][T11259] hsr_slave_1: entered promiscuous mode
[  809.458297][T11259] debugfs: 'hsr0' already exists in 'hsr'
[  809.458321][T11259] Cannot create hsr debugfs directory
[  809.621421][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.770265][ T4910] Bluetooth: hci2: command tx timeout
[  810.571757][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.652139][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.050421][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.372196][T11259] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  811.427011][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  811.427915][T11259] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  811.455311][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  811.456291][T11259] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  811.504325][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  811.505239][T11259] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  811.533970][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  811.625584][T11259] 8021q: adding VLAN 0 to HW filter on device bond0
[  811.647801][T11259] 8021q: adding VLAN 0 to HW filter on device team0
[  811.660406][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.660556][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  811.685035][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.685156][ T6166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  811.708536][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.851298][ T4910] Bluetooth: hci2: command tx timeout
[  812.095398][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  812.152317][T11259] veth0_vlan: entered promiscuous mode
[  812.162223][T11259] veth1_vlan: entered promiscuous mode
[  812.194407][T11259] veth0_macvtap: entered promiscuous mode
[  812.198333][T11259] veth1_macvtap: entered promiscuous mode
[  812.218439][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0
[  812.242866][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1
[  812.265653][  T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  812.266175][  T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  812.266731][  T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  812.267230][  T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  812.764182][  T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  812.764221][  T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  812.819251][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.037300][ T6166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  813.037322][ T6166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  813.407172][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  813.426068][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  813.428830][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  813.467709][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  813.495442][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  813.882286][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  813.925919][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  813.931333][ T8742] Bluetooth: hci2: command tx timeout
[  813.945513][ T5616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  813.952558][ T5616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  813.954966][ T5616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  813.960875][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.146023][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.220525][T11311] syz.2.1044 (11311) used greatest stack depth: 18520 bytes left
[  814.339851][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'.
[  814.981324][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.691644][ T4910] Bluetooth: hci6: command tx timeout
[  815.823244][T11306] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.823338][T11306] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.823521][T11306] bridge_slave_0: entered allmulticast mode
[  815.827156][T11306] bridge_slave_0: entered promiscuous mode
[  815.871859][T11306] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.872053][T11306] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.872260][T11306] bridge_slave_1: entered allmulticast mode
[  815.875182][T11306] bridge_slave_1: entered promiscuous mode
[  815.952407][T11306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  815.981125][T11306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.010619][ T4910] Bluetooth: hci2: command tx timeout
[  816.011338][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.027106][T11306] team0: Port device team_slave_0 added
[  816.036189][T11306] team0: Port device team_slave_1 added
[  816.074557][T11306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.074574][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.074598][T11306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.089172][T11306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.089190][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.089217][T11306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  816.095500][ T4910] Bluetooth: hci7: command tx timeout
[  816.391215][T11306] hsr_slave_0: entered promiscuous mode
[  816.392124][T11306] hsr_slave_1: entered promiscuous mode
[  816.392725][T11306] debugfs: 'hsr0' already exists in 'hsr'
[  816.392741][T11306] Cannot create hsr debugfs directory
[  816.488670][T11310] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.489020][T11310] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.489183][T11310] bridge_slave_0: entered allmulticast mode
[  816.492022][T11310] bridge_slave_0: entered promiscuous mode
[  816.530979][T11310] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.531108][T11310] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.531615][T11310] bridge_slave_1: entered allmulticast mode
[  816.533596][T11310] bridge_slave_1: entered promiscuous mode
[  816.627643][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  816.658341][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.757789][T11310] team0: Port device team_slave_0 added
[  816.792970][T11310] team0: Port device team_slave_1 added
[  816.903846][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.903863][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.903890][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.907677][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.907690][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.907710][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  817.009399][T11310] hsr_slave_0: entered promiscuous mode
[  817.011493][T11310] hsr_slave_1: entered promiscuous mode
[  817.017274][T11310] debugfs: 'hsr0' already exists in 'hsr'
[  817.017301][T11310] Cannot create hsr debugfs directory
[  817.054299][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.213385][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.789126][ T4910] Bluetooth: hci6: command tx timeout
[  818.100863][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.170378][ T4910] Bluetooth: hci7: command tx timeout
[  819.130746][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.530937][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  819.530961][    C0] bridge0: topology change detected, propagating
[  819.850287][ T4910] Bluetooth: hci6: command tx timeout
[  820.194275][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.219625][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.250345][ T4910] Bluetooth: hci7: command tx timeout
[  820.250591][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.811038][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.811963][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.165492][T11306] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  821.255204][T11306] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  821.275925][T11306] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  821.300319][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.339522][T11306] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  821.352491][T11306] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  821.389542][ T8742] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  821.448111][ T8742] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  821.449637][ T8742] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  821.458257][ T8742] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  821.459273][ T8742] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  821.502650][T11306] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  821.774023][T11306] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  821.815951][T11306] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  821.932335][ T8742] Bluetooth: hci6: command tx timeout
[  822.107327][T11310] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  822.146028][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  822.152693][T11310] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  822.193185][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  822.194970][T11310] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  822.235090][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  822.248093][T11310] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  822.305378][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  822.332198][ T8742] Bluetooth: hci7: command tx timeout
[  822.343619][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.618399][T11306] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.733049][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.770406][T11306] 8021q: adding VLAN 0 to HW filter on device team0
[  822.807128][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[  822.807451][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[  822.884649][T11310] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.887912][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.888009][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.950942][T11445] rdma_rxe: rxe_newlink: failed to add veth0
[  822.978026][T11446] lo speed is unknown, defaulting to 1000
[  823.007051][T11310] 8021q: adding VLAN 0 to HW filter on device team0
[  823.016901][T11446] lo speed is unknown, defaulting to 1000
[  823.097834][T11446] lo speed is unknown, defaulting to 1000
[  823.252050][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.252260][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[  823.386099][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.412205][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.412329][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state
[  823.690414][ T8742] Bluetooth: hci8: command tx timeout
[  823.951190][T11446] infiniband syz1: set active
[  823.951213][T11446] infiniband syz1: added lo
[  823.953605][T11446] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  823.973388][T10253] lo speed is unknown, defaulting to 1000
[  823.975354][T11446] infiniband syz1: Couldn't open port 1
[  824.102880][T11446] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  824.102921][T11446] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  824.102960][T11446] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  824.417574][T11446] RDS/IB: syz1: added
[  824.417654][T11446] smc: adding ib device syz1 with port count 1
[  824.417676][T11446] smc:    ib device syz1 port 1 has no pnetid
[  824.439296][T10253] net_ratelimit: 1 callbacks suppressed
[  824.439315][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.478620][T10042] lo speed is unknown, defaulting to 1000
[  824.509787][T11407] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.509855][T11407] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.518162][T11407] bridge_slave_0: entered allmulticast mode
[  824.528859][T11407] bridge_slave_0: entered promiscuous mode
[  824.553325][T11446] lo speed is unknown, defaulting to 1000
[  824.572732][T11407] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.572800][T11407] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.572985][T11407] bridge_slave_1: entered allmulticast mode
[  824.577575][T11407] bridge_slave_1: entered promiscuous mode
[  824.739956][T11407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  824.770558][T11407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  824.991319][T11407] team0: Port device team_slave_0 added
[  825.001197][T11407] team0: Port device team_slave_1 added
[  825.213535][ T4910] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  825.278247][ T4910] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  825.279557][T11407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  825.279570][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.279590][T11407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  825.320773][ T5901] rpcbind: server 127.0.0.1 not responding, timed out
[  825.322676][ T4910] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  825.371433][ T4910] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  825.373901][ T4910] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  825.518430][T11407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  825.518449][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.518475][T11407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  825.622163][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.770318][ T4910] Bluetooth: hci8: command tx timeout
[  825.895734][T11306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  825.974897][T11446] lo speed is unknown, defaulting to 1000
[  826.067785][T11407] hsr_slave_0: entered promiscuous mode
[  826.072790][T11407] hsr_slave_1: entered promiscuous mode
[  826.080885][T11407] debugfs: 'hsr0' already exists in 'hsr'
[  826.080915][T11407] Cannot create hsr debugfs directory
[  826.281704][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  826.431641][T11446] lo speed is unknown, defaulting to 1000
[  826.650782][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.787124][T11306] veth0_vlan: entered promiscuous mode
[  826.890894][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.910525][T11306] veth1_vlan: entered promiscuous mode
[  827.027499][T11310] veth0_vlan: entered promiscuous mode
[  827.314460][T11310] veth1_vlan: entered promiscuous mode
[  827.318792][T11446] lo speed is unknown, defaulting to 1000
[  827.376629][T11306] veth0_macvtap: entered promiscuous mode
[  827.400556][T11306] veth1_macvtap: entered promiscuous mode
[  827.478006][T11306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  827.537637][T11306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  827.538382][T11310] veth0_macvtap: entered promiscuous mode
[  827.585187][T11310] veth1_macvtap: entered promiscuous mode
[  827.587070][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  827.609681][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  827.633775][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  827.635254][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  827.691395][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.807569][T11473] lo speed is unknown, defaulting to 1000
[  827.856816][ T8742] Bluetooth: hci8: command tx timeout
[  827.863911][ T8742] Bluetooth: hci9: command tx timeout
[  827.956520][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0
[  828.417118][T11446] lo speed is unknown, defaulting to 1000
[  828.429181][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1
[  828.674747][  T155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  828.741338][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.934934][  T155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  828.989116][  T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  829.010394][T11446] lo speed is unknown, defaulting to 1000
[  829.041166][  T155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  829.109587][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.109609][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  829.624407][T11446] lo speed is unknown, defaulting to 1000
[  829.783306][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.930776][ T8742] Bluetooth: hci9: command tx timeout
[  829.930806][ T8742] Bluetooth: hci8: command tx timeout
[  829.933127][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.947799][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.947817][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.495099][T11446] lo speed is unknown, defaulting to 1000
[  830.520844][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.520864][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.818626][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.984722][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'.
[  830.985023][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'.
[  831.051983][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.173581][T11446] lo speed is unknown, defaulting to 1000
[  831.195347][  T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.195369][  T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.213415][ T5616] Bluetooth: hci0: command 0x0406 tx timeout
[  831.555539][T11508] tipc: Started in network mode
[  831.555570][T11508] tipc: Node identity 78563412785634122143658721436587, cluster identity 4568
[  831.558126][T11407] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  831.609732][T11407] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  831.654074][T11407] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  831.780644][T11407] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  831.859024][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.893339][T11407] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  831.925557][T11407] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  831.945778][T11407] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  831.994408][T11407] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  832.021964][ T4910] Bluetooth: hci9: command tx timeout
[  832.079503][T11473] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.079938][T11473] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.094835][T11473] bridge_slave_0: entered allmulticast mode
[  832.108249][T11473] bridge_slave_0: entered promiscuous mode
[  832.146419][T11473] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.146558][T11473] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.146824][T11473] bridge_slave_1: entered allmulticast mode
[  832.149516][T11473] bridge_slave_1: entered promiscuous mode
[  832.303943][T11473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  832.326370][T11473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  832.331549][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.396767][T11473] team0: Port device team_slave_0 added
[  832.411598][T11473] team0: Port device team_slave_1 added
[  832.498140][T11473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  832.498157][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  832.498184][T11473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  832.557378][T11473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  832.557395][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  832.558638][T11473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  832.761112][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1093'.
[  832.795004][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1093'.
[  832.837299][T11545] syz_tun: entered allmulticast mode
[  832.890564][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.915132][T11473] hsr_slave_0: entered promiscuous mode
[  832.916641][T11473] hsr_slave_1: entered promiscuous mode
[  832.917731][T11473] debugfs: 'hsr0' already exists in 'hsr'
[  832.917752][T11473] Cannot create hsr debugfs directory
[  832.981256][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.346546][T11544] syz_tun: left allmulticast mode
[  833.963008][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.094392][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.095310][ T4910] Bluetooth: hci9: command tx timeout
[  834.095383][T11407] 8021q: adding VLAN 0 to HW filter on device bond0
[  834.524666][T11575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'.
[  834.705660][T11581] tipc: Started in network mode
[  834.705694][T11581] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4711
[  834.724453][T11577] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1110'.
[  834.759917][T11407] 8021q: adding VLAN 0 to HW filter on device team0
[  834.879764][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.896148][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  834.973767][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.123680][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[  835.123823][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state
[  835.178395][T11598] FAULT_INJECTION: forcing a failure.
[  835.178395][T11598] name failslab, interval 1, probability 100, space 0, times 1
[  835.178429][T11598] CPU: 1 UID: 0 PID: 11598 Comm: syz.3.1118 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  835.178457][T11598] Tainted: [L]=SOFTLOCKUP
[  835.178464][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  835.178477][T11598] Call Trace:
[  835.178494][T11598]  <TASK>
[  835.178503][T11598]  dump_stack_lvl+0xe8/0x150
[  835.178543][T11598]  should_fail_ex+0x467/0x600
[  835.178581][T11598]  should_failslab+0xa8/0x100
[  835.178605][T11598]  kmem_cache_alloc_node_noprof+0xae/0x670
[  835.178628][T11598]  ? __alloc_skb+0x1d7/0x7a0
[  835.178650][T11598]  ? __alloc_skb+0x1d7/0x7a0
[  835.178676][T11598]  __alloc_skb+0x1d7/0x7a0
[  835.178700][T11598]  alloc_skb_with_frags+0xc6/0x760
[  835.178728][T11598]  ? __lock_acquire+0x683/0x2ce0
[  835.178755][T11598]  sock_alloc_send_pskb+0x884/0x9a0
[  835.178796][T11598]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  835.178829][T11598]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  835.178861][T11598]  __ip_append_data+0x29ea/0x3cf0
[  835.178902][T11598]  ? __lock_acquire+0x683/0x2ce0
[  835.178929][T11598]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  835.178976][T11598]  ? __pfx___ip_append_data+0x10/0x10
[  835.179002][T11598]  ? ipv4_mtu+0x23/0x670
[  835.179027][T11598]  ? __pfx_ipv4_mtu+0x10/0x10
[  835.179054][T11598]  ? ip_setup_cork+0x4ed/0x8f0
[  835.179084][T11598]  ip_make_skb+0x250/0x460
[  835.179108][T11598]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  835.179140][T11598]  ? __pfx_ip_make_skb+0x10/0x10
[  835.179168][T11598]  ? xfrm_lookup_with_ifid+0x1833/0x1b60
[  835.179224][T11598]  udp_sendmsg+0x1937/0x2140
[  835.179265][T11598]  ? __pfx_udp_sendmsg+0x10/0x10
[  835.179284][T11598]  ? tomoyo_check_inet_address+0x27f/0x930
[  835.179328][T11598]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  835.179365][T11598]  ? __asan_memset+0x22/0x50
[  835.179402][T11598]  ? sock_rps_record_flow+0x19/0x350
[  835.179437][T11598]  ? inet_sendmsg+0x23e/0x320
[  835.179468][T11598]  ? __pfx_inet_sendmsg+0x10/0x10
[  835.179504][T11598]  sock_sendmsg_nosec+0x10e/0x180
[  835.179539][T11598]  __sys_sendto+0x41e/0x5d0
[  835.179565][T11598]  ? __pfx___sys_sendto+0x10/0x10
[  835.179608][T11598]  ? rcu_is_watching+0x15/0xb0
[  835.179641][T11598]  __x64_sys_sendto+0xde/0x100
[  835.179665][T11598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.179688][T11598]  do_syscall_64+0x174/0x580
[  835.179713][T11598]  ? trace_irq_disable+0x3b/0x140
[  835.179732][T11598]  ? clear_bhb_loop+0x40/0x90
[  835.179754][T11598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.179774][T11598] RIP: 0033:0x7fb476dcde99
[  835.179794][T11598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  835.179813][T11598] RSP: 002b:00007fb475026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  835.179835][T11598] RAX: ffffffffffffffda RBX: 00007fb477055fa0 RCX: 00007fb476dcde99
[  835.179852][T11598] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005
[  835.179865][T11598] RBP: 00007fb476e63eaf R08: 0000200000000300 R09: 0000000000000010
[  835.179879][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  835.179892][T11598] R13: 00007fb477056038 R14: 00007fb477055fa0 R15: 00007ffdca3cc408
[  835.179919][T11598]  </TASK>
[  835.185606][    C0] FAULT_INJECTION: forcing a failure.
[  835.185606][    C0] name failslab, interval 1, probability 100, space 0, times 1
[  835.185652][    C0] CPU: 0 UID: 0 PID: 155 Comm: kworker/u8:6 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  835.185684][    C0] Tainted: [L]=SOFTLOCKUP
[  835.185693][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  835.185709][    C0] Workqueue: ipv6_addrconf addrconf_dad_work
[  835.185737][    C0] Call Trace:
[  835.185746][    C0]  <TASK>
[  835.185757][    C0]  dump_stack_lvl+0xe8/0x150
[  835.185796][    C0]  should_fail_ex+0x467/0x600
[  835.185839][    C0]  should_failslab+0xa8/0x100
[  835.185867][    C0]  kmem_cache_alloc_noprof+0xa4/0x650
[  835.185889][    C0]  ? skb_clone+0x212/0x3a0
[  835.185913][    C0]  ? skb_clone+0x212/0x3a0
[  835.185936][    C0]  ? run_filter+0x23/0x270
[  835.185968][    C0]  skb_clone+0x212/0x3a0
[  835.186003][    C0]  ? packet_rcv+0x563/0x16f0
[  835.186037][    C0]  packet_rcv+0x65d/0x16f0
[  835.186080][    C0]  __netif_receive_skb_core+0x2705/0x30b0
[  835.186122][    C0]  ? __lock_acquire+0x683/0x2ce0
[  835.186157][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  835.186191][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  835.186221][    C0]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  835.186267][    C0]  ? process_backlog+0x261/0xc50
[  835.186292][    C0]  ? process_backlog+0x261/0xc50
[  835.186316][    C0]  ? rt_spin_unlock+0x157/0x200
[  835.186361][    C0]  ? process_backlog+0x261/0xc50
[  835.186382][    C0]  process_backlog+0x351/0xc50
[  835.186414][    C0]  ? rt_spin_unlock+0x157/0x200
[  835.186461][    C0]  __napi_poll+0xae/0x550
[  835.186500][    C0]  net_rx_action+0x621/0xd70
[  835.186538][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  835.186559][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  835.186597][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  835.186624][    C0]  ? veth_xmit+0xa47/0xe40
[  835.186657][    C0]  ? veth_xmit+0x66/0xe40
[  835.186702][    C0]  handle_softirqs+0x1d9/0x6c0
[  835.186745][    C0]  __local_bh_enable_ip+0x170/0x2b0
[  835.186772][    C0]  ? __dev_queue_xmit+0x294/0x3880
[  835.186807][    C0]  __dev_queue_xmit+0x1ee9/0x3880
[  835.186851][    C0]  ? __dev_queue_xmit+0x294/0x3880
[  835.186882][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  835.186912][    C0]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  835.186955][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  835.186992][    C0]  ? neigh_resolve_output+0x44d/0x740
[  835.187020][    C0]  ? eth_header+0x11b/0x200
[  835.187053][    C0]  ? __asan_memcpy+0x40/0x70
[  835.187090][    C0]  ? eth_header+0x11b/0x200
[  835.187123][    C0]  ? __pfx_eth_header+0x10/0x10
[  835.187150][    C0]  ? neigh_resolve_output+0x622/0x740
[  835.187189][    C0]  ? ip6_output+0x11e/0x540
[  835.187213][    C0]  ip6_output+0x337/0x540
[  835.187241][    C0]  ? __pfx_ip6_output+0x10/0x10
[  835.187262][    C0]  ndisc_send_skb+0xcb2/0x1650
[  835.187299][    C0]  ? ndisc_alloc_skb+0x1a6/0x480
[  835.187331][    C0]  ? ndisc_send_skb+0x203/0x1650
[  835.187371][    C0]  ? __pfx_ndisc_send_skb+0x10/0x10
[  835.187406][    C0]  ? __pfx_dst_output+0x10/0x10
[  835.187435][    C0]  ? __asan_memcpy+0x40/0x70
[  835.187482][    C0]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  835.187528][    C0]  ndisc_send_ns+0xd7/0x160
[  835.187558][    C0]  ? __local_bh_enable+0x1e1/0x2f0
[  835.187588][    C0]  ? __pfx_ndisc_send_ns+0x10/0x10
[  835.187619][    C0]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  835.187644][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  835.187672][    C0]  addrconf_dad_work+0xc37/0x16e0
[  835.187694][    C0]  ? addrconf_dad_work+0x131/0x16e0
[  835.187714][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  835.187748][    C0]  ? __pfx_addrconf_dad_work+0x10/0x10
[  835.187770][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  835.187806][    C0]  ? rcu_is_watching+0x15/0xb0
[  835.187838][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  835.187865][    C0]  process_scheduled_works+0xa8e/0x14e0
[  835.187926][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  835.187962][    C0]  ? assign_work+0x3cf/0x5d0
[  835.188003][    C0]  worker_thread+0xa47/0xfb0
[  835.188065][    C0]  kthread+0x388/0x470
[  835.188099][    C0]  ? __pfx_worker_thread+0x10/0x10
[  835.188126][    C0]  ? __pfx_kthread+0x10/0x10
[  835.188161][    C0]  ret_from_fork+0x514/0xb70
[  835.188201][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  835.188236][    C0]  ? __switch_to+0xc89/0x1420
[  835.188270][    C0]  ? __pfx_kthread+0x10/0x10
[  835.188305][    C0]  ret_from_fork_asm+0x1a/0x30
[  835.188348][    C0]  </TASK>
[  836.012232][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.340753][ T4910] Bluetooth: hci3: command 0x0406 tx timeout
[  836.410415][ T4910] Bluetooth: hci4: command 0x0406 tx timeout
[  837.127602][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.138696][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.469046][T11407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  837.698512][T11649] tipc: Started in network mode
[  837.698540][T11649] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568
[  837.810426][T11649] tipc: New replicast peer: 127.0.0.1
[  837.811051][T11649] tipc: Enabled bearer <udp:syz0>, priority 10
[  838.225906][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.976838][T10253] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  838.978828][T10253] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  839.025883][ T5613] tipc: Node number set to 3210880763
[  839.034841][T11694] tipc: Cannot configure node identity twice
[  839.051631][T11697] tipc: New replicast peer: 127.0.0.1
[  839.058590][T11697] tipc: Enabled bearer <udp:syz0>, priority 10
[  839.124209][T11473] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  839.183076][T11473] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  839.186795][T11473] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  839.231486][T10253] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  839.249188][T11473] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  839.260896][T11473] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  839.291434][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.343280][T11473] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  839.344372][T11407] veth0_vlan: entered promiscuous mode
[  839.345235][T11473] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  839.428965][T11473] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  839.585644][T11407] veth1_vlan: entered promiscuous mode
[  839.706068][T11407] veth0_macvtap: entered promiscuous mode
[  839.719003][T11407] veth1_macvtap: entered promiscuous mode
[  839.774009][  T823] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  839.779967][T11693] ceph: No mds server is up or the cluster is laggy
[  839.809349][T11407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  839.826383][T11407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  839.927295][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  839.928992][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  840.004464][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  840.022353][T11473] 8021q: adding VLAN 0 to HW filter on device bond0
[  840.040669][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.196857][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.234194][T11473] 8021q: adding VLAN 0 to HW filter on device team0
[  840.239693][   T31] tipc: Node number set to 3210880763
[  840.354726][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.482500][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[  840.482724][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  840.532878][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[  840.533043][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[  841.385837][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.561197][  T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.561220][  T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.783897][ T5856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.783918][ T5856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  842.460496][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.571605][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.211518][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.218892][T11770] tipc: Cannot configure node identity twice
[  843.242794][T11770] tipc: New replicast peer: 127.0.0.1
[  843.251906][T11770] tipc: Enabled bearer <udp:syz0>, priority 10
[  843.264324][T11473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  843.530881][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.857690][T11473] veth0_vlan: entered promiscuous mode
[  843.896670][T11473] veth1_vlan: entered promiscuous mode
[  843.964103][T11473] veth0_macvtap: entered promiscuous mode
[  843.972042][T11473] veth1_macvtap: entered promiscuous mode
[  844.011629][T11473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  844.034077][T11473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  844.066054][ T5856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  844.068434][ T5856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  844.069411][ T5856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  844.069453][ T5856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  844.179768][T11779] lo speed is unknown, defaulting to 1000
[  844.416577][T10262] tipc: Node number set to 2035774871
[  844.581087][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.979173][ T5827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  844.979194][ T5827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  845.245165][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.245185][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  845.611410][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.632985][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1173'.
[  845.633446][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1173'.
[  846.250464][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.650897][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.733946][T11812] tipc: Started in network mode
[  846.733966][T11812] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568
[  846.734625][T11812] tipc: New replicast peer: 127.0.0.1
[  846.734846][T11812] tipc: Enabled bearer <udp:syz0>, priority 10
[  847.260286][  T155] rpcbind: server 127.0.0.1 not responding, timed out
[  847.702878][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.851081][ T9060] tipc: Node number set to 3210880763
[  848.331740][    C0] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated
[  848.672214][T11841] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  848.730880][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.290485][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.612794][    C1] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated
[  849.771127][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.812507][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.851164][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.181133][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.331769][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.890923][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.452045][    C1] tipc: RX(78563412785634122143658721436587): key[1] is activated
[  853.930574][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.970567][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.396540][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.493124][ T8742] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  855.566150][ T8742] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  855.570354][ T8742] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  855.582152][ T8742] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  855.582848][ T8742] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  856.027407][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.115010][T11854] lo speed is unknown, defaulting to 1000
[  856.527924][T11854] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.528050][T11854] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.528176][T11854] bridge_slave_0: entered allmulticast mode
[  856.529660][T11854] bridge_slave_0: entered promiscuous mode
[  856.552976][T11854] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.553166][T11854] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.553388][T11854] bridge_slave_1: entered allmulticast mode
[  856.555830][T11854] bridge_slave_1: entered promiscuous mode
[  856.604816][T11854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  856.607556][T11854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  856.656724][T11854] team0: Port device team_slave_0 added
[  856.659117][T11854] team0: Port device team_slave_1 added
[  856.693759][T11854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  856.693771][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.693785][T11854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  856.695385][T11854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  856.695398][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.695413][T11854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  856.789584][T11854] hsr_slave_0: entered promiscuous mode
[  856.791055][T11854] hsr_slave_1: entered promiscuous mode
[  856.792036][T11854] debugfs: 'hsr0' already exists in 'hsr'
[  856.792058][T11854] Cannot create hsr debugfs directory
[  857.050510][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.199770][T11854] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.291496][    C1] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated
[  857.536972][T11854] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.773868][ T5616] Bluetooth: hci10: command tx timeout
[  858.069269][ T8742] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  858.095817][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.190674][ T8742] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  858.192096][ T8742] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  858.194345][ T8742] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  858.195099][ T8742] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  858.336038][T11854] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  858.425109][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.725324][T11854] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  859.132392][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.145131][ T8742] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  859.187748][ T8742] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  859.196135][ T8742] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  859.208603][ T8742] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  859.298641][ T8742] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  859.644233][T11873] lo speed is unknown, defaulting to 1000
[  859.851771][ T5616] Bluetooth: hci10: command tx timeout
[  860.181375][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.250385][ T5616] Bluetooth: hci11: command tx timeout
[  860.284196][T11854] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  860.315539][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  860.337076][T11854] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  860.365201][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  860.386855][T11854] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  860.425076][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  860.444271][T11854] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  860.478091][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  860.553569][T11885] lo speed is unknown, defaulting to 1000
[  861.102223][T11854] 8021q: adding VLAN 0 to HW filter on device bond0
[  861.107448][T11873] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.107638][T11873] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.108134][T11873] bridge_slave_0: entered allmulticast mode
[  861.110895][T11873] bridge_slave_0: entered promiscuous mode
[  861.136502][T11873] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.136629][T11873] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.140574][T11873] bridge_slave_1: entered allmulticast mode
[  861.172780][T11873] bridge_slave_1: entered promiscuous mode
[  861.210872][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.222801][T11873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  861.245544][T11873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  861.378627][T11854] 8021q: adding VLAN 0 to HW filter on device team0
[  861.388189][T11873] team0: Port device team_slave_0 added
[  861.401988][T11873] team0: Port device team_slave_1 added
[  861.450646][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.522262][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.522529][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  861.524544][T11873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  861.524554][T11873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.524568][T11873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  861.527569][T11873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  861.527588][T11873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.527606][T11873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  861.531445][ T5616] Bluetooth: hci12: command tx timeout
[  861.689451][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.689551][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[  861.775602][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.910432][T11873] hsr_slave_0: entered promiscuous mode
[  861.911492][T11873] hsr_slave_1: entered promiscuous mode
[  861.912281][T11873] debugfs: 'hsr0' already exists in 'hsr'
[  861.912299][T11873] Cannot create hsr debugfs directory
[  861.930335][ T5616] Bluetooth: hci10: command tx timeout
[  862.127745][ T8742] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  862.157910][ T8742] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  862.159199][ T8742] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  862.167853][ T8742] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  862.169943][ T8742] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  862.263830][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.336074][ T5616] Bluetooth: hci11: command tx timeout
[  862.339260][T11885] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.339400][T11885] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.339684][T11885] bridge_slave_0: entered allmulticast mode
[  862.375132][T11885] bridge_slave_0: entered promiscuous mode
[  862.413599][T11885] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.413708][T11885] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.413925][T11885] bridge_slave_1: entered allmulticast mode
[  862.418259][T11885] bridge_slave_1: entered promiscuous mode
[  862.596176][T11885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.616046][T11885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.816399][T11885] team0: Port device team_slave_0 added
[  862.835153][T11885] team0: Port device team_slave_1 added
[  862.934873][T11885] batman_adv: batadv0: Adding interface: batadv_slave_0
[  862.934884][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.934898][T11885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.009923][T11885] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.009941][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.009968][T11885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.308428][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.584988][T11873] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.610610][ T8742] Bluetooth: hci12: command tx timeout
[  863.626530][T11885] hsr_slave_0: entered promiscuous mode
[  863.627553][T11885] hsr_slave_1: entered promiscuous mode
[  863.628219][T11885] debugfs: 'hsr0' already exists in 'hsr'
[  863.628234][T11885] Cannot create hsr debugfs directory
[  863.628425][T11916] lo speed is unknown, defaulting to 1000
[  864.011346][ T8742] Bluetooth: hci10: command tx timeout
[  864.195648][T11873] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.339500][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.410609][ T5616] Bluetooth: hci11: command tx timeout
[  864.410620][ T8742] Bluetooth: hci13: command tx timeout
[  864.490963][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.597332][ T5616] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  864.608366][ T5616] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  864.617381][ T5616] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  864.657720][ T5616] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  864.658647][ T5616] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  864.918778][T11873] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.281492][T11854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  865.370778][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.505002][T11873] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.708372][ T8742] Bluetooth: hci12: command tx timeout
[  866.302341][T11854] veth0_vlan: entered promiscuous mode
[  866.410877][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.491026][ T8742] Bluetooth: hci11: command tx timeout
[  866.491052][ T5616] Bluetooth: hci13: command tx timeout
[  866.529169][T11885] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.595498][T11937] lo speed is unknown, defaulting to 1000
[  866.860786][T11854] veth1_vlan: entered promiscuous mode
[  866.864222][T11916] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.865213][T11916] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.865483][T11916] bridge_slave_0: entered allmulticast mode
[  866.868730][T11916] bridge_slave_0: entered promiscuous mode
[  866.918667][T11916] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.918791][T11916] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.919102][T11916] bridge_slave_1: entered allmulticast mode
[  866.939188][T11916] bridge_slave_1: entered promiscuous mode
[  866.970426][ T5616] Bluetooth: hci14: command tx timeout
[  867.099407][T11885] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.214089][T11916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  867.240040][T11916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  867.460998][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.469259][T11885] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.531543][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.567607][T11916] team0: Port device team_slave_0 added
[  867.583507][T11916] team0: Port device team_slave_1 added
[  867.718945][T11916] batman_adv: batadv0: Adding interface: batadv_slave_0
[  867.718963][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  867.718987][T11916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  867.771286][ T5616] Bluetooth: hci12: command tx timeout
[  867.835392][T11916] batman_adv: batadv0: Adding interface: batadv_slave_1
[  867.835406][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  867.835421][T11916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  868.029889][T11885] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.094185][T11854] veth0_macvtap: entered promiscuous mode
[  868.169607][T11854] veth1_macvtap: entered promiscuous mode
[  868.189491][T11916] hsr_slave_0: entered promiscuous mode
[  868.191276][T11916] hsr_slave_1: entered promiscuous mode
[  868.192254][T11916] debugfs: 'hsr0' already exists in 'hsr'
[  868.192277][T11916] Cannot create hsr debugfs directory
[  868.373400][T11854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.401097][T11854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.493561][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.580425][ T5616] Bluetooth: hci13: command tx timeout
[  868.621921][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.680470][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.698550][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.723637][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  868.789718][T11937] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.789977][T11937] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.807562][T11937] bridge_slave_0: entered allmulticast mode
[  868.809110][T11937] bridge_slave_0: entered promiscuous mode
[  868.965105][T11937] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.965271][T11937] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.965538][T11937] bridge_slave_1: entered allmulticast mode
[  868.968184][T11937] bridge_slave_1: entered promiscuous mode
[  869.051452][ T5616] Bluetooth: hci14: command tx timeout
[  869.166179][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  869.177657][T11873] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  869.382199][T11873] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  869.387309][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  869.545939][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.567246][T11873] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  869.606017][T11873] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  869.697237][T11873] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  869.749582][T11873] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  869.868812][T11873] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  869.952744][T11873] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  870.098696][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  870.115037][T11937] team0: Port device team_slave_0 added
[  870.149520][T11937] team0: Port device team_slave_1 added
[  870.149907][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.239720][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  870.239731][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.239745][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  870.278400][ T5857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  870.278421][ T5857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  870.394044][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  870.394061][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.394084][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  870.577141][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.585672][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.633201][T11885] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  870.650241][ T5616] Bluetooth: hci13: command tx timeout
[  870.679678][T11885] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  870.916278][T11916] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.985211][T11885] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  871.000001][T11885] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  871.011444][ T5857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.011461][ T5857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.034417][T11937] hsr_slave_0: entered promiscuous mode
[  871.036029][T11937] hsr_slave_1: entered promiscuous mode
[  871.037042][T11937] debugfs: 'hsr0' already exists in 'hsr'
[  871.037065][T11937] Cannot create hsr debugfs directory
[  871.039103][T11885] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  871.131212][ T5616] Bluetooth: hci14: command tx timeout
[  871.175572][T11885] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  871.252546][T11885] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  871.304105][T11885] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  871.559848][T11916] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.610904][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  871.965961][T11916] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.267646][T11992] tipc: Started in network mode
[  872.267676][T11992] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568
[  872.289447][T11992] tipc: New replicast peer: 127.0.0.1
[  872.289793][T11992] tipc: Enabled bearer <udp:syz0>, priority 10
[  872.507710][T11916] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.655752][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.900811][T11873] 8021q: adding VLAN 0 to HW filter on device bond0
[  873.114709][T11873] 8021q: adding VLAN 0 to HW filter on device team0
[  873.183278][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  873.183422][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  873.211202][ T5616] Bluetooth: hci14: command tx timeout
[  873.418109][   T31] tipc: Node number set to 3210880763
[  873.428417][T11885] 8021q: adding VLAN 0 to HW filter on device bond0
[  873.446588][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  873.449186][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  873.610539][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.615271][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1207'.
[  873.694886][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.707915][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.709999][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.755068][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.779715][T11937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.868877][T11885] 8021q: adding VLAN 0 to HW filter on device team0
[  873.909155][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[  873.916098][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[  873.968994][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[  873.969137][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[  874.308457][T11937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.821428][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.926665][T11937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.425117][T11937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.469367][T11873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  875.645623][T11885] 8021q: adding VLAN 0 to HW filter on device batadv0
[  875.935141][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.345299][T11916] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  876.397324][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  876.397829][T11873] veth0_vlan: entered promiscuous mode
[  876.435154][T11916] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  876.474072][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  876.485826][T11916] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  876.537926][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  876.548029][T11885] veth0_vlan: entered promiscuous mode
[  876.555851][T11916] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  876.557626][T12037] rdma_rxe: rxe_newlink: failed to add lo
[  876.626672][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  876.650625][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.785891][T11873] veth1_vlan: entered promiscuous mode
[  876.945204][T11885] veth1_vlan: entered promiscuous mode
[  876.974346][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.118682][T11937] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  877.152130][T11937] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  877.167470][T11937] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  877.170498][ T9060] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  877.215357][T11937] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  877.218840][T11937] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  877.263147][T11937] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  877.286280][T11937] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  877.328428][T11937] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  877.364466][T11873] veth0_macvtap: entered promiscuous mode
[  877.386405][ T9060] usb 6-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00
[  877.386436][ T9060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.386453][ T9060] usb 6-1: Product: syz
[  877.386462][ T9060] usb 6-1: Manufacturer: syz
[  877.386470][ T9060] usb 6-1: SerialNumber: syz
[  877.452940][T11873] veth1_macvtap: entered promiscuous mode
[  877.502869][T11885] veth0_macvtap: entered promiscuous mode
[  877.574872][T11885] veth1_macvtap: entered promiscuous mode
[  877.765746][T11873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  877.952045][T11873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  878.000798][T11885] batman_adv: batadv0: Interface activated: batadv_slave_0
[  878.020732][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.061036][   T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  878.066451][   T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  878.068618][T11885] batman_adv: batadv0: Interface activated: batadv_slave_1
[  878.101181][   T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  878.106738][   T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  878.155877][   T56] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  878.260348][T11916] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.261975][   T56] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  878.298622][  T170] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  878.408438][  T170] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  878.676102][ T9060] ax88179_178a 6-1:1.0: probe with driver ax88179_178a failed with error -71
[  878.768137][ T9060] usb 6-1: USB disconnect, device number 2
[  879.071620][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.556580][T11916] 8021q: adding VLAN 0 to HW filter on device team0
[  879.702405][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.729505][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.985271][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.057578][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.104132][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.168160][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.553134][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  880.553157][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  880.588272][  T170] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.588370][  T170] bridge0: port 1(bridge_slave_0) entered forwarding state
[  881.249293][T11944] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.249500][T11944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  881.407737][T11937] 8021q: adding VLAN 0 to HW filter on device bond0
[  881.456154][T11944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  881.456175][T11944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  881.844339][T11937] 8021q: adding VLAN 0 to HW filter on device team0
[  881.846580][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  881.846610][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  881.998137][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  881.998157][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  882.006204][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.006379][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  882.069779][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.069879][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state
[  882.251927][  T823] net_ratelimit: 1 callbacks suppressed
[  882.251948][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.730409][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.890147][    C1] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated
[  883.293723][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.340499][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.489297][T11916] 8021q: adding VLAN 0 to HW filter on device batadv0
[  885.096504][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1223'.
[  885.103437][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1223'.
[  885.250332][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  885.371146][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.432803][    T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11
[  885.432827][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.432838][    T9] usb 6-1: Product: syz
[  885.432845][    T9] usb 6-1: Manufacturer: syz
[  885.432853][    T9] usb 6-1: SerialNumber: syz
[  885.572619][    T9] r8152-cfgselector 6-1: Unknown version 0x0000
[  885.949683][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.292664][T12149] netlink: 'syz.7.1227': attribute type 66 has an invalid length.
[  886.394857][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  886.472287][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.813546][T11916] veth0_vlan: entered promiscuous mode
[  886.834827][    T9] r8152-cfgselector 6-1: Unknown version 0x0000
[  886.848679][    T9] r8152-cfgselector 6-1: USB disconnect, device number 3
[  886.904445][T11916] veth1_vlan: entered promiscuous mode
[  886.975680][T11937] veth0_vlan: entered promiscuous mode
[  887.139669][T11937] veth1_vlan: entered promiscuous mode
[  887.209534][T11916] veth0_macvtap: entered promiscuous mode
[  887.238277][T11916] veth1_macvtap: entered promiscuous mode
[  887.317096][T11916] batman_adv: batadv0: Interface activated: batadv_slave_0
[  887.320811][T11937] veth0_macvtap: entered promiscuous mode
[  887.347215][T11916] batman_adv: batadv0: Interface activated: batadv_slave_1
[  887.347992][T11937] veth1_macvtap: entered promiscuous mode
[  887.414435][ T5856] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  887.417868][ T5856] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  887.423937][ T5856] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  887.455604][ T5856] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  887.555152][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.562779][T11937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  887.728805][T11937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  888.578688][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.905556][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.178816][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  889.200723][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  889.225422][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  889.230216][   T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  889.306351][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.509587][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.509606][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.626257][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.278030][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  890.278057][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  890.476624][ T5901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  890.476647][ T5901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  890.687083][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.227338][ T5857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.227356][ T5857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.736558][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.920270][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1252'.
[  891.932386][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.072496][T12220] mount: server 127.0.0.1 not responding, timed out
[  892.414961][T12237] rdma_rxe: rxe_newlink: failed to add veth0
[  892.442240][T12246] rdma_rxe: rxe_newlink: failed to add lo
[  892.731228][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.869007][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.878754][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1262'.
[  893.349627][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1266'.
[  893.350439][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1266'.
[  893.802998][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.165011][T12293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1276'.
[  894.585676][T12311] siw: device registration error -23
[  894.811550][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.971106][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.480450][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1290'.
[  895.480480][T12329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1290'.
[  895.482149][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1290'.
[  895.482168][T12329] tc_dump_action: action bad kind
[  895.700717][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.718457][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.861405][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.891744][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  897.218536][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1311'.
[  897.905235][ T5613] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  897.932182][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.167434][ T5613] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  898.579633][T12397] ceph: No mds server is up or the cluster is laggy
[  898.717528][T10345] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  898.743900][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.901939][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.971149][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.010571][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.763032][T12488] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  900.849296][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.877807][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1352'.
[  900.999070][T12495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1353'.
[  901.000377][T12495] atomic_op ffff88804ce25218 conn xmit_atomic 0000000000000000
[  901.021670][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1352'.
[  901.064005][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.452046][ T5826] rpcbind: server 127.0.0.1 not responding, timed out
[  901.605769][T12518] tipc: Started in network mode
[  901.605800][T12518] tipc: Node identity 7f000001, cluster identity 4711
[  901.606101][T12518] tipc: New replicast peer: 127.0.0.1
[  901.606907][T12518] tipc: Enabled bearer <udp:syz0>, priority 10
[  901.790246][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.943430][T12528] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  902.100675][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  902.596174][T12546] tipc: Started in network mode
[  902.596194][T12546] tipc: Node identity 7f000001, cluster identity 4711
[  902.596382][T12546] tipc: New replicast peer: 127.0.0.1
[  902.628728][T12546] tipc: Enabled bearer <udp:syz0>, priority 10
[  902.720255][   T31] tipc: Node number set to 2130706433
[  903.131145][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  903.601614][T12582] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  903.720357][   T31] tipc: Node number set to 2130706433
[  904.180541][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.787519][T12598] ceph: No mds server is up or the cluster is laggy
[  904.819753][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.076890][T12619] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1403'.
[  905.192769][T12619] tipc: Enabled bearer <eth:veth0>, priority 10
[  905.259426][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.919125][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1414'.
[  905.919156][T12653] openvswitch: netlink: Flow actions attr not present in new flow.
[  905.965008][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.062440][T12655] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  906.083994][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.087232][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.124314][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.340800][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.969918][T12686] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  907.530674][    T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  907.532100][    T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  907.809648][    T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  908.100218][ T5616] Bluetooth: hci5: command 0x0406 tx timeout
[  908.334889][T10345] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  908.347782][T12694] ceph: No mds server is up or the cluster is laggy
[  908.354163][ T5616] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  908.403098][ T5616] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  908.414109][ T9060] net_ratelimit: 1 callbacks suppressed
[  908.414126][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  908.436832][ T5616] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  908.505394][ T5616] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  908.506301][ T5616] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  909.161909][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.192900][  T155] rpcbind: server 127.0.0.1 not responding, timed out
[  909.450945][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.512601][T12727] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  909.817147][T12705] lo speed is unknown, defaulting to 1000
[  910.411576][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.501531][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.650551][ T5616] Bluetooth: hci15: command tx timeout
[  910.696360][T12765] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  910.700686][T12705] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.701145][T12705] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.701438][T12705] bridge_slave_0: entered allmulticast mode
[  910.706915][T12705] bridge_slave_0: entered promiscuous mode
[  910.748815][T12705] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.748935][T12705] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.749103][T12705] bridge_slave_1: entered allmulticast mode
[  910.751249][T12705] bridge_slave_1: entered promiscuous mode
[  910.801040][T12705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  910.807238][T12705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  910.857238][T12705] team0: Port device team_slave_0 added
[  910.860349][T12705] team0: Port device team_slave_1 added
[  910.941491][T12705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  910.941507][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.941552][T12705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  910.943998][T12705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  910.944013][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.944040][T12705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  911.068570][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  911.080757][T12705] hsr_slave_0: entered promiscuous mode
[  911.086322][T12705] hsr_slave_1: entered promiscuous mode
[  911.086975][T12705] debugfs: 'hsr0' already exists in 'hsr'
[  911.086990][T12705] Cannot create hsr debugfs directory
[  911.534666][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  912.170404][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  912.380333][    C1] tipc: RX(7f000001): key[1] is activated
[  912.482973][T12705] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.581223][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  912.649197][T12793] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  912.732136][ T5616] Bluetooth: hci15: command tx timeout
[  912.970900][    C1] tipc: RX(7f000001): key[1] is activated
[  913.012571][T12705] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.103271][T12800] tipc: Enabling <eth:lo> not permitted
[  913.103292][T12800] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  913.420899][T12705] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.614504][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.943864][T12705] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.127031][T12820] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  914.660768][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.810524][ T5616] Bluetooth: hci15: command tx timeout
[  915.043787][T12833] lo speed is unknown, defaulting to 1000
[  915.211343][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.464965][ T8742] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  915.485606][ T8742] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  915.539188][ T8742] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  915.550360][ T8742] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  915.567934][ T8742] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  915.705270][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.096246][T12705] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  916.157571][T12705] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  916.192380][T12705] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  916.229299][T12705] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  916.263048][T12705] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  916.313475][T12705] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  916.334446][T12705] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  916.383738][T12705] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  916.734583][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.806008][T12705] 8021q: adding VLAN 0 to HW filter on device bond0
[  916.894650][ T5616] Bluetooth: hci15: command tx timeout
[  916.912596][T12705] 8021q: adding VLAN 0 to HW filter on device team0
[  916.953648][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[  916.953847][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state
[  916.994799][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[  916.994929][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  917.099082][T12870] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  917.409690][T12839] lo speed is unknown, defaulting to 1000
[  917.771771][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.850995][ T5616] Bluetooth: hci16: command tx timeout
[  917.988203][T12705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  918.088502][T12705] veth0_vlan: entered promiscuous mode
[  918.152232][T12705] veth1_vlan: entered promiscuous mode
[  918.213967][T12705] veth0_macvtap: entered promiscuous mode
[  918.246082][T12705] veth1_macvtap: entered promiscuous mode
[  918.256428][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.281721][T12705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  918.287213][T12705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  918.367473][ T5901] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  918.425231][ T5901] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  918.426325][ T5901] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  918.451047][ T5901] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  918.816730][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.808597][ T5856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  919.808611][ T5856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  919.870962][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.917331][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  919.917353][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  919.932043][ T5616] Bluetooth: hci16: command tx timeout
[  920.387850][T12911] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  920.651745][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.834216][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1494'.
[  920.836868][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1494'.
[  920.838851][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1494'.
[  920.839029][T12839] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.881483][T12839] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.881841][T12839] bridge_slave_0: entered allmulticast mode
[  920.885846][T12839] bridge_slave_0: entered promiscuous mode
[  920.888509][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1494'.
[  920.889002][T12839] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.889193][T12839] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.889409][T12839] bridge_slave_1: entered allmulticast mode
[  920.892064][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.959472][T12839] bridge_slave_1: entered promiscuous mode
[  921.059561][ T8742] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  921.133678][ T8742] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  921.135362][ T8742] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  921.137023][ T8742] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  921.138007][ T8742] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  921.199672][  T999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.216325][  T999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.216813][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1494'.
[  921.220552][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1494'.
[  921.336518][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.343568][T12839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  921.625463][T12839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  921.801539][T12839] team0: Port device team_slave_0 added
[  921.809610][T12839] team0: Port device team_slave_1 added
[  921.952983][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.994330][T12839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  921.994348][T12839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  921.994374][T12839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  922.020209][ T5616] Bluetooth: hci16: command tx timeout
[  922.023353][T12839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  922.028812][T12839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  922.028847][T12839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  922.299179][T12955] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  922.722785][T12839] hsr_slave_0: entered promiscuous mode
[  922.724643][T12839] hsr_slave_1: entered promiscuous mode
[  922.725749][T12839] debugfs: 'hsr0' already exists in 'hsr'
[  922.725774][T12839] Cannot create hsr debugfs directory
[  922.970998][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  923.081853][T12924] lo speed is unknown, defaulting to 1000
[  923.293415][T12973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1508'.
[  923.530978][ T5616] Bluetooth: hci17: command tx timeout
[  924.013942][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.094818][ T5616] Bluetooth: hci16: command tx timeout
[  924.305129][T12839] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  924.350296][ T5826] rpcbind: server 127.0.0.1 not responding, timed out
[  924.410504][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.472674][T12991] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  924.948222][T13007] netlink: 'syz.5.1520': attribute type 48 has an invalid length.
[  925.053045][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.171907][T12839] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.529283][T12839] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.611569][ T5616] Bluetooth: hci17: command tx timeout
[  925.959951][T12839] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.013935][T12924] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.014044][T12924] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.014473][T12924] bridge_slave_0: entered allmulticast mode
[  926.017211][T12924] bridge_slave_0: entered promiscuous mode
[  926.048575][T12924] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.048704][T12924] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.049080][T12924] bridge_slave_1: entered allmulticast mode
[  926.053840][T12924] bridge_slave_1: entered promiscuous mode
[  926.091769][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.148160][T12924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  926.169992][T12924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  926.218081][T12924] team0: Port device team_slave_0 added
[  926.227398][T12924] team0: Port device team_slave_1 added
[  926.303097][T12924] batman_adv: batadv0: Adding interface: batadv_slave_0
[  926.303109][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.303124][T12924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  926.308097][T12924] batman_adv: batadv0: Adding interface: batadv_slave_1
[  926.308108][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.308124][T12924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  926.368476][T13029] tipc: Started in network mode
[  926.368506][T13029] tipc: Node identity 7f000001, cluster identity 4568
[  926.368861][T13029] tipc: New replicast peer: 127.0.0.1
[  926.369474][T13029] tipc: Enabled bearer <udp:syz0>, priority 10
[  926.989546][T12924] hsr_slave_0: entered promiscuous mode
[  927.019226][T12924] hsr_slave_1: entered promiscuous mode
[  927.020779][T12924] debugfs: 'hsr0' already exists in 'hsr'
[  927.020803][T12924] Cannot create hsr debugfs directory
[  927.140936][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.451140][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.531962][ T9619] tipc: Node number set to 2130706433
[  927.573652][T12839] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  927.663023][T12839] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  927.668292][T12839] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  927.690994][ T5616] Bluetooth: hci17: command tx timeout
[  927.827506][T12839] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  927.834633][T12839] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  927.873535][T12839] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  928.184230][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.359806][T12924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.444467][T12839] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  928.483105][T12839] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  928.485130][T13056] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  928.664878][T13066] rdma_rxe: rxe_newlink: failed to add syz_tun
[  928.767950][T12839] 8021q: adding VLAN 0 to HW filter on device bond0
[  929.087997][T12924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.159479][T12839] 8021q: adding VLAN 0 to HW filter on device team0
[  929.183660][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.183850][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  929.220413][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.274077][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.274151][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state
[  929.578484][T12924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.772558][ T5616] Bluetooth: hci17: command tx timeout
[  930.103326][T12924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.143293][T13081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1541'.
[  930.252716][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.277060][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.491148][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.567065][T13096] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  930.797413][T12839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  931.301524][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.551796][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  931.647389][T12924] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  931.695569][T12924] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  931.718334][T12924] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  931.753728][T12924] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  931.772597][T12924] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  931.815920][T12924] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  931.955664][T12924] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  931.989590][T12924] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  932.102666][T13130] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  932.129803][T12839] veth0_vlan: entered promiscuous mode
[  932.153840][T12839] veth1_vlan: entered promiscuous mode
[  932.276432][T12839] veth0_macvtap: entered promiscuous mode
[  932.292600][T12839] veth1_macvtap: entered promiscuous mode
[  932.361502][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.442543][T12924] 8021q: adding VLAN 0 to HW filter on device bond0
[  932.453421][T12839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  932.497093][T12839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  932.554882][ T5901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  932.559502][T12924] 8021q: adding VLAN 0 to HW filter on device team0
[  932.576507][ T5901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  932.607815][ T5901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  932.608710][ T5901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  932.645602][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[  932.645801][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state
[  932.784979][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  932.785076][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  933.378859][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.531137][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.625038][ T5616] Bluetooth: hci2: command 0x0406 tx timeout
[  933.706190][ T5856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  933.706211][ T5856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  934.100387][    C1] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated
[  934.410678][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.434393][ T5827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  934.434413][ T5827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  935.015342][T12924] 8021q: adding VLAN 0 to HW filter on device batadv0
[  935.065528][T12924] veth0_vlan: entered promiscuous mode
[  935.078531][T12924] veth1_vlan: entered promiscuous mode
[  935.122225][T12924] veth0_macvtap: entered promiscuous mode
[  935.126382][T12924] veth1_macvtap: entered promiscuous mode
[  935.167356][T12924] batman_adv: batadv0: Interface activated: batadv_slave_0
[  935.205149][T12924] batman_adv: batadv0: Interface activated: batadv_slave_1
[  935.228975][T11944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  935.229023][T11944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  935.229056][T11944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  935.230034][T11944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  935.468709][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.451732][T11944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  936.451751][T11944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  936.490686][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.594278][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.659590][    C0] tipc: RX(7f000001): key[1] is activated
[  936.924123][ T5856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  936.924142][ T5856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  937.534891][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.578194][T13212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1573'.
[  937.578597][T13212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'.
[  938.577291][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  938.658195][T13250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1588'.
[  938.658957][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'.
[  938.826319][T13190] Bluetooth: hci6: command 0x0406 tx timeout
[  938.826358][T13190] Bluetooth: hci7: command 0x0406 tx timeout
[  939.122703][ T8742] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  939.189788][ T8742] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  939.231205][ T8742] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  939.247710][ T8742] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  939.250531][ T8742] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  939.611147][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  939.636663][  T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  939.856628][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.030743][T13283] rdma_rxe: rxe_newlink: failed to add veth0
[  940.389744][T13260] lo speed is unknown, defaulting to 1000
[  940.652069][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.135603][   T38] INFO: task syz.5.984:11061 blocked for mo[  941.135603][   T38] INFO: task syz.5.984:11061 blocked for more than 143 seconds.
[  941.135633][   T38]       Tainted: G             L      syzkaller #0
[  941.135645][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  941.135654][   T38] task:syz.5.984       state:D stack:28424 pid:11061 tgid:11057 ppid:9552   task_flags:0x400040 flags:0x00080002
[  941.135712][   T38] Call Trace:
[  941.135720][   T38]  <TASK>
[  941.135733][   T38]  __schedule+0x16dc/0x5500
[  941.135769][   T38]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  941.135805][   T38]  ? arch_scale_cpu_capacity+0x18/0xb0
[  941.135842][   T38]  ? __pfx___schedule+0x10/0x10
[  941.135861][   T38]  ? rt_mutex_slowlock_block+0x33a/0x680
[  941.135908][   T38]  rt_mutex_schedule+0x76/0xf0
[  941.135931][   T38]  rt_mutex_slowlock_block+0x55c/0x680
[  941.135970][   T38]  ? rt_mutex_slowlock_block+0x33a/0x680
[  941.136004][   T38]  rt_mutex_slowlock+0x2d4/0x780
[  941.136038][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[  941.136069][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  941.136110][   T38]  ? write_threads+0x3a0/0x5a0
[  941.136145][   T38]  ? write_threads+0x3a0/0x5a0
[  941.136187][   T38]  ? write_threads+0x3a0/0x5a0
[  941.136214][   T38]  mutex_lock_nested+0x168/0x1d0
[  941.136250][   T38]  write_threads+0x3a0/0x5a0
[  941.136276][   T38]  ? __might_fault+0xaf/0x130
[  941.136300][   T38]  ? __pfx_write_threads+0x10/0x10
[  941.136348][   T38]  ? _copy_from_user+0x94/0xb0
[  941.136374][   T38]  ? simple_transaction_get+0x130/0x170
[  941.136400][   T38]  nfsctl_transaction_write+0x112/0x160
[  941.136429][   T38]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  941.136458][   T38]  vfs_write+0x29f/0xbb0
[  941.136493][   T38]  ? __pfx_vfs_write+0x10/0x10
[  941.136521][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  941.136543][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  941.136566][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  941.136591][   T38]  ? mutex_lock_nested+0x152/0x1d0
[  941.136619][   T38]  ? fdget_pos+0x252/0x320
[  941.136649][   T38]  ksys_write+0x156/0x270
[  941.136676][   T38]  ? __pfx_ksys_write+0x10/0x10
[  941.136711][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.136734][   T38]  do_syscall_64+0x174/0x580
[  941.136758][   T38]  ? trace_irq_disable+0x3b/0x140
[  941.136779][   T38]  ? clear_bhb_loop+0x40/0x90
[  941.136805][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.136826][   T38] RIP: 0033:0x7fbc557ede99
[  941.136844][   T38] RSP: 002b:00007fbc53a25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  941.136864][   T38] RAX: ffffffffffffffda RBX: 00007fbc55a76090 RCX: 00007fbc557ede99
[  941.136880][   T38] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003
[  941.136893][   T38] RBP: 00007fbc55883eaf R08: 0000000000000000 R09: 0000000000000000
[  941.136906][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  941.136919][   T38] R13: 00007fbc55a76128 R14: 00007fbc55a76090 R15: 00007ffe50d1bd08
[  941.136952][   T38]  </TASK>
[  941.136961][   T38] INFO: task syz.8.1012:11147 blocked for more than 143 seconds.
[  941.136979][   T38]       Tainted: G             L      syzkaller #0
[  941.136990][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  941.136999][   T38] task:syz.8.1012      state:D stack:28424 pid:11147 tgid:11145 ppid:9996   task_flags:0x400140 flags:0x00080002
[  941.137053][   T38] Call Trace:
[  941.137060][   T38]  <TASK>
[  941.137072][   T38]  __schedule+0x16dc/0x5500
[  941.137148][   T38]  ? __pfx___schedule+0x10/0x10
[  941.137191][   T38]  rt_mutex_schedule+0x76/0xf0
[  941.137215][   T38]  rt_mutex_slowlock_block+0x55c/0x680
[  941.137260][   T38]  rt_mutex_slowlock+0x2d4/0x780
[  941.137293][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[  941.137325][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  941.137366][   T38]  ? write_ports+0xb5/0xd20
[  941.137399][   T38]  ? write_ports+0xb5/0xd20
[  941.137434][   T38]  ? write_ports+0xb5/0xd20
[  941.137461][   T38]  mutex_lock_nested+0x168/0x1d0
[  941.137497][   T38]  write_ports+0xb5/0xd20
[  941.137528][   T38]  ? __pfx_write_ports+0x10/0x10
[  941.137557][   T38]  ? __might_fault+0xaf/0x130
[  941.137596][   T38]  ? _copy_from_user+0x94/0xb0
[  941.137621][   T38]  ? simple_transaction_get+0x130/0x170
[  941.137647][   T38]  nfsctl_transaction_write+0x112/0x160
[  941.137673][   T38]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  941.137702][   T38]  vfs_write+0x29f/0xbb0
[  941.137736][   T38]  ? __pfx_vfs_write+0x10/0x10
[  941.137762][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  941.137786][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  941.137810][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  941.137831][   T38]  ? mutex_lock_nested+0x152/0x1d0
[  941.137857][   T38]  ? fdget_pos+0x252/0x320
[  941.137888][   T38]  ksys_write+0x156/0x270
[  941.137916][   T38]  ? __pfx_ksys_write+0x10/0x10
[  941.137948][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.137970][   T38]  do_syscall_64+0x174/0x580
[  941.137994][   T38]  ? clear_bhb_loop+0x40/0x90
[  941.138017][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.138037][   T38] RIP: 0033:0x7fef6066de99
[  941.138052][   T38] RSP: 002b:00007fef5e8c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  941.138066][   T38] RAX: ffffffffffffffda RBX: 00007fef608f5fa0 RCX: 00007fef6066de99
[  941.138077][   T38] RDX: 0000000000000009 RSI: 0000200000000300 RDI: 0000000000000003
[  941.138090][   T38] RBP: 00007fef60703eaf R08: 0000000000000000 R09: 0000000000000000
[  941.138103][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  941.138113][   T38] R13: 00007fef608f6038 R14: 00007fef608f5fa0 R15: 00007ffe13ee2808
[  941.138136][   T38]  </TASK>
[  941.138143][   T38] INFO: task syz.8.1012:11149 blocked for more than 143 seconds.
[  941.138163][   T38]       Tainted: G             L      syzkaller #0
[  941.138171][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  941.138178][   T38] task:syz.8.1012      state:D stack:28424 pid:11149 tgid:11145 ppid:9996   task_flags:0x400040 flags:0x00080002
[  941.138220][   T38] Call Trace:
[  941.138225][   T38]  <TASK>
[  941.138234][   T38]  __schedule+0x16dc/0x5500
[  941.138270][   T38]  ? __pfx___schedule+0x10/0x10
[  941.138297][   T38]  rt_mutex_schedule+0x76/0xf0
[  941.138313][   T38]  rt_mutex_slowlock_block+0x55c/0x680
[  941.138346][   T38]  rt_mutex_slowlock+0x2d4/0x780
[  941.138368][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[  941.138389][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  941.138418][   T38]  ? write_threads+0x3a0/0x5a0
[  941.138441][   T38]  ? write_threads+0x3a0/0x5a0
[  941.138465][   T38]  ? write_threads+0x3a0/0x5a0
[  941.138483][   T38]  mutex_lock_nested+0x168/0x1d0
[  941.138507][   T38]  write_threads+0x3a0/0x5a0
[  941.138526][   T38]  ? __might_fault+0xaf/0x130
[  941.138543][   T38]  ? __pfx_write_threads+0x10/0x10
[  941.138595][   T38]  ? _copy_from_user+0x94/0xb0
[  941.138614][   T38]  ? simple_transaction_get+0x130/0x170
[  941.138632][   T38]  nfsctl_transaction_write+0x112/0x160
[  941.138655][   T38]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  941.138675][   T38]  vfs_write+0x29f/0xbb0
[  941.138700][   T38]  ? __pfx_vfs_write+0x10/0x10
[  941.138720][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  941.138738][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  941.138755][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  941.138772][   T38]  ? mutex_lock_nested+0x152/0x1d0
[  941.138791][   T38]  ? fdget_pos+0x252/0x320
[  941.138814][   T38]  ksys_write+0x156/0x270
[  941.138833][   T38]  ? __pfx_ksys_write+0x10/0x10
[  941.138858][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.138874][   T38]  do_syscall_64+0x174/0x580
[  941.138891][   T38]  ? trace_irq_disable+0x3b/0x140
[  941.138906][   T38]  ? clear_bhb_loop+0x40/0x90
[  941.138924][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.138939][   T38] RIP: 0033:0x7fef6066de99
[  941.138951][   T38] RSP: 002b:00007fef5e8a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  941.138966][   T38] RAX: ffffffffffffffda RBX: 00007fef608f6090 RCX: 00007fef6066de99
[  941.138977][   T38] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000004
[  941.138987][   T38] RBP: 00007fef60703eaf R08: 0000000000000000 R09: 0000000000000000
[  941.138996][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  941.139005][   T38] R13: 00007fef608f6128 R14: 00007fef608f6090 R15: 00007ffe13ee2808
[  941.139029][   T38]  </TASK>
[  941.139035][   T38] INFO: task syz.7.1013:11152 blocked for more than 143 seconds.
[  941.139047][   T38]       Tainted: G             L      syzkaller #0
[  941.139055][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  941.139062][   T38] task:syz.7.1013      state:D stack:28424 pid:11152 tgid:11151 ppid:10012  task_flags:0x400140 flags:0x00080002
[  941.139103][   T38] Call Trace:
[  941.139108][   T38]  <TASK>
[  941.139117][   T38]  __schedule+0x16dc/0x5500
[  941.139159][   T38]  ? __pfx___schedule+0x10/0x10
[  941.139187][   T38]  rt_mutex_schedule+0x76/0xf0
[  941.139204][   T38]  rt_mutex_slowlock_block+0x55c/0x680
[  941.139236][   T38]  rt_mutex_slowlock+0x2d4/0x780
[  941.139260][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[  941.139282][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  941.139312][   T38]  ? write_versions+0x95/0xe30
[  941.139336][   T38]  ? write_versions+0x95/0xe30
[  941.139362][   T38]  ? write_versions+0x95/0xe30
[  941.139380][   T38]  mutex_lock_nested+0x168/0x1d0
[  941.139405][   T38]  write_versions+0x95/0xe30
[  941.139429][   T38]  ? __pfx_write_versions+0x10/0x10
[  941.139456][   T38]  ? _copy_from_user+0x94/0xb0
[  941.139474][   T38]  ? simple_transaction_get+0x130/0x170
[  941.139492][   T38]  nfsctl_transaction_write+0x112/0x160
[  941.139513][   T38]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  941.139534][   T38]  vfs_write+0x29f/0xbb0
[  941.139558][   T38]  ? __pfx_vfs_write+0x10/0x10
[  941.139578][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  941.139596][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  941.139613][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  941.139630][   T38]  ? mutex_lock_nested+0x152/0x1d0
[  941.139650][   T38]  ? fdget_pos+0x252/0x320
[  941.139673][   T38]  ksys_write+0x156/0x270
[  941.139693][   T38]  ? __pfx_ksys_write+0x10/0x10
[  941.139795][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.139812][   T38]  do_syscall_64+0x174/0x580
[  941.139829][   T38]  ? trace_irq_disable+0x3b/0x140
[  941.139844][   T38]  ? clear_bhb_loop+0x40/0x90
[  941.139862][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.139876][   T38] RIP: 0033:0x7fc2ef30de99
[  941.139890][   T38] RSP: 002b:00007fc2ed566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  941.139905][   T38] RAX: ffffffffffffffda RBX: 00007fc2ef595fa0 RCX: 00007fc2ef30de99
[  941.139916][   T38] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000003
[  941.139926][   T38] RBP: 00007fc2ef3a3eaf R08: 0000000000000000 R09: 0000000000000000
[  941.139935][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  941.139943][   T38] R13: 00007fc2ef596038 R14: 00007fc2ef595fa0 R15: 00007ffe56e3b2b8
[  941.139966][   T38]  </TASK>
[  941.140186][   T38] 
[  941.140186][   T38] Showing all locks held in the system:
[  941.140201][   T38] 1 lock held by khungtaskd/38:
[  941.140210][   T38]  #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  941.140259][   T38] 3 locks held by kworker/u8:9/997:
[  941.140287][   T38] 2 locks held by getty/5352:
[  941.140295][   T38]  #0: ffff888035b1e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  941.140330][   T38]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[  941.140372][   T38] 7 locks held by kworker/u8:18/5901:
[  941.140381][   T38] 6 locks held by kworker/u8:19/6165:
[  941.140398][   T38] 3 locks held by syz.5.984/11058:
[  941.140406][   T38]  #0: ffff88805bdcdd28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.140441][   T38]  #1: ffff888036f2c500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.140478][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.140517][   T38] 3 locks held by syz.5.984/11061:
[  941.140525][   T38]  #0: ffff88805d166728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.140557][   T38]  #1: ffff888036f2c500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.140594][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.140633][   T38] 3 locks held by syz.8.1012/11147:
[  941.140642][   T38]  #0: ffff88803301f328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.140676][   T38]  #1: ffff888036f24500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.140714][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.140751][   T38] 3 locks held by syz.8.1012/11149:
[  941.140759][   T38]  #0: ffff8880367e9b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.140817][   T38]  #1: ffff888036f24500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.140863][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.140910][   T38] 3 locks held by syz.7.1013/11152:
[  941.140922][   T38]  #0: ffff88803573e528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.140962][   T38]  #1: ffff88803cf90500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.141011][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  941.141049][   T38] 3 locks held by syz.9.1039/11236:
[  941.141057][   T38]  #0: ffff88803f73d928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.141088][   T38]  #1: ffff888069698500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.141126][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  941.141171][   T38] 3 locks held by syz.9.1039/11237:
[  941.141180][   T38]  #0: ffff88803f73c728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.141212][   T38]  #1: ffff888069698500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.141250][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.141287][   T38] 3 locks held by syz.9.1039/11238:
[  941.141296][   T38]  #0: ffff888029562528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.141329][   T38]  #1: ffff888069698500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.141368][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.141406][   T38] 3 locks held by syz.9.1039/11241:
[  941.141415][   T38]  #0: ffff88803f73d328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.141450][   T38]  #1: ffff888069698500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.141491][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.141533][   T38] 3 locks held by syz.1.1048/11284:
[  941.141542][   T38]  #0: ffff88805420a128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.141576][   T38]  #1: ffff888068b42500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.141618][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.141661][   T38] 3 locks held by syz.1.1048/11285:
[  941.141670][   T38]  #0: ffff88805420a728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.141706][   T38]  #1: ffff888068b42500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.141742][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.141785][   T38] 3 locks held by syz.3.1151/11708:
[  941.141793][   T38]  #0: ffff888033d16d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.141826][   T38]  #1: ffff88803ec48500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.141863][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.141902][   T38] 3 locks held by syz.4.1165/11756:
[  941.141910][   T38]  #0: ffff888034a38b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.141944][   T38]  #1: ffff888084d82500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.141984][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  941.142024][   T38] 3 locks held by syz.4.1165/11759:
[  941.142032][   T38]  #0: ffff88802b136f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.142069][   T38]  #1: ffff888084d82500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.142117][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.142169][   T38] 3 locks held by syz.4.1165/11763:
[  941.142177][   T38]  #0: ffff88802b137728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.142209][   T38]  #1: ffff888084d82500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.142245][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.142282][   T38] 3 locks held by syz.0.1172/11787:
[  941.142290][   T38]  #0: ffff888034a36d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.142322][   T38]  #1: ffff88803b070500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.142360][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  941.142398][   T38] 3 locks held by syz.0.1172/11788:
[  941.142407][   T38]  #0: ffff8880370ea328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.142441][   T38]  #1: ffff88803b070500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.142480][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.142521][   T38] 3 locks held by syz.0.1172/11789:
[  941.142530][   T38]  #0: ffff88803d6d3328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.142567][   T38]  #1: ffff88803b070500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.142608][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.142645][   T38] 3 locks held by syz.2.1181/11815:
[  941.142654][   T38]  #0: ffff8880288e3928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.142687][   T38]  #1: ffff88806a22a500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.142725][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.142762][   T38] 3 locks held by syz.6.1195/11846:
[  941.142771][   T38]  #0: ffff888035740d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.142804][   T38]  #1: ffff8880368f4500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.142841][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  941.142879][   T38] 3 locks held by syz.6.1195/11847:
[  941.142887][   T38]  #0: ffff888035740b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.142920][   T38]  #1: ffff8880368f4500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.142959][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.142997][   T38] 3 locks held by syz.6.1195/11848:
[  941.143006][   T38]  #0: ffff88803546b928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.143041][   T38]  #1: ffff8880368f4500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.143082][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.143125][   T38] 3 locks held by syz.6.1195/11849:
[  941.143134][   T38]  #0: ffff888035741528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.143176][   T38]  #1: ffff8880368f4500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.143215][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.143254][   T38] 3 locks held by syz.6.1195/11850:
[  941.143262][   T38]  #0: ffff88803546b328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.143294][   T38]  #1: ffff8880368f4500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.143337][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.143387][   T38] 6 locks held by kworker/u8:2/11944:
[  941.143401][   T38] 3 locks held by syz.8.1263/12262:
[  941.143411][   T38]  #0: ffff88803754b928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.143452][   T38]  #1: ffff888028328500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.143495][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  941.143545][   T38] 3 locks held by syz.8.1263/12263:
[  941.143556][   T38]  #0: ffff8880288e3528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.143601][   T38]  #1: ffff888028328500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.143650][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.143702][   T38] 3 locks held by syz.8.1263/12264:
[  941.143713][   T38]  #0: ffff888034a24928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.143759][   T38]  #1: ffff888028328500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.143812][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.143865][   T38] 3 locks held by syz.7.1343/12467:
[  941.143877][   T38]  #0: ffff888082d63d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.143923][   T38]  #1: ffff888022712500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.143975][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.144027][   T38] 3 locks held by syz.9.1409/12640:
[  941.144037][   T38]  #0: ffff88803bd3af28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.144083][   T38]  #1: ffff888062b66500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.144135][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.144196][   T38] 3 locks held by syz.9.1409/12645:
[  941.144207][   T38]  #0: ffff8880591b7128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.144251][   T38]  #1: ffff888062b66500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.144303][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.144358][   T38] 3 locks held by syz.1.1512/12984:
[  941.144369][   T38]  #0: ffff8880591b6b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.144414][   T38]  #1: ffff888020b0c500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.144466][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.144521][   T38] 3 locks held by syz.5.1557/13143:
[  941.144532][   T38]  #0: ffff88803634e328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.144577][   T38]  #1: ffff88805f738500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.144629][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  941.144679][   T38] 3 locks held by syz.5.1557/13146:
[  941.144691][   T38]  #0: ffff888033191b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.144736][   T38]  #1: ffff88805f738500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.144793][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.144845][   T38] 3 locks held by syz.5.1557/13150:
[  941.144856][   T38]  #0: ffff888033f0c128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.144901][   T38]  #1: ffff88805f738500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.144953][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.145006][   T38] 3 locks held by syz-executor/13260:
[  941.145017][   T38] 3 locks held by syz.0.1596/13278:
[  941.145027][   T38]  #0: ffff88802554e328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.145070][   T38]  #1: ffff88803ac3e500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.145123][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  941.145181][   T38] 3 locks held by syz.0.1596/13280:
[  941.145192][   T38]  #0: ffff888082d63528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.145238][   T38]  #1: ffff88803ac3e500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.145290][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.145342][   T38] 3 locks held by syz.0.1596/13285:
[  941.145354][   T38]  #0: ffff88803277e928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.145398][   T38]  #1: ffff88803ac3e500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.145450][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.145502][   T38] 3 locks held by syz.3.1598/13290:
[  941.145513][   T38]  #0: ffff88802b136328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.145558][   T38]  #1: ffff88803775e500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.145609][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  941.145661][   T38] 3 locks held by syz.3.1598/13292:
[  941.145672][   T38]  #0: ffff88802b136728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.145717][   T38]  #1: ffff88803775e500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.145769][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  941.145821][   T38] 3 locks held by syz.3.1598/13293:
[  941.145831][   T38]  #0: ffff88802fdc8728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.145876][   T38]  #1: ffff88803775e500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.145927][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.145979][   T38] 3 locks held by syz.3.1598/13294:
[  941.145991][   T38]  #0: ffff88802b136b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  941.146036][   T38]  #1: ffff88803775e500 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  941.146087][   T38]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  941.146139][   T38] 3 locks held by syz.4.1600/13299:
[  941.146158][   T38] 
[  941.146164][   T38] =============================================
[  941.146164][   T38] 
[  941.146174][   T38] NMI backtrace for cpu 1
[  941.146191][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  941.146218][   T38] Tainted: [L]=SOFTLOCKUP
[  941.146225][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  941.146236][   T38] Call Trace:
[  941.146245][   T38]  <TASK>
[  941.146254][   T38]  dump_stack_lvl+0xe8/0x150
[  941.146285][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[  941.146306][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  941.146338][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  941.146373][   T38]  sys_info+0x135/0x170
[  941.146400][   T38]  watchdog+0xfd7/0x1030
[  941.146426][   T38]  ? watchdog+0x1c7/0x1030
[  941.146450][   T38]  kthread+0x388/0x470
[  941.146480][   T38]  ? __pfx_watchdog+0x10/0x10
[  941.146497][   T38]  ? __pfx_kthread+0x10/0x10
[  941.146526][   T38]  ret_from_fork+0x514/0xb70
[  941.146558][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  941.146588][   T38]  ? __switch_to+0xc89/0x1420
[  941.146617][   T38]  ? __pfx_kthread+0x10/0x10
[  941.146647][   T38]  ret_from_fork_asm+0x1a/0x30
[  941.146680][   T38]  </TASK>
[  941.146701][   T38] Sending NMI from CPU 1 to CPUs 0:
[  941.146731][    C0] NMI backtrace for cpu 0
[  941.146747][    C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  941.146771][    C0] Tainted: [L]=SOFTLOCKUP
[  941.146778][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  941.146788][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  941.146818][    C0] Code: e8 ae bd 6f fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 2f d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  941.146833][    C0] RSP: 0000:ffffc90000167a28 EFLAGS: 00000202
[  941.146849][    C0] RAX: 1ffffffff33c9500 RBX: 00000000000003fd RCX: 0000000000000000
[  941.146861][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[  941.146872][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  941.146884][    C0] R10: dffffc0000000000 R11: ffffffff85560cf0 R12: dffffc0000000000
[  941.146898][    C0] R13: 0000000000000000 R14: ffffffff99e4ad40 R15: 0000000000000000
[  941.146910][    C0] FS:  0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000
[  941.146925][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  941.146938][    C0] CR2: 0000001b2f623ffc CR3: 00000000202d0000 CR4: 00000000003526f0
[  941.146954][    C0] Call Trace:
[  941.146960][    C0]  <TASK>
[  941.146969][    C0]  wait_for_lsr+0x190/0x300
[  941.146996][    C0]  serial8250_console_write+0x113a/0x1b40
[  941.147027][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  941.147051][    C0]  ? console_flush_one_record+0xfa/0xb50
[  941.147072][    C0]  ? console_flush_one_record+0x472/0xb50
[  941.147093][    C0]  console_flush_one_record+0x642/0xb50
[  941.147113][    C0]  ? console_flush_one_record+0xfa/0xb50
[  941.147132][    C0]  ? __pfx_console_flush_one_record+0x10/0x10
[  941.147151][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  941.147176][    C0]  legacy_kthread_func+0x1b6/0x250
[  941.147195][    C0]  ? __pfx_legacy_kthread_func+0x10/0x10
[  941.147212][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  941.147240][    C0]  ? __kthread_parkme+0x71/0x1f0
[  941.147264][    C0]  ? __kthread_parkme+0x196/0x1f0
[  941.147289][    C0]  kthread+0x388/0x470
[  941.147316][    C0]  ? __pfx_legacy_kthread_func+0x10/0x10
[  941.147332][    C0]  ? __pfx_kthread+0x10/0x10
[  941.147358][    C0]  ret_from_fork+0x514/0xb70
[  941.147386][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  941.147412][    C0]  ? __switch_to+0xc89/0x1420
[  941.147436][    C0]  ? __pfx_kthread+0x10/0x10
[  941.147462][    C0]  ret_from_fork_asm+0x1a/0x30
[  941.147488][    C0]  </TASK>
[  941.147732][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  941.147749][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  941.147773][   T38] Tainted: [L]=SOFTLOCKUP
[  941.147781][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  941.147792][   T38] Call Trace:
[  941.147800][   T38]  <TASK>
[  941.147808][   T38]  vpanic+0x56c/0xa60
[  941.147832][   T38]  ? __pfx_vpanic+0x10/0x10
[  941.147860][   T38]  panic+0xc5/0xd0
[  941.147878][   T38]  ? __pfx_panic+0x10/0x10
[  941.147900][   T38]  ? wq_watchdog_touch+0xf9/0x160
[  941.147925][   T38]  ? nmi_trigger_cpumask_backtrace+0x247/0x380
[  941.147961][   T38]  watchdog+0x1030/0x1030
[  941.147985][   T38]  ? watchdog+0x1c7/0x1030
[  941.148010][   T38]  kthread+0x388/0x470
[  941.148039][   T38]  ? __pfx_watchdog+0x10/0x10
[  941.148056][   T38]  ? __pfx_kthread+0x10/0x10
[  941.148085][   T38]  ret_from_fork+0x514/0xb70
[  941.148117][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  941.148146][   T38]  ? __switch_to+0xc89/0x1420
[  941.148180][   T38]  ? __pfx_kthread+0x10/0x10
[  941.148209][   T38]  ret_from_fork_asm+0x1a/0x30
[  941.148243][   T38]  </TASK>
[  941.148518][   T38] Kernel Offset: disabled