last executing test programs: 3m40.351479482s ago: executing program 32 (id=854): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0xa, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x20e6, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20e6, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000500)=""/100, 0x64, 0x0, 0x0, 0x0) 2m13.133942399s ago: executing program 33 (id=1181): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000600), 0x1000) 2m12.840507952s ago: executing program 34 (id=1185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='8\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000200)="000000020000000000000002000186a30000000400"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000200)="000000030000000000000002000186a3000000030000000100"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m42.205033555s ago: executing program 35 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x200}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r3, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 1m41.590892312s ago: executing program 1 (id=1272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0) 1m41.450468646s ago: executing program 1 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syz_tun\x00', 0x1}) 1m37.392335283s ago: executing program 1 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ffff0040950b901700010102030109022700010100a0320904000003ffff0000070581020002000705020200020007058303100008"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x34}}, 0x0) 1m36.349184124s ago: executing program 36 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/ports\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n\x00', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x8008, @loopback}, 0x10) sendto(r2, &(0x7f0000000200)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m36.290408587s ago: executing program 1 (id=1275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x64}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) 1m35.688277158s ago: executing program 1 (id=1278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 1m35.188556126s ago: executing program 1 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) r2 = fsopen(&(0x7f0000000200)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='addr\x00', &(0x7f0000000300)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='clientaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) move_mount(r3, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file0\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000500)='abcdef\x00', 0x6) setxattr(&(0x7f0000000400)='./mnt/file0\x00', &(0x7f0000000600)=@known='user.syz\x00', &(0x7f0000000700)='000102030405060708090a0b0c0d0e0f\x00', 0x20, 0x0) 1m29.869985974s ago: executing program 7 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x64}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) 1m29.466218557s ago: executing program 7 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 1m29.089917514s ago: executing program 7 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(&(0x7f0000000060)=@filename='none\x00', &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) 1m28.96174654s ago: executing program 7 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(&(0x7f0000000060)=@filename='none\x00', &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) 1m28.669227219s ago: executing program 7 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x11d8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567890abcdef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfedcba0987654321}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/56, 0x34}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x50}, 0x0) read$alg(r3, &(0x7f0000000600), 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000e00)={0x0, 0x186a0}, 0x10) bind$tipc(r5, &(0x7f0000000a00)=@nameseq={0x1e, 0x1, 0x1, {0x3e8, 0x3e8, 0x3e8}}, 0x10) sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10) recvfrom(r5, &(0x7f0000000d00), 0x100, 0x0, 0x0, 0x0) 1m28.373321805s ago: executing program 7 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 1m27.09506379s ago: executing program 37 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1m19.411334183s ago: executing program 38 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) r2 = fsopen(&(0x7f0000000200)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='addr\x00', &(0x7f0000000300)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='clientaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) move_mount(r3, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file0\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000500)='abcdef\x00', 0x6) setxattr(&(0x7f0000000400)='./mnt/file0\x00', &(0x7f0000000600)=@known='user.syz\x00', &(0x7f0000000700)='000102030405060708090a0b0c0d0e0f\x00', 0x20, 0x0) 1m12.696010635s ago: executing program 39 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 1m7.36076531s ago: executing program 3 (id=1331): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040001000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008000100020000000800040001000000", 0x58) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000100)={0x11, 0x300, 0x1}, 0x14) write(r1, &(0x7f0000000200)="00000000000000000000000086dd6000000000342b4020010db800000000000000000000000220010db8000000000000000000000001110404010100000020010db800000000000000000000000320010db800000000000000000000000430393039000c0000deadbeef", 0x6a) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1m6.466842533s ago: executing program 3 (id=1335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) 1m6.240545147s ago: executing program 3 (id=1337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wg1\x00', 0x1001}) 1m5.631784938s ago: executing program 3 (id=1342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1002}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\n\x00'/26], 0x1a) 1m5.132316196s ago: executing program 3 (id=1345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) 1m4.655542632s ago: executing program 3 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) 1m2.561936214s ago: executing program 9 (id=1359): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x64}, 0x8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(0xffffffffffffffff, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000700), 0x4) 1m2.293520085s ago: executing program 9 (id=1360): r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000240)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='proto\x00', &(0x7f0000000340)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='mountproto\x00', &(0x7f00000003c0)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000400)=""/100, 0x64, 0x0, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) 1m1.266560471s ago: executing program 9 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(0xffffffffffffffff, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 1m1.032198142s ago: executing program 9 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x99aabbccddeeff00}]}]}, 0x30}}, 0x0) close(r0) unshare(0x40000000) 56.461230902s ago: executing program 9 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000002}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 55.941557977s ago: executing program 9 (id=1371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x108, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9) 54.095253639s ago: executing program 0 (id=1384): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 53.76120105s ago: executing program 0 (id=1387): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="240000001400050000000000000000002d000000020000000500020008000000", 0x24}], 0x1}, 0x0) r2 = socket(0x2d, 0x2, 0x0) setsockopt(r2, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4) ioctl(r2, 0x89e2, &(0x7f0000000600)='\x00\x00\b\x00') sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "0000000000000800000019000200"}, 0x34, &(0x7f0000000900)=[{&(0x7f0000000a00)="01020304", 0x4}], 0x1}, 0x0) 53.409476372s ago: executing program 0 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) 53.028436214s ago: executing program 0 (id=1392): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(&(0x7f0000000060)=@filename='none\x00', &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) 52.857362124s ago: executing program 0 (id=1395): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 52.467294265s ago: executing program 0 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='100\x00', 0x3) 49.450647339s ago: executing program 40 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) 40.924657109s ago: executing program 41 (id=1371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x108, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9) 40.144573818s ago: executing program 8 (id=1434): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) 39.656780165s ago: executing program 8 (id=1436): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000100)={0xa, 0x1f40, 0x0, @mcast2}, 0x1c) 39.393577904s ago: executing program 8 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000060)=@filename='none\x00', &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) 39.333161856s ago: executing program 8 (id=1439): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000060)=@filename='none\x00', &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) 39.223140614s ago: executing program 8 (id=1440): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 38.892800984s ago: executing program 8 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./nfs_mnt\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 37.02977496s ago: executing program 42 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='100\x00', 0x3) 23.817282181s ago: executing program 43 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./nfs_mnt\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 18.061527891s ago: executing program 2 (id=1489): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='prefer-crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 16.886221862s ago: executing program 2 (id=1498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r3, 0x5) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c000030390001a000000a000a000000018002000c010203040506070880040008000100008008000680020000"], 0x6a) 15.376959198s ago: executing program 2 (id=1506): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='\\x01\\x00\\x00\\x00 2000000000 0 0 0 krb5 \\x01\\x00\\x00\\x00\\xff\\xff\\xff\\x7f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x11\\x00\\x00\\x00\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\n', 0x7d) 15.197261547s ago: executing program 2 (id=1508): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 15.050151461s ago: executing program 2 (id=1509): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 14.622617178s ago: executing program 2 (id=1510): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'lo\x00', @ifru_flags}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'lo\x00', @ifru_flags=0x1}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 10.249297402s ago: executing program 5 (id=1528): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200), 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 9.511507884s ago: executing program 5 (id=1529): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000700), 0x4) 9.019411441s ago: executing program 5 (id=1530): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) 8.877562983s ago: executing program 5 (id=1531): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) 8.859173617s ago: executing program 5 (id=1532): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 8.417627114s ago: executing program 5 (id=1534): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain\n', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='udp 2049\n', 0x9) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='1\n', 0x2) close(r6) r7 = socket$inet(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r7, &(0x7f00000004c0)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000200), 0x3e8) write(r2, &(0x7f0000000500)='4294967295 2000000000 0\n', 0x18) write(r7, &(0x7f0000000540)="000000020000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r3, &(0x7f0000000300), 0x3e8) read(r4, &(0x7f0000000400), 0x3e8) read(r2, &(0x7f0000000500), 0x3e8) 2.617451595s ago: executing program 6 (id=1545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000001c001000811223344"], 0x40) 2.328053779s ago: executing program 4 (id=1546): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13) read(r2, &(0x7f000000031c), 0x13) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) 1.697723318s ago: executing program 6 (id=1547): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200), 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 1.338863241s ago: executing program 4 (id=1548): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) 1.261365266s ago: executing program 6 (id=1549): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000700), 0x4) 1.136830395s ago: executing program 4 (id=1550): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.001512777s ago: executing program 4 (id=1551): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@rand_addr=0x64010100, 0x1234, 0x32}, @in=@rand_addr=0x64010100, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@migrate={0xa0, 0x11, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}}, [@migrate={0x50, 0x11, [{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010101, @in=@rand_addr=0x64010101, 0x32, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) 681.390805ms ago: executing program 4 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e}]}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000340001001000040000000000000000000000000006000600080000001000080000000000000000001100400008000a00000000001400020010000c000900090073797a3000000000"], 0x50}}, 0x0) 651.320634ms ago: executing program 6 (id=1553): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) write(0xffffffffffffffff, &(0x7f0000000500)="01000000", 0x4) read(0xffffffffffffffff, &(0x7f0000000000), 0x4) write(0xffffffffffffffff, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 533.562659ms ago: executing program 4 (id=1554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6003000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f2021222324252627"], 0x64) 331.926954ms ago: executing program 6 (id=1555): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt/sys/net/sctp/addip_noauth\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1\x00', 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r0, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) 0s ago: executing program 6 (id=1556): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ T5601] RBP: 00007ffcf05fc7ac R08: 0000000000000000 R09: 0000000000000000 [ 212.801634][ T5601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf05fc7c0 [ 212.801645][ T5601] R13: 00007f1f16b3330a R14: 0000000000033cc8 R15: 00007ffcf05fc800 [ 212.801672][ T5601] [ 212.801684][ T1231] CPU: 0 UID: 0 PID: 1231 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.801709][ T1231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.801724][ T1231] Workqueue: events_unbound nsim_dev_trap_report_work [ 212.801759][ T1231] Call Trace: [ 212.801767][ T1231] [ 212.801776][ T1231] dump_stack_lvl+0xe8/0x150 [ 212.801804][ T1231] should_fail_ex+0x467/0x600 [ 212.801838][ T1231] should_failslab+0xa8/0x100 [ 212.801859][ T1231] kmem_cache_alloc_node_noprof+0xac/0x660 [ 212.801894][ T5587] FAULT_INJECTION: forcing a failure. [ 212.801894][ T5587] name failslab, interval 1, probability 100, space 0, times 4 [ 212.801890][ T1231] ? __alloc_skb+0x1d7/0x7a0 [ 212.801922][ T1231] ? __alloc_skb+0x1d7/0x7a0 [ 212.801952][ T1231] __alloc_skb+0x1d7/0x7a0 [ 212.801982][ T1231] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 212.802024][ T1231] ? process_one_work+0x7fd/0x1480 [ 212.802044][ T1231] process_one_work+0xaaf/0x1480 [ 212.802072][ T1231] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 212.802118][ T1231] ? __pfx_process_one_work+0x10/0x10 [ 212.802135][ T1231] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.802168][ T1231] ? assign_work+0x3cf/0x5d0 [ 212.802192][ T1231] worker_thread+0xb05/0x10d0 [ 212.802240][ T1231] kthread+0x388/0x470 [ 212.802266][ T1231] ? __pfx_worker_thread+0x10/0x10 [ 212.802285][ T1231] ? __pfx_kthread+0x10/0x10 [ 212.802312][ T1231] ret_from_fork+0x514/0xb70 [ 212.802341][ T1231] ? __pfx_ret_from_fork+0x10/0x10 [ 212.802368][ T1231] ? __switch_to+0xc89/0x1420 [ 212.802393][ T1231] ? __pfx_kthread+0x10/0x10 [ 212.802420][ T1231] ret_from_fork_asm+0x1a/0x30 [ 212.802463][ T1231] [ 212.802475][ T5587] CPU: 1 UID: 0 PID: 5587 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.802502][ T5587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.802515][ T5587] Call Trace: [ 212.802523][ T5587] [ 212.802532][ T5587] dump_stack_lvl+0xe8/0x150 [ 212.802568][ T5587] should_fail_ex+0x467/0x600 [ 212.802600][ T5587] should_failslab+0xa8/0x100 [ 212.802623][ T5587] kmem_cache_alloc_node_noprof+0xac/0x660 [ 212.802655][ T5587] ? __alloc_skb+0x1d7/0x7a0 [ 212.802681][ T5587] ? __alloc_skb+0x1d7/0x7a0 [ 212.802718][ T5587] __alloc_skb+0x1d7/0x7a0 [ 212.802753][ T5587] tcp_stream_alloc_skb+0x3f/0x5c0 [ 212.802790][ T5587] tcp_sendmsg_locked+0x143d/0x55c0 [ 212.802879][ T5587] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 212.802923][ T5587] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 212.802947][ T5587] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.802975][ T5587] tcp_sendmsg+0x2f/0x50 [ 212.803006][ T5587] ? __pfx_inet_sendmsg+0x10/0x10 [ 212.803034][ T5587] sock_sendmsg_nosec+0x10e/0x180 [ 212.803064][ T5587] sock_write_iter+0x2e4/0x3f0 [ 212.803099][ T5587] ? __pfx_sock_write_iter+0x10/0x10 [ 212.803132][ T5587] ? bpf_lsm_file_permission+0x9/0x20 [ 212.803165][ T5587] ? security_file_permission+0x68/0x220 [ 212.803201][ T5587] vfs_write+0x61e/0xbb0 [ 212.803241][ T5587] ? __pfx_vfs_write+0x10/0x10 [ 212.803271][ T5587] ? __pfx_set_user_sigmask+0x10/0x10 [ 212.803314][ T5587] ksys_write+0x156/0x270 [ 212.803344][ T5587] ? __pfx_ksys_write+0x10/0x10 [ 212.803381][ T5587] do_syscall_64+0x17b/0x530 [ 212.803402][ T5587] ? irqentry_exit+0x10f/0x8f0 [ 212.803423][ T5587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.803446][ T5587] ? clear_bhb_loop+0x40/0x90 [ 212.803473][ T5587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.803496][ T5587] RIP: 0033:0x7ff46fad9017 [ 212.803515][ T5587] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 212.803534][ T5587] RSP: 002b:00007ffec4312f50 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 212.803556][ T5587] RAX: ffffffffffffffda RBX: 000055558f00d540 RCX: 00007ff46fad9017 [ 212.803581][ T5587] RDX: 0000000000000478 RSI: 00007ff46a77fb88 RDI: 0000000000000003 [ 212.803596][ T5587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.803609][ T5587] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000478 [ 212.803622][ T5587] R13: 000055558f0217f0 R14: 00007ffec43134f0 R15: 00007ff46a77fb88 [ 212.803658][ T5587] [ 212.805091][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.805165][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.805179][ T4954] Call Trace: [ 212.805188][ T4954] [ 212.805204][ T4954] dump_stack_lvl+0xe8/0x150 [ 212.805289][ T4954] should_fail_ex+0x467/0x600 [ 212.805372][ T4954] ? sock_alloc_inode+0x2c/0x1a0 [ 212.805422][ T4954] should_failslab+0xa8/0x100 [ 212.805447][ T4954] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 212.805560][ T4954] ? sock_alloc_inode+0x2c/0x1a0 [ 212.805632][ T4954] ? __pfx_sock_alloc_inode+0x10/0x10 [ 212.805698][ T4954] sock_alloc_inode+0x2c/0x1a0 [ 212.805764][ T4954] ? __pfx_sock_alloc_inode+0x10/0x10 [ 212.805826][ T4954] alloc_inode+0x6a/0x1b0 [ 212.805923][ T4954] __sock_create+0x11e/0x960 [ 212.806011][ T4954] __sys_socket+0xd9/0x320 [ 212.806106][ T4954] __x64_sys_socket+0x7a/0x90 [ 212.806182][ T4954] do_syscall_64+0x17b/0x530 [ 212.806239][ T4954] ? irqentry_exit+0x10f/0x8f0 [ 212.806294][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.806351][ T4954] ? clear_bhb_loop+0x40/0x90 [ 212.806441][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.806506][ T4954] RIP: 0033:0x7ff5b8120707 [ 212.806561][ T4954] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 212.806601][ T4954] RSP: 002b:00007ffcce7afc38 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 212.806660][ T4954] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff5b8120707 [ 212.806676][ T4954] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 212.806690][ T4954] RBP: 00007ff5b81ac560 R08: 0000000000000073 R09: 0000000000000001 [ 212.806719][ T4954] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 212.806753][ T4954] R13: 00007ffcce7afd60 R14: 0000000000000030 R15: 00007ffcce7afd60 [ 212.806845][ T4954] [ 213.576431][ T4965] udevd[4965]: worker [5590] terminated by signal 9 (Killed) [ 213.589725][ T4965] udevd[4965]: worker [5619] terminated by signal 9 (Killed) [ 213.601459][ T4965] udevd[4965]: worker [5787] terminated by signal 9 (Killed) [ 213.614683][ T4965] udevd[4965]: worker [5825] terminated by signal 9 (Killed) [ 214.393791][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.769'. [ 214.488254][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.769'. [ 214.508946][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.769'. [ 214.547678][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.769'. [ 215.338103][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.769'. [ 215.521688][ T7941] netlink: 52 bytes leftover after parsing attributes in process `syz.2.769'. [ 215.590714][ T7942] netlink: 52 bytes leftover after parsing attributes in process `syz.2.769'. [ 215.663187][ T7944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.769'. [ 215.683737][ T7944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.769'. [ 215.707915][ T7944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.769'. [ 216.211266][ T7931] NFSD: Unable to initialize client recovery tracking! (-110) [ 216.211320][ T7931] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 216.211354][ T7931] NFSD: starting 90-second grace period (net f0000516) [ 217.195206][ T165] rpcbind: server 127.0.0.1 not responding, timed out [ 222.070382][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 222.110851][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 222.110891][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 222.110916][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 226.714571][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 226.739568][ T8013] tipc: Enabling of bearer rejected, already enabled [ 226.911592][ T8017] netlink: 84 bytes leftover after parsing attributes in process `syz.3.792'. [ 228.360008][ T8030] NFSD: Unable to initialize client recovery tracking! (-110) [ 228.360030][ T8030] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 228.360044][ T8030] NFSD: starting 90-second grace period (net f0000516) [ 229.322582][ T3402] rpcbind: server 127.0.0.1 not responding, timed out [ 229.876358][ T7959] FAULT_INJECTION: forcing a failure. [ 229.876358][ T7959] name failslab, interval 1, probability 100, space 0, times 100 [ 229.876402][ T7959] CPU: 0 UID: 0 PID: 7959 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.876431][ T7959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.876445][ T7959] Call Trace: [ 229.876456][ T7959] [ 229.876466][ T7959] dump_stack_lvl+0xe8/0x150 [ 229.876502][ T7959] should_fail_ex+0x467/0x600 [ 229.876540][ T7959] should_failslab+0xa8/0x100 [ 229.876564][ T7959] ? do_getname+0x2e/0x250 [ 229.876601][ T7959] kmem_cache_alloc_noprof+0x9e/0x680 [ 229.876652][ T7959] ? do_getname+0x2e/0x250 [ 229.876697][ T7959] do_getname+0x2e/0x250 [ 229.876732][ T7959] ? user_path_at+0x1e/0x160 [ 229.876762][ T7959] user_path_at+0x2a/0x160 [ 229.876792][ T7959] __se_sys_inotify_add_watch+0x18d/0xf50 [ 229.876846][ T7959] ? rcu_is_watching+0x15/0xb0 [ 229.876875][ T7959] ? __pfx___se_sys_inotify_add_watch+0x10/0x10 [ 229.876928][ T7959] do_syscall_64+0x17b/0x530 [ 229.876953][ T7959] ? irqentry_exit+0x10f/0x8f0 [ 229.876976][ T7959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.877001][ T7959] ? clear_bhb_loop+0x40/0x90 [ 229.877032][ T7959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.877057][ T7959] RIP: 0033:0x7f0f499de9a7 [ 229.877080][ T7959] Code: f0 ff ff 73 01 c3 48 8b 0d 4e f4 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 fe 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 21 f4 0c 00 f7 d8 64 89 01 48 [ 229.877102][ T7959] RSP: 002b:00007ffdbe3818f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000fe [ 229.877128][ T7959] RAX: ffffffffffffffda RBX: 000056114f110f10 RCX: 00007f0f499de9a7 [ 229.877146][ T7959] RDX: 0000000000000008 RSI: 000056114f0f4620 RDI: 0000000000000007 [ 229.877162][ T7959] RBP: 000056114f0f3910 R08: 00000000000001d0 R09: 0000000000000003 [ 229.877176][ T7959] R10: 0000000000000000 R11: 0000000000000202 R12: 000056114f110f10 [ 229.877190][ T7959] R13: 000056114f101190 R14: 0000000000000008 R15: 000056114f110f10 [ 229.877227][ T7959] [ 229.877859][ T8094] FAULT_INJECTION: forcing a failure. [ 229.877859][ T8094] name failslab, interval 1, probability 100, space 0, times 98 [ 229.877894][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.877922][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.877936][ T8094] Call Trace: [ 229.877946][ T8094] [ 229.877960][ T8094] dump_stack_lvl+0xe8/0x150 [ 229.877988][ T8094] should_fail_ex+0x467/0x600 [ 229.878013][ T8094] should_failslab+0xa8/0x100 [ 229.878029][ T8094] ? do_getname+0x2e/0x250 [ 229.878055][ T8094] kmem_cache_alloc_noprof+0x9e/0x680 [ 229.878080][ T8094] ? do_getname+0x2e/0x250 [ 229.878111][ T8094] do_getname+0x2e/0x250 [ 229.878141][ T8094] ? __se_sys_symlinkat+0x22/0x2b0 [ 229.878170][ T8094] __se_sys_symlinkat+0x2e/0x2b0 [ 229.878200][ T8094] do_syscall_64+0x17b/0x530 [ 229.878217][ T8094] ? irqentry_exit+0x10f/0x8f0 [ 229.878234][ T8094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.878252][ T8094] ? clear_bhb_loop+0x40/0x90 [ 229.878274][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.878292][ T8094] RIP: 0033:0x7fb6909fcf57 [ 229.878307][ T8094] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.878322][ T8094] RSP: 002b:00007ffeb86c91b8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 229.878340][ T8094] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6909fcf57 [ 229.878352][ T8094] RDX: 00007fb690a94e68 RSI: 00000000ffffff9c RDI: 00007ffeb86c9250 [ 229.878365][ T8094] RBP: 00007ffeb86c91fc R08: 0000000000000001 R09: 00000000ffffffff [ 229.878376][ T8094] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000db [ 229.878387][ T8094] R13: 00000000000927c0 R14: 0000000000037fc3 R15: 00007ffeb86c9250 [ 229.878412][ T8094] [ 229.880161][ T4954] FAULT_INJECTION: forcing a failure. [ 229.880161][ T4954] name failslab, interval 1, probability 100, space 0, times 83 [ 229.880197][ T4954] CPU: 1 UID: 0 PID: 4954 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.880224][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.880238][ T4954] Call Trace: [ 229.880247][ T4954] [ 229.880257][ T4954] dump_stack_lvl+0xe8/0x150 [ 229.880292][ T4954] should_fail_ex+0x467/0x600 [ 229.880325][ T4954] ? sock_alloc_inode+0x2c/0x1a0 [ 229.880353][ T4954] should_failslab+0xa8/0x100 [ 229.880378][ T4954] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 229.880415][ T4954] ? sock_alloc_inode+0x2c/0x1a0 [ 229.880449][ T4954] ? __pfx_sock_alloc_inode+0x10/0x10 [ 229.880475][ T4954] sock_alloc_inode+0x2c/0x1a0 [ 229.880504][ T4954] ? __pfx_sock_alloc_inode+0x10/0x10 [ 229.880529][ T4954] alloc_inode+0x6a/0x1b0 [ 229.880576][ T4954] __sock_create+0x11e/0x960 [ 229.880608][ T4954] ? fput_close_sync+0x11f/0x240 [ 229.880638][ T4954] __sys_socket+0xd9/0x320 [ 229.880673][ T4954] __x64_sys_socket+0x7a/0x90 [ 229.880705][ T4954] do_syscall_64+0x17b/0x530 [ 229.880731][ T4954] ? irqentry_exit+0x10f/0x8f0 [ 229.880754][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.880779][ T4954] ? clear_bhb_loop+0x40/0x90 [ 229.880810][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.880835][ T4954] RIP: 0033:0x7ff5b8120707 [ 229.880855][ T4954] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 229.880876][ T4954] RSP: 002b:00007ffcce7afc38 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 229.880902][ T4954] RAX: ffffffffffffffda RBX: 0000000000000055 RCX: 00007ff5b8120707 [ 229.880920][ T4954] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 229.880935][ T4954] RBP: 00007ff5b81ac560 R08: 0000000000000000 R09: 0000000000000000 [ 229.880944][ T7959] FAULT_INJECTION: forcing a failure. [ 229.880944][ T7959] name failslab, interval 1, probability 100, space 0, times 77 [ 229.880951][ T4954] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 229.880965][ T4954] R13: 00007ffcce7afd60 R14: 000000000000003a R15: 00007ffcce7afd60 [ 229.880998][ T4954] [ 229.881008][ T4954] net_ratelimit: 8241 callbacks suppressed [ 229.881011][ T7959] CPU: 0 UID: 0 PID: 7959 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.881021][ T4954] socket: no more sockets [ 229.881039][ T7959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.881042][ T4954] FAULT_INJECTION: forcing a failure. [ 229.881042][ T4954] name failslab, interval 1, probability 100, space 0, times 76 [ 229.881055][ T7959] Call Trace: [ 229.881063][ T7959] [ 229.881072][ T7959] dump_stack_lvl+0xe8/0x150 [ 229.881101][ T7959] should_fail_ex+0x467/0x600 [ 229.881134][ T7959] should_failslab+0xa8/0x100 [ 229.881159][ T7959] __kmalloc_noprof+0xfb/0x790 [ 229.881191][ T7959] ? devkmsg_write+0x198/0x400 [ 229.881213][ T7959] ? devkmsg_write+0x198/0x400 [ 229.881242][ T7959] devkmsg_write+0x198/0x400 [ 229.881265][ T7959] ? filemap_map_pages+0x1e0/0x1c50 [ 229.881307][ T7959] ? __pfx_devkmsg_write+0x10/0x10 [ 229.881364][ T7959] ? __css_rstat_updated+0x235/0x540 [ 229.881479][ T7959] ? __pfx_filemap_map_pages+0x10/0x10 [ 229.881639][ T7959] do_iter_readv_writev+0x624/0x8d0 [ 229.881730][ T7959] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 229.881836][ T7959] ? bpf_lsm_file_permission+0x9/0x20 [ 229.881933][ T7959] ? security_file_permission+0x68/0x220 [ 229.882025][ T7959] ? rw_verify_area+0x209/0x4d0 [ 229.882112][ T7959] vfs_writev+0x34c/0x990 [ 229.882233][ T7959] ? __pfx_vfs_writev+0x10/0x10 [ 229.882374][ T7959] ? __pfx_handle_mm_fault+0x10/0x10 [ 229.882458][ T7959] ? lock_vma_under_rcu+0x45a/0x500 [ 229.882564][ T7959] ? user_path_at+0x1e/0x160 [ 229.882698][ T7959] do_writev+0x15a/0x2e0 [ 229.882803][ T7959] ? __pfx_do_writev+0x10/0x10 [ 229.882903][ T7959] do_syscall_64+0x17b/0x530 [ 229.882946][ T7959] ? irqentry_exit+0x10f/0x8f0 [ 229.883022][ T7959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.883095][ T7959] ? clear_bhb_loop+0x40/0x90 [ 229.883172][ T7959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.883243][ T7959] RIP: 0033:0x7f0f49964407 [ 229.883302][ T7959] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 229.883353][ T7959] RSP: 002b:00007ffdbe380db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 229.883425][ T7959] RAX: ffffffffffffffda RBX: 00007f0f49876880 RCX: 00007f0f49964407 [ 229.883474][ T7959] RDX: 0000000000000005 RSI: 00007ffdbe380e70 RDI: 0000000000000005 [ 229.883513][ T7959] RBP: 00007ffdbe380fa0 R08: 0000000000000000 R09: 0000000000000000 [ 229.883559][ T7959] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdbe380e70 [ 229.883605][ T7959] R13: 00007ffdbe380f00 R14: 0000000000000000 R15: 00007ffdbe380ee0 [ 229.883701][ T7959] [ 229.886194][ T8094] FAULT_INJECTION: forcing a failure. [ 229.886194][ T8094] name failslab, interval 1, probability 100, space 0, times 75 [ 229.886290][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.886375][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.886412][ T8094] Call Trace: [ 229.886436][ T8094] [ 229.886461][ T8094] dump_stack_lvl+0xe8/0x150 [ 229.886556][ T8094] should_fail_ex+0x467/0x600 [ 229.886673][ T8094] should_failslab+0xa8/0x100 [ 229.886735][ T8094] ? do_getname+0x2e/0x250 [ 229.886832][ T8094] kmem_cache_alloc_noprof+0x9e/0x680 [ 229.886928][ T8094] ? do_getname+0x2e/0x250 [ 229.887065][ T8094] do_getname+0x2e/0x250 [ 229.887186][ T8094] __se_sys_symlinkat+0x3d/0x2b0 [ 229.887304][ T8094] do_syscall_64+0x17b/0x530 [ 229.887368][ T8094] ? irqentry_exit+0x10f/0x8f0 [ 229.887432][ T8094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.887505][ T8094] ? clear_bhb_loop+0x40/0x90 [ 229.887592][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.887655][ T8094] RIP: 0033:0x7fb6909fcf57 [ 229.887716][ T8094] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.887777][ T8094] RSP: 002b:00007ffeb86c91b8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 229.887849][ T8094] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6909fcf57 [ 229.887898][ T8094] RDX: 00007fb690a94e68 RSI: 00000000ffffff9c RDI: 00007ffeb86c9250 [ 229.887941][ T8094] RBP: 00007ffeb86c91fc R08: 0000000000000001 R09: 00000000ffffffff [ 229.887989][ T8094] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000db [ 229.888035][ T8094] R13: 00000000000927c0 R14: 0000000000037fc3 R15: 00007ffeb86c9250 [ 229.888117][ T8094] [ 229.890502][ T7959] FAULT_INJECTION: forcing a failure. [ 229.890502][ T7959] name failslab, interval 1, probability 100, space 0, times 52 [ 229.890586][ T7959] CPU: 0 UID: 0 PID: 7959 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.890624][ T7959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.890638][ T7959] Call Trace: [ 229.890647][ T7959] [ 229.890657][ T7959] dump_stack_lvl+0xe8/0x150 [ 229.890691][ T7959] should_fail_ex+0x467/0x600 [ 229.890728][ T7959] should_failslab+0xa8/0x100 [ 229.890751][ T7959] ? do_getname+0x2e/0x250 [ 229.890788][ T7959] kmem_cache_alloc_noprof+0x9e/0x680 [ 229.890825][ T7959] ? do_getname+0x2e/0x250 [ 229.890870][ T7959] do_getname+0x2e/0x250 [ 229.890905][ T7959] ? getname_flags+0x11/0x20 [ 229.890936][ T13] FAULT_INJECTION: forcing a failure. [ 229.890936][ T13] name failslab, interval 1, probability 100, space 0, times 42 [ 229.890944][ T7959] vfs_fstatat+0x45/0x170 [ 229.890982][ T7959] __x64_sys_newfstatat+0x151/0x200 [ 229.891020][ T7959] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 229.891072][ T7959] ? __pfx_do_writev+0x10/0x10 [ 229.891114][ T7959] do_syscall_64+0x17b/0x530 [ 229.891135][ T7959] ? irqentry_exit+0x10f/0x8f0 [ 229.891155][ T7959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.891177][ T7959] ? clear_bhb_loop+0x40/0x90 [ 229.891203][ T7959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.891224][ T7959] RIP: 0033:0x7f0f499ceb0a [ 229.891242][ T7959] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 229.891260][ T7959] RSP: 002b:00007ffdbe3803a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 229.891281][ T7959] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007f0f499ceb0a [ 229.891297][ T7959] RDX: 00007ffdbe3803b0 RSI: 00007ffdbe380480 RDI: 00000000ffffff9c [ 229.891312][ T7959] RBP: 00007ffdbe3814c0 R08: 0000000000000000 R09: 0000000000000000 [ 229.891325][ T7959] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbe3818e0 [ 229.891338][ T7959] R13: 0000000000000000 R14: 0000000000000008 R15: 000056114f110f10 [ 229.891368][ T7959] [ 229.891381][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.891410][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.891426][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 229.891467][ T13] Call Trace: [ 229.891477][ T13] [ 229.891486][ T13] dump_stack_lvl+0xe8/0x150 [ 229.891520][ T13] should_fail_ex+0x467/0x600 [ 229.891559][ T13] should_failslab+0xa8/0x100 [ 229.891586][ T13] kmem_cache_alloc_node_noprof+0xac/0x660 [ 229.891624][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 229.891654][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 229.891697][ T13] __alloc_skb+0x1d7/0x7a0 [ 229.891738][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 229.891793][ T13] ? process_one_work+0x7fd/0x1480 [ 229.891822][ T13] process_one_work+0xaaf/0x1480 [ 229.891877][ T13] ? __pfx_process_one_work+0x10/0x10 [ 229.891899][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 229.891942][ T13] ? assign_work+0x3cf/0x5d0 [ 229.891974][ T13] worker_thread+0xb05/0x10d0 [ 229.892032][ T13] kthread+0x388/0x470 [ 229.892067][ T13] ? __pfx_worker_thread+0x10/0x10 [ 229.892092][ T13] ? __pfx_kthread+0x10/0x10 [ 229.892137][ T13] ret_from_fork+0x514/0xb70 [ 229.892180][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 229.892222][ T13] ? __switch_to+0xc89/0x1420 [ 229.892257][ T13] ? __pfx_kthread+0x10/0x10 [ 229.892294][ T13] ret_from_fork_asm+0x1a/0x30 [ 229.892351][ T13] [ 230.029111][ T4954] CPU: 1 UID: 0 PID: 4954 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.029141][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.029164][ T4954] Call Trace: [ 230.029173][ T4954] [ 230.029182][ T4954] dump_stack_lvl+0xe8/0x150 [ 230.029217][ T4954] should_fail_ex+0x467/0x600 [ 230.029249][ T4954] ? sock_alloc_inode+0x2c/0x1a0 [ 230.029276][ T4954] should_failslab+0xa8/0x100 [ 230.029299][ T4954] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 230.029332][ T4954] ? sock_alloc_inode+0x2c/0x1a0 [ 230.029361][ T4954] ? __pfx_sock_alloc_inode+0x10/0x10 [ 230.029385][ T4954] sock_alloc_inode+0x2c/0x1a0 [ 230.029411][ T4954] ? __pfx_sock_alloc_inode+0x10/0x10 [ 230.029435][ T4954] alloc_inode+0x6a/0x1b0 [ 230.029471][ T4954] __sock_create+0x11e/0x960 [ 230.029497][ T4954] ? fput_close_sync+0x11f/0x240 [ 230.029523][ T4954] __sys_socket+0xd9/0x320 [ 230.029554][ T4954] __x64_sys_socket+0x7a/0x90 [ 230.029581][ T4954] do_syscall_64+0x17b/0x530 [ 230.029603][ T4954] ? irqentry_exit+0x10f/0x8f0 [ 230.029622][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.029644][ T4954] ? clear_bhb_loop+0x40/0x90 [ 230.029672][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.029694][ T4954] RIP: 0033:0x7ff5b8120707 [ 230.029714][ T4954] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 230.029733][ T4954] RSP: 002b:00007ffcce7afc38 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 230.029756][ T4954] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff5b8120707 [ 230.029770][ T4954] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 230.029783][ T4954] RBP: 00007ff5b81ac560 R08: 0000000000000073 R09: 0000000000000001 [ 230.029796][ T4954] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 230.029809][ T4954] R13: 00007ffcce7afd60 R14: 0000000000000055 R15: 00007ffcce7afd60 [ 230.029841][ T4954] [ 230.039054][ T4954] socket: no more sockets [ 230.740519][ T8080] NFSD: Unable to initialize client recovery tracking! (-110) [ 230.740542][ T8080] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 230.740556][ T8080] NFSD: starting 90-second grace period (net f0000516) [ 231.999225][ T8118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'. [ 231.999244][ T8118] openvswitch: netlink: Flow key attr not present in new flow. [ 232.060852][ T8120] rdma_rxe: rxe_newlink: failed to add lo [ 232.343347][ T8122] smc: removing ib device syz0 [ 232.697940][ T199] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 232.905155][ T8122] smbdirect: ib_dev[syz0] removed [ 232.962380][ T8125] smbdirect: ib_dev[syz1] removed [ 232.965337][ T5697] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 233.429890][ T8130] ceph: No mds server is up or the cluster is laggy [ 233.472604][ T199] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 234.385115][ T8168] openvswitch: netlink: Key 13 has unexpected len 4 expected 24 [ 234.951477][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 234.951595][ T8179] netlink: 56 bytes leftover after parsing attributes in process `syz.0.842'. [ 235.003237][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 235.373260][ T199] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 235.386458][ T5706] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 235.407432][ T8170] ceph: No mds server is up or the cluster is laggy [ 235.577649][ T5706] usb 1-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 235.577683][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.577704][ T5706] usb 1-1: Product: syz [ 235.577719][ T5706] usb 1-1: Manufacturer: syz [ 235.577734][ T5706] usb 1-1: SerialNumber: syz [ 235.688265][ T5706] r8152-cfgselector 1-1: Unknown version 0x0000 [ 235.733844][ T5600] do_umount: task=syz-executor[5600] propagate_mount_busy()!=0 [ 235.734100][ T5600] do_umount: task=syz-executor[5600] propagate_mount_busy()!=0 [ 235.758696][ T5600] do_umount: task=syz-executor[5600] propagate_mount_busy()!=0 [ 235.993782][ C1] tipc: RX(7f000001): key[1] is activated [ 236.932965][ T5706] r8152-cfgselector 1-1: Unknown version 0x0000 [ 237.022448][ T5706] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 237.169192][ T8191] NFSD: Unable to initialize client recovery tracking! (-110) [ 237.169212][ T8191] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 237.169225][ T8191] NFSD: starting 90-second grace period (net f000044c) [ 237.259591][ C0] tipc: RX(7f000001): key[1] is activated [ 237.592932][ T37] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 237.628692][ T37] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 237.898433][ T5706] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 238.383949][ T8196] ceph: No mds server is up or the cluster is laggy [ 238.420981][ T5690] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 239.230150][ T8209] svc: failed to register lockdv1 RPC service (errno 111). [ 239.678054][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.902142][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.934792][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.936053][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.938965][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.965805][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.239544][ T8209] svc: failed to register nfsdv3 RPC service (errno 512). [ 240.239787][ T8209] svc: failed to register nfsaclv3 RPC service (errno 512). [ 240.239805][ T8209] failed to unregister udp with rpcbind [ 240.240011][ T8209] svc: failed to register nfsdv3 RPC service (errno 97). [ 240.240031][ T8209] svc: failed to register nfsaclv3 RPC service (errno 97). [ 240.240047][ T8209] failed to unregister udp with rpcbind [ 240.453247][ T8221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.856'. [ 240.471825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.472183][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.472804][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.473188][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.473575][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.473965][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.474367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.474745][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.475147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.475523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.922982][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.219240][ T5614] Bluetooth: hci2: command tx timeout [ 244.007932][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.303137][ T5614] Bluetooth: hci2: command tx timeout [ 245.479497][ C1] net_ratelimit: 12267 callbacks suppressed [ 245.479519][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.479973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.480467][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.480929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.481359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.481828][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.484270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.484721][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.485160][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.485593][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.669498][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.873'. [ 245.669528][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 245.669547][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 245.669563][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 245.806959][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.379124][ T5614] Bluetooth: hci2: command tx timeout [ 247.104082][ T5697] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 247.402313][ T5697] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 247.402346][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 247.402369][ T5697] usb 1-1: Product: syz [ 247.402384][ T5697] usb 1-1: Manufacturer: syz [ 248.233610][ T5697] speedtch 1-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 248.233691][ T5697] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -71! [ 248.233749][ T5697] speedtch 1-1:1.0: probe with driver speedtch failed with error -71 [ 248.282352][ T5697] speedtch 1-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 248.301897][ T5697] speedtch 1-1:1.1: usbatm_usb_probe: bind failed: -71! [ 248.301970][ T5697] speedtch 1-1:1.1: probe with driver speedtch failed with error -71 [ 248.326622][ T5697] usb 1-1: USB disconnect, device number 4 [ 248.469437][ T5614] Bluetooth: hci2: command tx timeout [ 248.786481][ T1231] rpcbind: server 127.0.0.1 not responding, timed out [ 249.999861][ T56] veth1_to_bridge: left allmulticast mode [ 250.000040][ T56] veth1_to_bridge: left promiscuous mode [ 250.036497][ T56] bridge0: port 3(veth1_to_bridge) entered disabled state [ 250.054317][ T8330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.890'. [ 250.276436][ T56] bridge_slave_1: left allmulticast mode [ 250.276470][ T56] bridge_slave_1: left promiscuous mode [ 250.276728][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.679560][ T56] bridge_slave_0: left allmulticast mode [ 250.679606][ T56] bridge_slave_0: left promiscuous mode [ 250.679904][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.721736][ T3405] rpcbind: server 127.0.0.1 not responding, timed out [ 250.735623][ T8349] netlink: 'syz.1.898': attribute type 55 has an invalid length. [ 250.848440][ T8353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.899'. [ 252.629764][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.720231][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.745338][ T56] bond0 (unregistering): Released all slaves [ 253.090471][ T8387] net_ratelimit: 10185 callbacks suppressed [ 253.090493][ T8387] netlink: ct family unspecified [ 253.090520][ T8387] openvswitch: netlink: Actions may not be safe on all matching packets [ 253.091377][ T56] tipc: Left network mode [ 253.342347][ T8377] NFSD: Unable to initialize client recovery tracking! (-110) [ 253.342369][ T8377] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 253.342382][ T8377] NFSD: starting 90-second grace period (net f00003ba) [ 253.391936][ T5704] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 253.393414][ T5704] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 253.422664][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.423161][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.423422][ T8216] bridge_slave_0: entered allmulticast mode [ 253.426972][ T8216] bridge_slave_0: entered promiscuous mode [ 253.488319][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.488683][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.488933][ T8216] bridge_slave_1: entered allmulticast mode [ 253.520257][ T8216] bridge_slave_1: entered promiscuous mode [ 253.653355][ T5704] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 254.104551][ T8390] ceph: No mds server is up or the cluster is laggy [ 254.161370][ T5704] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 254.262024][ T8216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.368922][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 254.522127][ T8216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.128941][ T8216] team0: Port device team_slave_0 added [ 255.243072][ T8216] team0: Port device team_slave_1 added [ 255.274580][ T8420] netlink: 'syz.1.916': attribute type 4 has an invalid length. [ 255.274857][ T8420] netlink: 'syz.1.916': attribute type 4 has an invalid length. [ 255.536029][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.536046][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.536078][ T8216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.545948][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.545999][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.546078][ T8216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.825456][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.825572][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.831503][ T56] hsr_slave_0: left promiscuous mode [ 255.869208][ T56] hsr_slave_1: left promiscuous mode [ 255.871235][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.876361][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.922581][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.922616][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.050495][ T56] veth1_macvtap: left promiscuous mode [ 256.050689][ T56] veth0_macvtap: left promiscuous mode [ 256.051010][ T56] veth1_vlan: left promiscuous mode [ 256.102524][ T56] veth0_vlan: left promiscuous mode [ 257.369842][ T56] team0 (unregistering): Port device team_slave_1 removed [ 257.420010][ T56] team0 (unregistering): Port device team_slave_0 removed [ 257.818817][ T8216] hsr_slave_0: entered promiscuous mode [ 257.831498][ T8216] hsr_slave_1: entered promiscuous mode [ 257.835506][ T8216] debugfs: 'hsr0' already exists in 'hsr' [ 257.835534][ T8216] Cannot create hsr debugfs directory [ 258.629890][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 258.923657][ T8216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.996707][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 259.004660][ T8216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.042927][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 259.044297][ T8216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.084415][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 259.088746][ T8216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.166768][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 259.485243][ T8216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.553038][ T8216] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.594769][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.595017][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.641134][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 259.643697][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.643913][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.455314][ T8216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.658882][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 260.946461][ T8216] veth0_vlan: entered promiscuous mode [ 260.999613][ T8216] veth1_vlan: entered promiscuous mode [ 261.113535][ T8216] veth0_macvtap: entered promiscuous mode [ 261.133527][ T8216] veth1_macvtap: entered promiscuous mode [ 261.205616][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.229968][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.254443][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.255890][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.257612][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.257683][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.650585][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.650606][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.137339][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.137363][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.328313][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 262.328772][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.855'. [ 262.328790][ T8521] openvswitch: netlink: Flow key attr not present in new flow. [ 262.649228][ T5605] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 262.821275][ T5605] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 262.822575][ T5605] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.822605][ T5605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.822628][ T5605] usb 5-1: SerialNumber: syz [ 263.520478][ T5605] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 263.593570][ T8424] NFSD: Failed to start, no listeners configured. [ 264.544364][ T8447] NFSD: Failed to start, no listeners configured. [ 264.675605][ T5697] usb 5-1: USB disconnect, device number 2 [ 264.694970][ T5697] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 265.707621][ T8569] svc: failed to register lockdv1 RPC service (errno 111). [ 266.599805][ T8569] svc: failed to register nfsdv3 RPC service (errno 512). [ 266.600026][ T8569] svc: failed to register nfsaclv3 RPC service (errno 512). [ 266.600041][ T8569] failed to unregister tcp with rpcbind [ 266.600264][ T8569] svc: failed to register nfsdv3 RPC service (errno 97). [ 266.600279][ T8569] svc: failed to register nfsaclv3 RPC service (errno 97). [ 266.600290][ T8569] failed to unregister tcp with rpcbind [ 266.857793][ T8608] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 266.911763][ T8612] netlink: 156 bytes leftover after parsing attributes in process `syz.0.935'. [ 267.725653][ T8641] atomic_op ffff888025f62a18 conn xmit_atomic 0000000000000000 [ 267.810201][ T8573] NFSD: Unable to initialize client recovery tracking! (-110) [ 267.810223][ T8573] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 267.810237][ T8573] NFSD: starting 90-second grace period (net f00003ba) [ 268.123752][ T8655] tipc: Started in network mode [ 268.123785][ T8655] tipc: Node identity ac1414aa, cluster identity 4711 [ 268.124071][ T8655] tipc: New replicast peer: 172.20.20.187 [ 268.157826][ T8655] tipc: Enabled bearer , priority 10 [ 269.080700][ T8689] openvswitch: netlink: Key 2 has unexpected len 12 expected 4 [ 269.129483][ T5605] tipc: Node number set to 2886997162 [ 270.132555][ T8682] NFSD: Unable to initialize client recovery tracking! (-110) [ 270.132579][ T8682] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 270.132593][ T8682] NFSD: starting 90-second grace period (net f0000516) [ 270.703604][ T8742] netlink: 48 bytes leftover after parsing attributes in process `syz.2.974'. [ 271.325765][ T8758] tipc: Enabled bearer , priority 1 [ 271.360310][ T8757] tipc: Resetting bearer [ 271.480190][ T8757] tipc: Disabling bearer [ 271.712643][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 271.714815][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 271.971626][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 272.159648][ T8716] NFSD: Unable to initialize client recovery tracking! (-110) [ 272.159672][ T8716] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 272.159687][ T8716] NFSD: starting 90-second grace period (net f000044c) [ 272.484772][ T5697] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 272.525088][ T8760] ceph: No mds server is up or the cluster is laggy [ 273.781328][ T56] rpcbind: server 127.0.0.1 not responding, timed out [ 274.089176][ T8750] NFSD: Unable to initialize client recovery tracking! (-110) [ 274.089199][ T8750] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 274.089212][ T8750] NFSD: starting 90-second grace period (net f00003ba) [ 274.773351][ T8842] netlink: 68 bytes leftover after parsing attributes in process `syz.4.997'. [ 275.712404][ T8872] lo speed is unknown, defaulting to 1000 [ 275.792374][ T8872] lo speed is unknown, defaulting to 1000 [ 276.053095][ T8872] lo speed is unknown, defaulting to 1000 [ 276.055679][ T8872] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 276.055716][ T8872] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 276.055761][ T8872] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 276.117712][ T8872] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 276.146498][ T8872] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 276.280047][ T8872] lo speed is unknown, defaulting to 1000 [ 276.517220][ T8872] lo speed is unknown, defaulting to 1000 [ 276.655033][ T8872] lo speed is unknown, defaulting to 1000 [ 276.842381][ T8872] lo speed is unknown, defaulting to 1000 [ 277.037669][ T8872] lo speed is unknown, defaulting to 1000 [ 277.198787][ T8904] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1009'. [ 277.290859][ T8872] lo speed is unknown, defaulting to 1000 [ 277.469469][ T8872] lo speed is unknown, defaulting to 1000 [ 277.475168][ T8872] lo speed is unknown, defaulting to 1000 [ 277.962371][ T5605] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 278.235267][ T5605] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 278.732402][ T8927] ceph: No mds server is up or the cluster is laggy [ 278.772633][ T5605] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 278.817238][ T5690] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 278.834087][ T8936] ceph: No mds server is up or the cluster is laggy [ 279.669147][ T8982] FAULT_INJECTION: forcing a failure. [ 279.669147][ T8982] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 279.669186][ T8982] CPU: 0 UID: 0 PID: 8982 Comm: syz.4.1028 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.669211][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 279.669237][ T8982] Call Trace: [ 279.669246][ T8982] [ 279.669256][ T8982] dump_stack_lvl+0xe8/0x150 [ 279.669289][ T8982] should_fail_ex+0x467/0x600 [ 279.669322][ T8982] _copy_from_user+0x2d/0xb0 [ 279.669345][ T8982] get_timespec64+0x96/0x1b0 [ 279.669370][ T8982] ? __pfx_get_timespec64+0x10/0x10 [ 279.669395][ T8982] ? ktime_get+0x45/0x220 [ 279.669436][ T8982] __se_sys_futex+0x19a/0x450 [ 279.669472][ T8982] ? __pfx___se_sys_futex+0x10/0x10 [ 279.669497][ T8982] ? rcu_is_watching+0x15/0xb0 [ 279.669529][ T8982] ? __x64_sys_futex+0x21/0xf0 [ 279.669559][ T8982] do_syscall_64+0x17b/0x530 [ 279.669583][ T8982] ? irqentry_exit+0x10f/0x8f0 [ 279.669604][ T8982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.669626][ T8982] ? clear_bhb_loop+0x40/0x90 [ 279.669658][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.669680][ T8982] RIP: 0033:0x7f7d9e1ade99 [ 279.669700][ T8982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.669719][ T8982] RSP: 002b:00007ffeb78b2c38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 279.669742][ T8982] RAX: ffffffffffffffda RBX: 00000000000442be RCX: 00007f7d9e1ade99 [ 279.669758][ T8982] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7d9e435fac [ 279.669772][ T8982] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 279.669787][ T8982] R10: 00007ffeb78b2d40 R11: 0000000000000246 R12: 00007ffeb78b2d60 [ 279.669803][ T8982] R13: 00007f7d9e435fac R14: 00000000000442f0 R15: 00007ffeb78b2d40 [ 279.669837][ T8982] [ 280.088635][ T8992] tipc: Enabling of bearer rejected, already enabled [ 280.411916][ T9007] tipc: Enabling of bearer rejected, already enabled [ 280.598103][ T9013] tipc: Enabling of bearer rejected, already enabled [ 291.019306][ C1] tipc: RX(ac1414aa): key[1] is activated [ 295.244701][ T9113] netlink: ct family unspecified [ 295.244735][ T9113] openvswitch: netlink: Actions may not be safe on all matching packets [ 295.690032][ T9131] rdma_rxe: rxe_newlink: failed to add lo [ 297.173098][ T9186] rdma_rxe: rxe_newlink: failed to add veth0 [ 297.292141][ T9192] tipc: Enabled bearer , priority 1 [ 297.377434][ T9191] tipc: Disabling bearer [ 298.093271][ T37] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 298.101975][ T37] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 298.397248][ T37] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 298.796708][ T9214] ceph: No mds server is up or the cluster is laggy [ 299.060973][ T5697] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 299.095144][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1087'. [ 299.097267][ T5697] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 299.392486][ T5704] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 299.788703][ T9236] ceph: No mds server is up or the cluster is laggy [ 300.966608][ T9269] lo speed is unknown, defaulting to 1000 [ 302.162813][ T9309] NFSD: Failed to start, no listeners configured. [ 302.589897][ T9322] rdma_rxe: rxe_newlink: failed to add veth0 [ 302.900480][ T9333] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 303.377749][ T9342] lo speed is unknown, defaulting to 1000 [ 303.917395][ T9356] rdma_rxe: rxe_newlink: failed to add veth0 [ 305.021478][ T9379] lo speed is unknown, defaulting to 1000 [ 305.209868][ T5704] lo speed is unknown, defaulting to 1000 [ 305.209946][ T5704] syz0: Port: 1 Link DOWN [ 306.482111][ T9407] rdma_rxe: rxe_newlink: failed to add veth0 [ 307.014019][ T9419] lo speed is unknown, defaulting to 1000 [ 307.106970][ T9423] NFSD: Failed to start, no listeners configured. [ 307.473129][ T9435] FAULT_INJECTION: forcing a failure. [ 307.473129][ T9435] name fail_futex, interval 1, probability 0, space 0, times 1 [ 307.473167][ T9435] CPU: 0 UID: 0 PID: 9435 Comm: syz.0.1153 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 307.473193][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 307.473207][ T9435] Call Trace: [ 307.473216][ T9435] [ 307.473225][ T9435] dump_stack_lvl+0xe8/0x150 [ 307.473260][ T9435] should_fail_ex+0x467/0x600 [ 307.473293][ T9435] get_futex_key+0x1b3/0x1580 [ 307.473329][ T9435] ? __pfx_get_futex_key+0x10/0x10 [ 307.473354][ T9435] ? debug_object_free+0x29c/0x340 [ 307.473394][ T9435] futex_wake+0x119/0x600 [ 307.473428][ T9435] ? __pfx_futex_wait+0x10/0x10 [ 307.473461][ T9435] ? __pfx_futex_wake+0x10/0x10 [ 307.473496][ T9435] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 307.473535][ T9435] ? lock_acquire+0x115/0x350 [ 307.473576][ T9435] do_futex+0x458/0x4e0 [ 307.473612][ T9435] ? __pfx_do_futex+0x10/0x10 [ 307.473639][ T9435] ? lockdep_hardirqs_on+0x7a/0x110 [ 307.473661][ T9435] ? ktime_get+0x45/0x220 [ 307.473702][ T9435] __se_sys_futex+0x3a8/0x450 [ 307.473745][ T9435] ? __pfx___se_sys_futex+0x10/0x10 [ 307.473771][ T9435] ? rcu_is_watching+0x15/0xb0 [ 307.473803][ T9435] ? __x64_sys_futex+0x21/0xf0 [ 307.473833][ T9435] do_syscall_64+0x17b/0x530 [ 307.473854][ T9435] ? irqentry_exit+0x10f/0x8f0 [ 307.473874][ T9435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.473896][ T9435] ? clear_bhb_loop+0x40/0x90 [ 307.473923][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.473945][ T9435] RIP: 0033:0x7f279c3bde99 [ 307.473965][ T9435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.473985][ T9435] RSP: 002b:00007ffd8821ce88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 307.474009][ T9435] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f279c3bde99 [ 307.474025][ T9435] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f279c645fa8 [ 307.474040][ T9435] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 307.474052][ T9435] R10: 00007f279c645fa0 R11: 0000000000000246 R12: 0000000000000000 [ 307.474066][ T9435] R13: 00007f279c645fac R14: 00007f279c645fa8 R15: 00007f279c645fa0 [ 307.474099][ T9435] [ 308.130801][ T9443] rdma_rxe: rxe_newlink: failed to add veth0 [ 309.879348][ T9457] NFSD: Unable to initialize client recovery tracking! (-110) [ 309.879372][ T9457] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 309.879385][ T9457] NFSD: starting 90-second grace period (net f000044c) [ 310.686230][ T9498] tipc: Enabling of bearer rejected, already enabled [ 310.780015][ T9504] bridge0: port 3(syz_tun) entered blocking state [ 310.780457][ T9504] bridge0: port 3(syz_tun) entered disabled state [ 310.780757][ T9504] syz_tun: entered allmulticast mode [ 310.809928][ T9504] syz_tun: entered promiscuous mode [ 310.817873][ T9504] bridge0: port 3(syz_tun) entered blocking state [ 310.830999][ T9504] bridge0: port 3(syz_tun) entered forwarding state [ 310.848525][ T9507] bridge0: port 4(ip6gretap0) entered blocking state [ 310.855930][ T9507] bridge0: port 4(ip6gretap0) entered disabled state [ 310.856258][ T9507] ip6gretap0: entered allmulticast mode [ 310.880756][ T9507] ip6gretap0: entered promiscuous mode [ 310.882660][ T9507] bridge0: port 4(ip6gretap0) entered blocking state [ 310.882829][ T9507] bridge0: port 4(ip6gretap0) entered forwarding state [ 310.937711][ T9504] bridge0: port 5(bond0) entered blocking state [ 310.938240][ T9504] bridge0: port 5(bond0) entered disabled state [ 310.938558][ T9504] bond0: entered allmulticast mode [ 310.938604][ T9504] bond_slave_0: entered allmulticast mode [ 310.938636][ T9504] bond_slave_1: entered allmulticast mode [ 310.983634][ T9504] bond0: entered promiscuous mode [ 310.983656][ T9504] bond_slave_0: entered promiscuous mode [ 310.983869][ T9504] bond_slave_1: entered promiscuous mode [ 311.039354][ T9504] bridge0: port 5(bond0) entered blocking state [ 311.039516][ T9504] bridge0: port 5(bond0) entered forwarding state [ 311.056553][ T9507] bridge0: port 6(team0) entered blocking state [ 311.056864][ T9507] bridge0: port 6(team0) entered disabled state [ 311.057227][ T9507] team0: entered allmulticast mode [ 311.057246][ T9507] team_slave_0: entered allmulticast mode [ 311.057274][ T9507] team_slave_1: entered allmulticast mode [ 311.098483][ T9507] team0: entered promiscuous mode [ 311.098504][ T9507] team_slave_0: entered promiscuous mode [ 311.098777][ T9507] team_slave_1: entered promiscuous mode [ 311.117826][ T9507] bridge0: port 6(team0) entered blocking state [ 311.117980][ T9507] bridge0: port 6(team0) entered forwarding state [ 311.155037][ T9510] bridge0: port 7(dummy0) entered blocking state [ 311.236088][ T9510] bridge0: port 7(dummy0) entered disabled state [ 311.236361][ T9510] dummy0: entered allmulticast mode [ 311.311612][ T9510] dummy0: entered promiscuous mode [ 311.418024][ T9510] bridge0: port 7(dummy0) entered blocking state [ 311.418188][ T9510] bridge0: port 7(dummy0) entered forwarding state [ 311.505819][ T9507] bridge0: port 8(batadv0) entered blocking state [ 311.509811][ T9507] bridge0: port 8(batadv0) entered disabled state [ 311.564821][ T9507] batadv0: entered allmulticast mode [ 311.575653][ T9507] batadv0: entered promiscuous mode [ 311.677720][ T9507] bridge0: port 8(batadv0) entered blocking state [ 311.677889][ T9507] bridge0: port 8(batadv0) entered forwarding state [ 311.831217][ T3402] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 311.831233][ T3402] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 312.272221][ T9542] tipc: Enabling of bearer rejected, already enabled [ 313.117602][ T9565] rdma_rxe: rxe_newlink: failed to add lo [ 313.260527][ T9568] smc: net device lo applied user defined pnetid SYZ0 [ 317.265643][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.265757][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.976869][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.007636][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.023832][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.040859][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.041669][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.189261][ T9620] udevd[9620]: failed to send result of seq 15042 to main daemon: No buffer space available [ 327.405565][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.433076][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.449712][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.456565][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.457716][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.016434][ T9637] rdma_rxe: rxe_newlink: failed to add lo [ 328.102125][ T9641] smc: net device lo applied user defined pnetid SYZ0 [ 328.602629][ T9610] lo speed is unknown, defaulting to 1000 [ 328.857088][ T9623] lo speed is unknown, defaulting to 1000 [ 329.099092][ T5614] Bluetooth: hci4: command tx timeout [ 331.608404][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.673789][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.676269][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.677441][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.707383][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.048636][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.095511][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.096742][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.098674][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.106575][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.957170][ T1375] bond0 (unregistering): Released all slaves [ 333.071223][ T9718] lo speed is unknown, defaulting to 1000 [ 333.442411][ T9726] lo speed is unknown, defaulting to 1000 [ 333.707290][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.707699][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.707909][ T9718] bridge_slave_0: entered allmulticast mode [ 333.717160][ T9718] bridge_slave_0: entered promiscuous mode [ 333.739234][ T60] Bluetooth: hci4: command tx timeout [ 333.755595][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.755892][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.756145][ T9718] bridge_slave_1: entered allmulticast mode [ 333.766597][ T9718] bridge_slave_1: entered promiscuous mode [ 333.864398][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.887968][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.977384][ T9718] team0: Port device team_slave_0 added [ 333.996115][ T9718] team0: Port device team_slave_1 added [ 334.065824][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.065843][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.065875][ T9718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.114267][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.114284][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.114316][ T9718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.230306][ T60] Bluetooth: hci5: command tx timeout [ 334.297471][ T9718] hsr_slave_0: entered promiscuous mode [ 334.305822][ T9718] hsr_slave_1: entered promiscuous mode [ 334.307291][ T9718] debugfs: 'hsr0' already exists in 'hsr' [ 334.307316][ T9718] Cannot create hsr debugfs directory [ 334.397822][ T9726] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.398196][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.398629][ T9726] bridge_slave_0: entered allmulticast mode [ 334.423607][ T9726] bridge_slave_0: entered promiscuous mode [ 334.442867][ T9726] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.443390][ T9726] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.443617][ T9726] bridge_slave_1: entered allmulticast mode [ 334.446271][ T9726] bridge_slave_1: entered promiscuous mode [ 334.765805][ T9726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.795564][ T9726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.889678][ T9726] team0: Port device team_slave_0 added [ 334.922917][ T9726] team0: Port device team_slave_1 added [ 335.010257][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.010271][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.010292][ T9726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.075246][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.075264][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.075295][ T9726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.242941][ T9726] hsr_slave_0: entered promiscuous mode [ 335.244723][ T9726] hsr_slave_1: entered promiscuous mode [ 335.246155][ T9726] debugfs: 'hsr0' already exists in 'hsr' [ 335.246179][ T9726] Cannot create hsr debugfs directory [ 335.474826][ T9718] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.517157][ T9718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.533721][ T9718] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 335.564780][ T9718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.584890][ T9718] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 335.615194][ T9718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.765992][ T9718] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 335.794063][ T9718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.820338][ T60] Bluetooth: hci4: command tx timeout [ 336.117678][ T9726] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 336.165634][ T9726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.179961][ T9726] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 336.224369][ T9726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.226220][ T9726] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 336.253113][ T9726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.255530][ T9726] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 336.284074][ T9726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.299257][ T60] Bluetooth: hci5: command tx timeout [ 336.395478][ T9718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.456445][ T9718] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.528164][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.528414][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.575646][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.575819][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.751360][ T9726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.834852][ T9726] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.872451][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.872758][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.916818][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.917047][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.626488][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.897964][ T9726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.902212][ T60] Bluetooth: hci4: command tx timeout [ 338.384872][ T60] Bluetooth: hci5: command tx timeout [ 338.488179][ T9718] veth0_vlan: entered promiscuous mode [ 338.523835][ T9718] veth1_vlan: entered promiscuous mode [ 338.655652][ T9726] veth0_vlan: entered promiscuous mode [ 338.688095][ T9718] veth0_macvtap: entered promiscuous mode [ 338.703435][ T9726] veth1_vlan: entered promiscuous mode [ 338.730308][ T9718] veth1_macvtap: entered promiscuous mode [ 338.813558][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.844484][ T9726] veth0_macvtap: entered promiscuous mode [ 338.858893][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.886071][ T9726] veth1_macvtap: entered promiscuous mode [ 338.903442][ T3417] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.905593][ T3417] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.916911][ T3417] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.938160][ T3417] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.135571][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.241781][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.460045][ T3417] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.466680][ T3417] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.534190][ T3417] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.575525][ T3417] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.746148][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.746170][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.982314][ T60] Bluetooth: hci4: command tx timeout [ 340.333198][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.333219][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.483653][ T60] Bluetooth: hci5: command tx timeout [ 340.743353][ T3417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.743376][ T3417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.933950][ T3417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.933990][ T3417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.870478][ T9826] tipc: Started in network mode [ 341.870511][ T9826] tipc: Node identity 1000001, cluster identity 4711 [ 341.870525][ T9826] tipc: Node number set to 16777217 [ 341.901441][ T9826] tipc: Enabling of bearer rejected, failed to enable media [ 342.199656][ T9833] rdma_rxe: rxe_newlink: failed to add lo [ 342.419443][ T9833] smc: net device lo applied user defined pnetid SYZ0 [ 342.653918][ T4965] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 342.653955][ T4965] block loop5: uevent: failed to send synthetic uevent: -12 [ 344.242699][ T9890] tipc: Started in network mode [ 344.242722][ T9890] tipc: Node identity 1000001, cluster identity 4711 [ 344.242736][ T9890] tipc: Node number set to 16777217 [ 344.245300][ T9890] tipc: Enabling of bearer rejected, failed to enable media [ 344.363246][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1233'. [ 345.693569][ T9915] tipc: Enabling of bearer rejected, already enabled [ 346.003677][ T9923] rdma_rxe: rxe_newlink: failed to add lo [ 348.149184][ T5690] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 348.306530][ T5690] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 348.306565][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.306587][ T5690] usb 2-1: Product: syz [ 348.306603][ T5690] usb 2-1: Manufacturer: syz [ 348.306618][ T5690] usb 2-1: SerialNumber: syz [ 350.579269][ T5690] ax88179_178a 2-1:1.0: probe with driver ax88179_178a failed with error -71 [ 350.638415][ T5690] usb 2-1: USB disconnect, device number 5 [ 352.254907][ T9977] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1263'. [ 352.268421][ T9977] netlink: 'syz.6.1263': attribute type 1 has an invalid length. [ 352.268443][ T9977] netlink: 'syz.6.1263': attribute type 2 has an invalid length. [ 352.286686][ T9977] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 357.876452][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.917013][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.932132][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.933511][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.934275][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 358.603481][ T9995] lo speed is unknown, defaulting to 1000 [ 358.960067][ T9995] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.960339][ T9995] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.960545][ T9995] bridge_slave_0: entered allmulticast mode [ 358.963316][ T9995] bridge_slave_0: entered promiscuous mode [ 358.966236][ T9995] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.966565][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.967008][ T9995] bridge_slave_1: entered allmulticast mode [ 358.991894][ T9995] bridge_slave_1: entered promiscuous mode [ 359.084628][ T9995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.099802][ T9995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.153083][ T9995] team0: Port device team_slave_0 added [ 359.157076][ T9995] team0: Port device team_slave_1 added [ 359.209787][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.209801][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.209821][ T9995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.212787][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.212798][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.212819][ T9995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.356913][ T9995] hsr_slave_0: entered promiscuous mode [ 359.358669][ T9995] hsr_slave_1: entered promiscuous mode [ 359.370029][ T9995] debugfs: 'hsr0' already exists in 'hsr' [ 359.370101][ T9995] Cannot create hsr debugfs directory [ 359.708322][ T9995] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 359.767329][ T9995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.779912][ T9995] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 359.811822][ T9995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.813190][ T9995] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 359.844780][ T9995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.039935][ T9995] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 360.059615][ T60] Bluetooth: hci6: command tx timeout [ 360.129623][ T9995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.303632][ T9995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.343090][ T9995] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.359157][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.359406][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.401797][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.401982][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.958268][ T9995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.295077][ T9995] veth0_vlan: entered promiscuous mode [ 361.325910][ T9995] veth1_vlan: entered promiscuous mode [ 361.383915][ T9995] veth0_macvtap: entered promiscuous mode [ 361.396804][ T9995] veth1_macvtap: entered promiscuous mode [ 361.453409][ T9995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.477346][ T9995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.508565][ T3402] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.511746][ T3402] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.515550][ T3402] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.555626][ T3402] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.141358][ T60] Bluetooth: hci6: command tx timeout [ 362.153878][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.153899][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.333313][ T3417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.333365][ T3417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.976724][ T4914] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.029302][ T4914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.058294][ T4914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.086308][ T4914] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.111518][ T4914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.233630][ T4914] Bluetooth: hci6: command tx timeout [ 364.548825][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1279'. [ 364.548888][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1279'. [ 364.784153][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1279'. [ 364.784199][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1279'. [ 364.967126][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1279'. [ 364.967181][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1279'. [ 365.201866][T10088] smc: net device lo applied user defined pnetid SYZ0 [ 365.203981][T10058] lo speed is unknown, defaulting to 1000 [ 365.420341][ T4914] Bluetooth: hci2: command 0x0406 tx timeout [ 366.083125][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.083595][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.083889][T10058] bridge_slave_0: entered allmulticast mode [ 366.088281][T10058] bridge_slave_0: entered promiscuous mode [ 366.134237][T10058] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.134645][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.134904][T10058] bridge_slave_1: entered allmulticast mode [ 366.138517][T10058] bridge_slave_1: entered promiscuous mode [ 366.210606][T10058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.221189][ T5614] Bluetooth: hci7: command tx timeout [ 366.230604][T10058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.280040][T10058] team0: Port device team_slave_0 added [ 366.284239][T10058] team0: Port device team_slave_1 added [ 366.302879][ T5614] Bluetooth: hci6: command tx timeout [ 366.344928][T10058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.344941][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.344962][T10058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.347706][T10058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.347717][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.347738][T10058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.515265][T10058] hsr_slave_0: entered promiscuous mode [ 366.517010][T10058] hsr_slave_1: entered promiscuous mode [ 366.518470][T10058] debugfs: 'hsr0' already exists in 'hsr' [ 366.518495][T10058] Cannot create hsr debugfs directory [ 367.112343][T10058] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 367.165780][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.166860][T10058] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 367.205488][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.206430][T10058] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 367.240142][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 367.243017][T10058] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 367.290934][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 367.491612][T10058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.523649][T10058] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.538858][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.547124][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.592448][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.592691][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.243308][T10058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.299168][ T5614] Bluetooth: hci7: command tx timeout [ 368.611323][T10058] veth0_vlan: entered promiscuous mode [ 368.636781][T10058] veth1_vlan: entered promiscuous mode [ 368.693080][T10058] veth0_macvtap: entered promiscuous mode [ 368.717802][T10058] veth1_macvtap: entered promiscuous mode [ 368.765932][T10058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.794888][T10058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.826824][ T2882] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.828768][ T2882] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.828817][ T2882] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.828857][ T2882] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.625686][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.625706][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.854885][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.854906][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.380176][ T5614] Bluetooth: hci7: command tx timeout [ 371.272486][T10142] tipc: Started in network mode [ 371.272535][T10142] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 371.273761][T10142] tipc: New replicast peer: 127.0.0.1 [ 371.305203][T10142] tipc: Enabled bearer , priority 10 [ 372.400478][ T10] tipc: Node number set to 3210880763 [ 372.462882][ T4914] Bluetooth: hci7: command tx timeout [ 372.993403][ T5614] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 372.998169][ T5614] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 373.043781][ T5614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 373.123469][ T5614] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 373.125880][ T5614] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 373.528413][T10154] lo speed is unknown, defaulting to 1000 [ 374.125927][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.137426][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.138298][T10154] bridge_slave_0: entered allmulticast mode [ 374.185093][T10154] bridge_slave_0: entered promiscuous mode [ 374.190935][T10154] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.191467][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.191794][T10154] bridge_slave_1: entered allmulticast mode [ 374.205948][T10154] bridge_slave_1: entered promiscuous mode [ 374.434477][T10154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.442895][T10154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.552787][T10154] team0: Port device team_slave_0 added [ 374.578204][T10154] team0: Port device team_slave_1 added [ 374.684441][T10154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.684455][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.684476][T10154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.687120][T10154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.687130][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.687151][T10154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.039506][T10154] hsr_slave_0: entered promiscuous mode [ 375.041306][T10154] hsr_slave_1: entered promiscuous mode [ 375.042771][T10154] debugfs: 'hsr0' already exists in 'hsr' [ 375.042796][T10154] Cannot create hsr debugfs directory [ 375.189224][ T5614] Bluetooth: hci8: command tx timeout [ 375.483779][T10154] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 375.508497][T10154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.517437][T10154] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 375.549140][T10154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.550412][T10154] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 375.591253][T10154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.601913][T10154] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 375.642005][T10154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.800951][T10154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.889797][T10154] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.898818][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.916367][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.961103][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.961288][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.528349][T10154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.871197][T10154] veth0_vlan: entered promiscuous mode [ 376.898639][T10154] veth1_vlan: entered promiscuous mode [ 376.975225][T10154] veth0_macvtap: entered promiscuous mode [ 376.992756][T10154] veth1_macvtap: entered promiscuous mode [ 377.034183][T10154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.056403][T10154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.083308][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.083360][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.083402][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.083442][ T56] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.270334][ T5614] Bluetooth: hci8: command tx timeout [ 377.769241][ T2882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.769264][ T2882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.857035][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.857057][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.712790][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.712900][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.350130][ T5614] Bluetooth: hci8: command tx timeout [ 380.835762][ T4914] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 380.863222][ T4914] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 380.867971][ T4914] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 380.903040][ T4914] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 380.904687][ T4914] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 381.404882][T10235] lo speed is unknown, defaulting to 1000 [ 381.419344][ T4914] Bluetooth: hci8: command tx timeout [ 381.826852][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.827231][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.827469][T10235] bridge_slave_0: entered allmulticast mode [ 381.836476][T10235] bridge_slave_0: entered promiscuous mode [ 381.858311][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.858742][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.861426][T10235] bridge_slave_1: entered allmulticast mode [ 381.870679][T10235] bridge_slave_1: entered promiscuous mode [ 381.907411][ C0] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated [ 381.972967][T10235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.978512][T10235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.046939][T10235] team0: Port device team_slave_0 added [ 382.055873][T10235] team0: Port device team_slave_1 added [ 382.130360][T10235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.130379][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.130410][T10235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.136923][T10235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.136935][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.136955][T10235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.317271][T10235] hsr_slave_0: entered promiscuous mode [ 382.324889][T10235] hsr_slave_1: entered promiscuous mode [ 382.326394][T10235] debugfs: 'hsr0' already exists in 'hsr' [ 382.326419][T10235] Cannot create hsr debugfs directory [ 383.034996][ T4914] Bluetooth: hci9: command tx timeout [ 385.025225][T10235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 385.071740][T10235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.080101][T10235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 385.099319][ T4914] Bluetooth: hci9: command tx timeout [ 385.130205][T10235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.148675][T10235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 385.197478][T10235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.206662][T10235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.239100][T10235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.590707][T10235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.631829][T10235] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.658178][ T3417] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.658520][ T3417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.703573][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.703826][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.668195][T10235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.878008][T10235] veth0_vlan: entered promiscuous mode [ 386.957566][T10235] veth1_vlan: entered promiscuous mode [ 387.100661][T10235] veth0_macvtap: entered promiscuous mode [ 387.179213][ T4914] Bluetooth: hci9: command tx timeout [ 387.207188][T10235] veth1_macvtap: entered promiscuous mode [ 387.481536][T10235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.556707][T10235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.641346][ T1375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.642549][ T1375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.642598][ T1375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.642637][ T1375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.861388][ T5614] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 387.907671][ T5614] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 387.917000][ T5614] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 387.935550][ T5614] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 387.946611][ T5614] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 389.259102][ T4914] Bluetooth: hci9: command tx timeout [ 389.607271][ T3402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.607293][ T3402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.963534][ T5331] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 390.132535][ T5331] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 390.133851][ T5331] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.133882][ T5331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 390.133897][ T5331] usb 10-1: SerialNumber: syz [ 390.228106][ T4914] Bluetooth: hci10: command tx timeout [ 390.330204][ T3402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.330226][ T3402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.955743][ T5331] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 390.990793][T10406] rdma_rxe: rxe_newlink: failed to add lo [ 391.085625][T10366] lo speed is unknown, defaulting to 1000 [ 391.087586][ T5331] usb 10-1: USB disconnect, device number 2 [ 392.299918][ T4914] Bluetooth: hci10: command tx timeout [ 392.670286][T10366] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.676486][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.676811][T10366] bridge_slave_0: entered allmulticast mode [ 392.750460][T10366] bridge_slave_0: entered promiscuous mode [ 392.788160][T10366] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.788540][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.788882][T10366] bridge_slave_1: entered allmulticast mode [ 392.816581][T10366] bridge_slave_1: entered promiscuous mode [ 392.912321][T10366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.931629][T10366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.347341][T10366] team0: Port device team_slave_0 added [ 393.391625][T10366] team0: Port device team_slave_1 added [ 393.706047][T10366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.706069][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.706103][T10366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.774008][T10366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.774028][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.774064][T10366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.182402][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1341'. [ 394.347885][ T37] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 394.361290][ T37] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 394.382820][ T4914] Bluetooth: hci10: command tx timeout [ 394.554671][T10366] hsr_slave_0: entered promiscuous mode [ 394.557334][T10366] hsr_slave_1: entered promiscuous mode [ 394.565500][T10366] debugfs: 'hsr0' already exists in 'hsr' [ 394.565567][T10366] Cannot create hsr debugfs directory [ 394.626037][ T5605] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 395.119419][T10475] ceph: No mds server is up or the cluster is laggy [ 395.158587][ T5605] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 396.462378][ T4914] Bluetooth: hci10: command tx timeout [ 396.857620][T10366] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.528240][T10366] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.101482][T10366] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.702619][T10366] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.021390][T10583] tipc: Started in network mode [ 399.021423][T10583] tipc: Node identity 887766554433221100ffeeddccbbaa99, cluster identity 4711 [ 399.096528][T10583] lo speed is unknown, defaulting to 1000 [ 400.653860][T10366] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 400.685576][T10366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.686685][T10366] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 400.737347][T10366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.738480][T10366] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 400.806019][T10366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.808294][T10366] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.897777][T10366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.138578][T10366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.194404][T10366] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.217225][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.217409][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.258736][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.258872][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.885343][T10366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.997648][T10366] veth0_vlan: entered promiscuous mode [ 402.016764][T10366] veth1_vlan: entered promiscuous mode [ 402.080259][T10366] veth0_macvtap: entered promiscuous mode [ 402.096514][T10366] veth1_macvtap: entered promiscuous mode [ 402.136977][T10366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.152492][T10366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.195984][ T3405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.225263][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.227731][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.227998][ T153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.164486][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.164507][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.271519][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.271542][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.655926][T10620] tipc: Enabled bearer , priority 10 [ 403.716271][T10623] tipc: Disabling bearer [ 405.025600][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1379'. [ 405.315365][ T5690] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 405.343989][T10638] ceph: No mds server is up or the cluster is laggy [ 406.289316][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 406.358693][T10666] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1388'. [ 406.497815][T10669] rdma_rxe: rxe_newlink: failed to add veth0 [ 406.512836][T10669] smc: net device veth0 applied user defined pnetid SYZ0 [ 410.695472][ T5614] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 410.749595][ T5614] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 410.753868][ T5614] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 410.816130][ T5614] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 410.817914][ T5614] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 411.645618][T10727] lo speed is unknown, defaulting to 1000 [ 412.090367][T10727] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.090836][T10727] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.106113][T10727] bridge_slave_0: entered allmulticast mode [ 412.120159][T10727] bridge_slave_0: entered promiscuous mode [ 412.124358][T10727] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.124734][T10727] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.124982][T10727] bridge_slave_1: entered allmulticast mode [ 412.127734][T10727] bridge_slave_1: entered promiscuous mode [ 412.217277][T10727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.234251][T10727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.283956][T10727] team0: Port device team_slave_0 added [ 412.288282][T10727] team0: Port device team_slave_1 added [ 412.347397][T10727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.347411][T10727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.347432][T10727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.397456][T10727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.397473][T10727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.397506][T10727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.521827][T10727] hsr_slave_0: entered promiscuous mode [ 412.535143][T10727] hsr_slave_1: entered promiscuous mode [ 412.537335][T10727] debugfs: 'hsr0' already exists in 'hsr' [ 412.537360][T10727] Cannot create hsr debugfs directory [ 413.029152][ T4914] Bluetooth: hci11: command tx timeout [ 413.672412][T10727] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.014987][T10727] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.353172][T10727] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.685051][T10727] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.099194][ T4914] Bluetooth: hci11: command tx timeout [ 415.100342][T10727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.144259][T10727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.156257][T10727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.215235][T10727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.217825][T10727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.253322][T10727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.256755][T10727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.328057][T10727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.502162][T10727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.546308][T10727] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.576633][ T3402] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.578476][ T3402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.654383][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.654638][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.208718][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1425'. [ 416.876861][T10727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.191554][ T4914] Bluetooth: hci11: command tx timeout [ 417.402463][T10727] veth0_vlan: entered promiscuous mode [ 417.441550][T10727] veth1_vlan: entered promiscuous mode [ 417.498187][T10727] veth0_macvtap: entered promiscuous mode [ 417.524617][T10727] veth1_macvtap: entered promiscuous mode [ 417.575878][T10727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.635756][T10727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.671567][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.671851][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.671894][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.671933][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.558871][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.559034][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.648706][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.648728][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.259183][ T4914] Bluetooth: hci11: command tx timeout [ 419.412075][ T5614] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 419.473761][ T5614] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 419.475502][ T5614] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 419.521296][ T5614] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 419.538450][ T5614] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 420.984631][T10818] lo speed is unknown, defaulting to 1000 [ 421.660376][ T4914] Bluetooth: hci12: command tx timeout [ 421.955044][T10818] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.955372][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.955592][T10818] bridge_slave_0: entered allmulticast mode [ 421.958409][T10818] bridge_slave_0: entered promiscuous mode [ 421.968463][T10818] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.970777][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.971716][T10818] bridge_slave_1: entered allmulticast mode [ 421.996214][T10818] bridge_slave_1: entered promiscuous mode [ 422.100718][T10818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.116536][T10818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.184238][T10818] team0: Port device team_slave_0 added [ 422.188648][T10818] team0: Port device team_slave_1 added [ 422.280731][T10818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.280744][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.280765][T10818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.283722][T10818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.283738][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.283771][T10818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.447449][T10818] hsr_slave_0: entered promiscuous mode [ 422.450047][T10818] hsr_slave_1: entered promiscuous mode [ 422.456285][T10818] debugfs: 'hsr0' already exists in 'hsr' [ 422.456352][T10818] Cannot create hsr debugfs directory [ 423.301032][ T5614] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 423.346528][ T5614] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 423.361551][ T5614] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 423.364571][ T5614] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 423.365814][ T5614] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 423.646097][T10818] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.750746][ T4914] Bluetooth: hci12: command tx timeout [ 424.256899][T10818] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.595298][T10818] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.672295][T10874] lo speed is unknown, defaulting to 1000 [ 424.796981][ T3431] rpcbind: server 127.0.0.1 not responding, timed out [ 424.924421][T10818] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.416562][T10874] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.417063][T10874] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.417372][T10874] bridge_slave_0: entered allmulticast mode [ 425.435325][T10874] bridge_slave_0: entered promiscuous mode [ 425.448114][T10874] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.448881][T10874] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.450534][T10874] bridge_slave_1: entered allmulticast mode [ 425.461742][T10874] bridge_slave_1: entered promiscuous mode [ 425.499147][ T4914] Bluetooth: hci13: command tx timeout [ 425.569906][T10874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.613121][T10874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.690341][T10874] team0: Port device team_slave_0 added [ 425.690439][T10818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.745427][T10818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.752509][T10874] team0: Port device team_slave_1 added [ 425.754880][T10818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.788695][T10818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.827657][T10818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.829538][ T4914] Bluetooth: hci12: command tx timeout [ 425.883095][T10818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.908886][T10818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.956114][T10818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.958796][T10874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.958808][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.958829][T10874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.152198][T10874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.152212][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.152240][T10874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.283083][T10874] hsr_slave_0: entered promiscuous mode [ 426.285097][T10874] hsr_slave_1: entered promiscuous mode [ 426.286806][T10874] debugfs: 'hsr0' already exists in 'hsr' [ 426.286833][T10874] Cannot create hsr debugfs directory [ 426.688202][T10818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.898248][T10874] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.071747][T10818] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.088330][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.088499][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.236324][T10874] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.313189][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.313376][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.579059][ T4914] Bluetooth: hci13: command tx timeout [ 427.643737][T10874] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.899589][ T4914] Bluetooth: hci12: command tx timeout [ 428.037600][T10874] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.503804][T10818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.828478][T10874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 428.868878][T10874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.873420][T10874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 428.905041][T10874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.920935][T10874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 428.970199][T10874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.975262][T10874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 429.006815][T10874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.047295][T10818] veth0_vlan: entered promiscuous mode [ 429.095065][T10818] veth1_vlan: entered promiscuous mode [ 429.334610][T10818] veth0_macvtap: entered promiscuous mode [ 429.365568][T10818] veth1_macvtap: entered promiscuous mode [ 429.450715][T10874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.458365][T10818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.514984][T10818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.548239][T10874] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.571129][ T1379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.576284][ T165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.628348][ T165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.640062][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.640234][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.677093][ T4914] Bluetooth: hci13: command tx timeout [ 429.692206][ T165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.812294][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.812492][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.715449][ T3405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.715475][ T3405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.996884][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.996907][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.624894][T10874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.739143][ T4914] Bluetooth: hci13: command tx timeout [ 432.078863][T10874] veth0_vlan: entered promiscuous mode [ 432.113692][T10874] veth1_vlan: entered promiscuous mode [ 432.244507][T10874] veth0_macvtap: entered promiscuous mode [ 432.272174][T10874] veth1_macvtap: entered promiscuous mode [ 432.326221][T10874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.350091][T10874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.388390][ T1375] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.403786][ T1375] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.411137][ T1375] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.411271][ T1375] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.261447][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.261469][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.358182][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.358198][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.459617][ T32] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 434.495679][ T32] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 434.758830][ T5690] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 435.253296][T10952] ceph: No mds server is up or the cluster is laggy [ 435.281952][ T5690] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 435.970059][ T5697] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 436.033540][ T5697] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 436.308543][ T5697] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 436.417651][ T5614] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 436.448830][ T5614] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 436.465213][ T5614] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 436.471745][ T5614] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 436.477447][ T5614] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 436.754177][T10977] ceph: No mds server is up or the cluster is laggy [ 436.830629][ T5697] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 437.661020][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 437.699760][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 437.841842][T10988] lo speed is unknown, defaulting to 1000 [ 437.964036][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 438.333501][T11007] ceph: No mds server is up or the cluster is laggy [ 438.651596][ T5771] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 438.657191][ T5771] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 438.709706][ T4914] Bluetooth: hci14: command tx timeout [ 438.884183][T10988] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.884499][T10988] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.884855][T10988] bridge_slave_0: entered allmulticast mode [ 438.909613][T10988] bridge_slave_0: entered promiscuous mode [ 438.969684][ T5771] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 439.016466][T10988] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.036641][T10988] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.036994][T10988] bridge_slave_1: entered allmulticast mode [ 439.084212][T10988] bridge_slave_1: entered promiscuous mode [ 439.221089][T10988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.256867][T10988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.451997][T11028] ceph: No mds server is up or the cluster is laggy [ 439.564120][ T5690] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 439.698006][T10988] team0: Port device team_slave_0 added [ 439.716066][T10988] team0: Port device team_slave_1 added [ 440.172311][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.172424][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.196944][T10988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.196961][T10988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.196990][T10988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.292593][T10988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.292727][T10988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.292878][T10988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.785259][ T4914] Bluetooth: hci14: command tx timeout [ 441.036509][T10988] hsr_slave_0: entered promiscuous mode [ 441.054310][T10988] hsr_slave_1: entered promiscuous mode [ 441.057525][T10988] debugfs: 'hsr0' already exists in 'hsr' [ 441.057550][T10988] Cannot create hsr debugfs directory [ 442.053149][ T5771] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 442.056285][ T5771] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 442.371353][ T5690] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 442.745055][T11076] ceph: No mds server is up or the cluster is laggy [ 442.838173][T10988] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.859953][ T4914] Bluetooth: hci14: command tx timeout [ 442.882009][ T5771] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 444.719489][ T5697] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 444.840000][T10988] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.884296][ T5697] usb 5-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice= 0.00 [ 444.884324][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.884342][ T5697] usb 5-1: Product: syz [ 444.884356][ T5697] usb 5-1: Manufacturer: syz [ 444.884371][ T5697] usb 5-1: SerialNumber: syz [ 444.939989][ T4914] Bluetooth: hci14: command tx timeout [ 446.133856][ T5697] smsc95xx 5-1:1.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 446.134163][ T5697] smsc95xx 5-1:1.0: probe with driver smsc95xx failed with error -71 [ 446.214124][ T5697] usb 5-1: USB disconnect, device number 3 [ 446.247522][T10988] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.421880][T11144] lo speed is unknown, defaulting to 1000 [ 446.441272][T11144] lo speed is unknown, defaulting to 1000 [ 446.443431][T11144] lo speed is unknown, defaulting to 1000 [ 446.854074][T10988] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.167056][T11144] infiniband syz1: set active [ 447.173371][T11144] infiniband syz1: added lo [ 447.243794][T11144] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 447.251596][T11144] infiniband syz1: Couldn't open port 1 [ 447.255385][T11144] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 447.255424][T11144] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 447.255476][T11144] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 447.541043][ T32] lo speed is unknown, defaulting to 1000 [ 447.576268][T11144] RDS/IB: syz1: added [ 447.576358][T11144] smc: adding ib device syz1 with port count 1 [ 447.576650][T11144] smc: ib device syz1 port 1 has no pnetid [ 447.576782][ T32] lo speed is unknown, defaulting to 1000 [ 447.615663][T11144] lo speed is unknown, defaulting to 1000 [ 448.740374][T11144] lo speed is unknown, defaulting to 1000 [ 449.400379][T10988] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.446674][T10988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.456520][T10988] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 449.564580][T10988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.588339][T10988] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 449.622410][T10988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.629570][T11144] lo speed is unknown, defaulting to 1000 [ 449.636631][T10988] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 449.707228][T10988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.046237][T11144] lo speed is unknown, defaulting to 1000 [ 451.149895][T10988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.266685][T10988] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.358082][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.378278][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.442501][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.442678][ T1375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.880524][T11144] lo speed is unknown, defaulting to 1000 [ 452.593194][T11144] lo speed is unknown, defaulting to 1000 [ 452.761626][T10988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.240896][T11144] lo speed is unknown, defaulting to 1000 [ 453.288171][T10988] veth0_vlan: entered promiscuous mode [ 453.323687][T10988] veth1_vlan: entered promiscuous mode [ 453.450648][T10988] veth0_macvtap: entered promiscuous mode [ 453.497059][T10988] veth1_macvtap: entered promiscuous mode [ 453.628068][T10988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.674563][T10988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.753875][ T165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.754148][ T165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.754398][ T165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.755369][ T165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.267265][T11144] lo speed is unknown, defaulting to 1000 [ 454.664326][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.664348][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.831439][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.831461][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.003450][T11144] lo speed is unknown, defaulting to 1000 [ 455.449942][T11144] lo speed is unknown, defaulting to 1000 [ 456.490069][T11144] lo speed is unknown, defaulting to 1000 [ 457.463767][T11144] lo speed is unknown, defaulting to 1000 [ 457.584756][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 457.588218][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 458.130037][T11144] lo speed is unknown, defaulting to 1000 [ 459.104554][T11144] lo speed is unknown, defaulting to 1000 [ 459.140255][T11293] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1551'. [ 459.959843][T11144] lo speed is unknown, defaulting to 1000 [ 459.987576][ T39] INFO: task syz.0.1181:9523 blocked for more than 143 seconds. [ 459.987604][ T39] Not tainted syzkaller #0 [ 459.987616][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 459.987627][ T39] task:syz.0.1181 state:D stack:28360 pid:9523 tgid:9516 ppid:5603 task_flags:0x400040 flags:0x00080002 [ 459.987721][ T39] Call Trace: [ 459.987790][ T39] [ 459.987861][ T39] __schedule+0x1709/0x5530 [ 459.988011][ T39] ? __pfx___schedule+0x10/0x10 [ 459.988090][ T39] rt_mutex_schedule+0x76/0xf0 [ 459.988114][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 459.988169][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 459.988203][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 459.988236][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 459.988267][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 459.988316][ T39] ? write_threads+0x3b4/0x610 [ 459.988359][ T39] ? write_threads+0x3b4/0x610 [ 459.988390][ T39] mutex_lock_nested+0x168/0x1d0 [ 459.988426][ T39] write_threads+0x3b4/0x610 [ 459.988464][ T39] ? __pfx_write_threads+0x10/0x10 [ 459.988517][ T39] ? _copy_from_user+0x94/0xb0 [ 459.988541][ T39] ? simple_transaction_get+0x130/0x170 [ 459.988570][ T39] nfsctl_transaction_write+0x112/0x160 [ 459.988604][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 459.988638][ T39] vfs_write+0x29f/0xbb0 [ 459.988675][ T39] ? __pfx_vfs_write+0x10/0x10 [ 459.988704][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 459.988727][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 459.988749][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 459.988772][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 459.988800][ T39] ? fdget_pos+0x252/0x320 [ 459.988833][ T39] ksys_write+0x156/0x270 [ 459.988862][ T39] ? __pfx_ksys_write+0x10/0x10 [ 459.994909][ T39] do_syscall_64+0x17b/0x530 [ 459.994989][ T39] ? irqentry_exit+0x10f/0x8f0 [ 459.995046][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.995112][ T39] ? clear_bhb_loop+0x40/0x90 [ 459.995189][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.995267][ T39] RIP: 0033:0x7f279c3bde99 [ 459.995384][ T39] RSP: 002b:00007f279a5f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.995496][ T39] RAX: ffffffffffffffda RBX: 00007f279c646090 RCX: 00007f279c3bde99 [ 459.995544][ T39] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003 [ 459.995587][ T39] RBP: 00007f279c453eaf R08: 0000000000000000 R09: 0000000000000000 [ 459.995623][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.995664][ T39] R13: 00007f279c646128 R14: 00007f279c646090 R15: 00007ffd8821cd28 [ 459.995754][ T39] [ 459.995786][ T39] INFO: task syz.4.1185:9536 blocked for more than 143 seconds. [ 459.995837][ T39] Not tainted syzkaller #0 [ 459.995862][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.995892][ T39] task:syz.4.1185 state:D stack:28360 pid:9536 tgid:9535 ppid:8216 task_flags:0x400140 flags:0x00080002 [ 459.996089][ T39] Call Trace: [ 459.996118][ T39] [ 459.996151][ T39] __schedule+0x1709/0x5530 [ 460.008791][ T39] ? __pfx___schedule+0x10/0x10 [ 460.009204][ T39] rt_mutex_schedule+0x76/0xf0 [ 460.009271][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 460.009360][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 460.009435][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 460.009511][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 460.009649][ T39] ? write_ports+0xb5/0xd20 [ 460.009751][ T39] ? write_ports+0xb5/0xd20 [ 460.009846][ T39] mutex_lock_nested+0x168/0x1d0 [ 460.009944][ T39] write_ports+0xb5/0xd20 [ 460.010035][ T39] ? __pfx_write_ports+0x10/0x10 [ 460.026177][ T39] ? _copy_from_user+0x94/0xb0 [ 460.040936][ T39] ? simple_transaction_get+0x130/0x170 [ 460.041039][ T39] nfsctl_transaction_write+0x112/0x160 [ 460.041137][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 460.041232][ T39] vfs_write+0x29f/0xbb0 [ 460.041370][ T39] ? __pfx_vfs_write+0x10/0x10 [ 460.041454][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 460.041519][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 460.041583][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 460.041639][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 460.041720][ T39] ? fdget_pos+0x252/0x320 [ 460.041805][ T39] ksys_write+0x156/0x270 [ 460.041876][ T39] ? __pfx_ksys_write+0x10/0x10 [ 460.041981][ T39] do_syscall_64+0x17b/0x530 [ 460.042082][ T39] ? irqentry_exit+0x10f/0x8f0 [ 460.042144][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.042209][ T39] ? clear_bhb_loop+0x40/0x90 [ 460.042285][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.042355][ T39] RIP: 0033:0x7f7d9e1ade99 [ 460.042413][ T39] RSP: 002b:00007f7d9c406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.042478][ T39] RAX: ffffffffffffffda RBX: 00007f7d9e435fa0 RCX: 00007f7d9e1ade99 [ 460.042525][ T39] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003 [ 460.042566][ T39] RBP: 00007f7d9e243eaf R08: 0000000000000000 R09: 0000000000000000 [ 460.042607][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.094292][ T39] R13: 00007f7d9e436038 R14: 00007f7d9e435fa0 R15: 00007ffeb78b2ad8 [ 460.094457][ T39] [ 460.094501][ T39] INFO: task syz.4.1185:9539 blocked for more than 143 seconds. [ 460.094563][ T39] Not tainted syzkaller #0 [ 460.094603][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.094641][ T39] task:syz.4.1185 state:D stack:28360 pid:9539 tgid:9535 ppid:8216 task_flags:0x400040 flags:0x00080002 [ 460.094812][ T39] Call Trace: [ 460.094835][ T39] [ 460.094869][ T39] __schedule+0x1709/0x5530 [ 460.095054][ T39] ? __pfx___schedule+0x10/0x10 [ 460.095183][ T39] rt_mutex_schedule+0x76/0xf0 [ 460.095248][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 460.095368][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 460.095456][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 460.095540][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 460.095658][ T39] ? write_ports+0xb5/0xd20 [ 460.095758][ T39] ? write_ports+0xb5/0xd20 [ 460.148008][ T39] mutex_lock_nested+0x168/0x1d0 [ 460.148115][ T39] write_ports+0xb5/0xd20 [ 460.148204][ T39] ? __pfx_write_ports+0x10/0x10 [ 460.148369][ T39] ? _copy_from_user+0x94/0xb0 [ 460.148434][ T39] ? simple_transaction_get+0x130/0x170 [ 460.148509][ T39] nfsctl_transaction_write+0x112/0x160 [ 460.148598][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 460.148687][ T39] vfs_write+0x29f/0xbb0 [ 460.148785][ T39] ? __pfx_vfs_write+0x10/0x10 [ 460.148994][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 460.149018][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 460.149038][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 460.149058][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 460.149083][ T39] ? fdget_pos+0x252/0x320 [ 460.149111][ T39] ksys_write+0x156/0x270 [ 460.149138][ T39] ? __pfx_ksys_write+0x10/0x10 [ 460.149170][ T39] do_syscall_64+0x17b/0x530 [ 460.149191][ T39] ? irqentry_exit+0x10f/0x8f0 [ 460.149209][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.149230][ T39] ? clear_bhb_loop+0x40/0x90 [ 460.149255][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.149275][ T39] RIP: 0033:0x7f7d9e1ade99 [ 460.149294][ T39] RSP: 002b:00007f7d9c3e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.149318][ T39] RAX: ffffffffffffffda RBX: 00007f7d9e436090 RCX: 00007f7d9e1ade99 [ 460.149333][ T39] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000004 [ 460.149347][ T39] RBP: 00007f7d9e243eaf R08: 0000000000000000 R09: 0000000000000000 [ 460.149361][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.149375][ T39] R13: 00007f7d9e436128 R14: 00007f7d9e436090 R15: 00007ffeb78b2ad8 [ 460.149409][ T39] [ 460.149429][ T39] INFO: task syz.4.1185:9541 blocked for more than 143 seconds. [ 460.149447][ T39] Not tainted syzkaller #0 [ 460.149458][ T39] "echo 0 >[ 460.149458][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.149468][ T39] task:syz.4.1185 state:D stack:28360 pid:9541 tgid:9535 ppid:8216 task_flags:0x400040 flags:0x00080002 [ 460.149535][ T39] Call Trace: [ 460.182154][ T39] [ 460.182216][ T39] __schedule+0x1709/0x5530 [ 460.182449][ T39] ? __pfx___schedule+0x10/0x10 [ 460.182587][ T39] rt_mutex_schedule+0x76/0xf0 [ 460.182676][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 460.182797][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 460.182878][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 460.182959][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 460.183097][ T39] ? write_threads+0x3b4/0x610 [ 460.183183][ T39] ? write_threads+0x3b4/0x610 [ 460.183216][ T39] mutex_lock_nested+0x168/0x1d0 [ 460.183328][ T39] write_threads+0x3b4/0x610 [ 460.183443][ T39] ? __pfx_write_threads+0x10/0x10 [ 460.183581][ T39] ? _copy_from_user+0x94/0xb0 [ 460.183637][ T39] ? simple_transaction_get+0x130/0x170 [ 460.194343][ T39] nfsctl_transaction_write+0x112/0x160 [ 460.194473][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 460.194562][ T39] vfs_write+0x29f/0xbb0 [ 460.194667][ T39] ? __pfx_vfs_write+0x10/0x10 [ 460.194749][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 460.194813][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 460.194870][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 460.194926][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 460.195002][ T39] ? fdget_pos+0x252/0x320 [ 460.195089][ T39] ksys_write+0x156/0x270 [ 460.195172][ T39] ? __pfx_ksys_write+0x10/0x10 [ 460.195270][ T39] do_syscall_64+0x17b/0x530 [ 460.195333][ T39] ? irqentry_exit+0x10f/0x8f0 [ 460.195404][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.195469][ T39] ? clear_bhb_loop+0x40/0x90 [ 460.195527][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.195558][ T39] RIP: 0033:0x7f7d9e1ade99 [ 460.195577][ T39] RSP: 002b:00007f7d9c3c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.195645][ T39] RAX: ffffffffffffffda RBX: 00007f7d9e436180 RCX: 00007f7d9e1ade99 [ 460.195703][ T39] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000005 [ 460.195768][ T39] RBP: 00007f7d9e243eaf R08: 0000000000000000 R09: 0000000000000000 [ 460.195809][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.209147][ T39] R13: 00007f7d9e436218 R14: 00007f7d9e436180 R15: 00007ffeb78b2ad8 [ 460.209256][ T39] [ 460.209567][ T39] [ 460.209567][ T39] Showing all locks held in the system: [ 460.209700][ T39] locks held by kworker/u8:0/12: 8, last CPU#1: [ 460.209863][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.210137][ T39] #1: ffffc90000117c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.210302][ T39] #2: ffff888061ae08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 460.210472][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.210569][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x7d0 [ 460.235638][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.235813][ T39] #6: ffff888072f9e268 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa20 [ 460.236033][ T39] #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 460.236182][ T39] locks held by pr/legacy/17: 4, last CPU#0: [ 460.236228][ T39] #0: ffffffff8e3b5a40 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 460.236413][ T39] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 460.236581][ T39] #2: ffffffff9a078558 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x17c/0x1b40 [ 460.236734][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.236908][ T39] locks held by kworker/1:0/32: 13, last CPU#1: [ 460.236961][ T39] #0: ffff888075a90538 ((wq_completion)wg-crypt-wg0#10){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.237117][ T39] #1: ffffc90000a6fc60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.248200][ T39] #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.248358][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.248517][ T39] #4: ffff888072e43790 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 460.248685][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 460.248848][ T39] #6: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.249423][ T39] #7: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x217/0xec0 [ 460.249576][ T39] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 460.249768][ T39] #9: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x1100 [ 460.283817][ T39] #10: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.283993][ T39] #11: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x294/0x3880 [ 460.284142][ T39] #12: ffff8880b873d810 (&list->lock#5){+.+.}-{3:3}, at: enqueue_to_backlog+0xfc/0xcc0 [ 460.284309][ T39] locks held by kworker/1:1/37: 12, on CPU#1: [ 460.284360][ T39] #0: ffff888036bb9938 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.284558][ T39] #1: ffffc90000ac7c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.284707][ T39] #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.284851][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.284995][ T39] #4: ffff88805eab5788 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 460.285118][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 460.285279][ T39] #6: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.320900][ T39] #7: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x920 [ 460.320961][ T39] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 460.321023][ T39] #9: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.321078][ T39] #10: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x294/0x3880 [ 460.321132][ T39] #11: ffff8880b873d810 (&list->lock#5){+.+.}-{3:3}, at: enqueue_to_backlog+0xfc/0xcc0 [ 460.321194][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 460.321211][ T39] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 460.321272][ T39] locks held by kworker/u8:3/56: 12, last CPU#1: [ 460.321288][ T39] #0: ffff88805fd05138 ((wq_completion)krds_cp_wq#10/0){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.321344][ T39] #1: ffffc9000122fc60 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.321406][ T39] #2: ffff88803c353298 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 460.321458][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.321511][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.321564][ T39] #5: ffff88803c3531e0 (k-slock-AF_INET){+...}-{3:3}, at: __tcp_close+0x6f5/0xed0 [ 460.323672][ T39] #6: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.323737][ T39] #7: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.323791][ T39] #8: ffffc90001bd1040 (&tcp_hashinfo.bhash[i].lock){+...}-{3:3}, at: inet_put_port+0x257/0xbb0 [ 460.323845][ T39] #9: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.323903][ T39] #10: ffffc90001fa6f70 (&tcp_hashinfo.bhash2[i].lock){+...}-{3:3}, at: inet_put_port+0x2c4/0xbb0 [ 460.323956][ T39] #11: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.324096][ T39] locks held by kworker/u8:4/67: 7, last CPU#0: [ 460.324158][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.324275][ T39] #1: ffffc9000152fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.324437][ T39] #2: ffff888041324310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 460.324626][ T39] #3: ffff888061746d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 460.324804][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.324945][ T39] #5: ffff8880b8640818 ((&pcs->lock)){+.+.}-{3:3}, at: __kmalloc_node_track_caller_noprof+0x326/0x7b0 [ 460.325127][ T39] #6: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 460.325366][ T39] locks held by kworker/u8:7/165: 6, last CPU#0: [ 460.325408][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.325590][ T39] #1: ffffc90004287c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.325729][ T39] #2: ffff88805f7f08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 460.325890][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.326029][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.326172][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.326414][ T39] locks held by kworker/u8:13/2881: 7, on CPU#1: [ 460.326458][ T39] #0: ffff888033b16138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.326604][ T39] #1: ffffc9000fc37c60 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.326749][ T39] #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.326915][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.327062][ T39] #4: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x294/0x3880 [ 460.327201][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: veth_xmit+0x66/0xe40 [ 460.327367][ T39] #6: ffff8880b873d810 (&list->lock#5){+.+.}-{3:3}, at: enqueue_to_backlog+0xfc/0xcc0 [ 460.327544][ T39] locks held by klogd/4954: 1, last CPU#1: [ 460.327586][ T39] #0: ffffffff8e3b5938 (syslog_lock){+.+.}-{4:4}, at: syslog_print+0x4ad/0x610 [ 460.327727][ T39] locks held by getty/5355: 2, on CPU#0: [ 460.327769][ T39] #0: ffff8880331960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 460.327943][ T39] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 460.328076][ T39] locks held by syz-executor/5587: 4, last CPU#1: [ 460.328092][ T39] #0: ffff88803b72ba30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 460.328283][ T39] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 460.328448][ T39] #2: ffff888034f14e98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 460.328616][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.328772][ T39] locks held by syz-executor/5601: 2, on CPU#1: [ 460.328815][ T39] #0: ffff8880372f20e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 460.367535][ T39] #1: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 460.367738][ T39] locks held by kworker/1:4/5690: 10, last CPU#1: [ 460.367782][ T39] #0: ffff8880732f3538 ((wq_completion)wg-crypt-wg0#12){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.367982][ T39] #1: ffffc90005b77c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.368062][ T39] #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.368254][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.368408][ T39] #4: ffff888034c9ecd8 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 460.368574][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 460.368769][ T39] #6: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.375662][ T39] #7: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x217/0xec0 [ 460.375856][ T39] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 460.376001][ T39] #9: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: fib_lookup+0x76/0x440 [ 460.376164][ T39] locks held by kworker/1:7/5771: 12, on CPU#1: [ 460.376214][ T39] #0: ffff888062221538 ((wq_completion)wg-crypt-wg0#9){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.376384][ T39] #1: ffffc9000610fc60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.376530][ T39] #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.376674][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.376823][ T39] #4: ffff88805eab7780 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 460.376978][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 460.439601][ T39] #6: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.439780][ T39] #7: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x920 [ 460.439929][ T39] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 460.440099][ T39] #9: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.440258][ T39] #10: ffffffff8e3c38e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x294/0x3880 [ 460.440397][ T39] #11: ffff8880b873d810 (&list->lock#5){+.+.}-{3:3}, at: enqueue_to_backlog+0xfc/0xcc0 [ 460.440522][ T39] locks held by syz.0.1181/9517: 3, on CPU#1: [ 460.440564][ T39] #0: ffff88803db13d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.440706][ T39] #1: ffff88802a8f4510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.440798][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.441005][ T39] locks held by syz.0.1181/9523: 3, on CPU#0: [ 460.441047][ T39] #0: ffff88803b39b528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.441184][ T39] #1: ffff88802a8f4510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.441349][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 460.441522][ T39] locks held by syz.4.1185/9536: 3, on CPU#1: [ 460.441564][ T39] #0: ffff88803dea2b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.459839][ T39] #1: ffff88805a080510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.460017][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.460196][ T39] locks held by syz.4.1185/9539: 3, on CPU#1: [ 460.460243][ T39] #0: ffff88803812c728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.460393][ T39] #1: ffff88805a080510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.460551][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.460732][ T39] locks held by syz.4.1185/9541: 3, on CPU#1: [ 460.460776][ T39] #0: ffff888025b27528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.460907][ T39] #1: ffff88805a080510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.461053][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 460.461235][ T39] locks held by syz.5.1256/9957: 3, on CPU#0: [ 460.461285][ T39] #0: ffff88802a3a2728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.461466][ T39] #1: ffff88802d0ee510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.470896][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 460.470965][ T39] locks held by syz.6.1269/9993: 3, on CPU#0: [ 460.470982][ T39] #0: ffff88803d823d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.471036][ T39] #1: ffff88805e86e510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.471095][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 460.471158][ T39] locks held by syz.6.1269/9994: 3, on CPU#0: [ 460.471173][ T39] #0: ffff888035794928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.471227][ T39] #1: ffff88805e86e510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.471295][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.471357][ T39] locks held by syz.6.1269/9997: 3, on CPU#1: [ 460.471373][ T39] #0: ffff888035788928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.471425][ T39] #1: ffff88805e86e510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.471486][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 460.471549][ T39] locks held by syz.6.1269/10000: 1, on CPU#1: [ 460.471565][ T39] #0: ffff888035788928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.471623][ T39] locks held by syz.1.1280/10073: 3, on CPU#0: [ 460.471639][ T39] #0: ffff888025af3328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.471693][ T39] #1: ffff888061c50510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.471754][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.471817][ T39] locks held by syz.1.1280/10077: 3, on CPU#0: [ 460.471833][ T39] #0: ffff8880269f8728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.471887][ T39] #1: ffff888061c50510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.471948][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 460.472013][ T39] locks held by syz.7.1295/10147: 3, on CPU#1: [ 460.472029][ T39] #0: ffff8880365a2d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.472082][ T39] #1: ffff888035dec510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.472143][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 460.472207][ T39] locks held by syz.7.1295/10148: 3, on CPU#0: [ 460.472223][ T39] #0: ffff8880365a3728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.472282][ T39] #1: ffff888035dec510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.472347][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.472411][ T39] locks held by syz.7.1295/10150: 3, on CPU#0: [ 460.472427][ T39] #0: ffff888034862328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.472481][ T39] #1: ffff888035dec510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.480426][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 460.480632][ T39] locks held by syz.3.1346/10499: 3, on CPU#0: [ 460.480649][ T39] #0: ffff8880365c1b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.480792][ T39] #1: ffff8880625fc510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.480973][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 460.481140][ T39] locks held by syz.3.1346/10501: 3, on CPU#1: [ 460.481183][ T39] #0: ffff88803ec47328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.481332][ T39] #1: ffff8880625fc510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.481468][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.481606][ T39] locks held by syz.3.1346/10506: 3, on CPU#1: [ 460.481655][ T39] #0: ffff888076f3e328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.481784][ T39] #1: ffff8880625fc510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.481944][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 460.511923][ T39] locks held by syz.9.1371/10627: 3, on CPU#0: [ 460.511987][ T39] #0: ffff88803de49f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.512156][ T39] #1: ffff88802a920510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.512352][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.512530][ T39] locks held by syz.0.1398/10690: 3, on CPU#0: [ 460.512571][ T39] #0: ffff88802a936128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.512708][ T39] #1: ffff88807350c510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.512858][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 460.513026][ T39] locks held by syz.0.1398/10691: 3, on CPU#0: [ 460.513062][ T39] #0: ffff88802a936528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.513211][ T39] #1: ffff88807350c510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.513316][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.585551][ T39] locks held by syz.8.1441/10848: 3, on CPU#0: [ 460.585624][ T39] #0: ffff88803794f728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.585821][ T39] #1: ffff88805da34510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.585991][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.586162][ T39] locks held by syz.8.1441/10851: 3, on CPU#0: [ 460.586206][ T39] #0: ffff8880357b3328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.586389][ T39] #1: ffff88805da34510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.586547][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 460.586717][ T39] locks held by kworker/u8:2/10883: 6, last CPU#1: [ 460.586761][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.586908][ T39] #1: ffffc9000613fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 460.587070][ T39] #2: ffff88803d900310 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 460.587326][ T39] #3: ffff888076ab6920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 460.677245][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.677428][ T39] #5: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 460.677620][ T39] locks held by syz.2.1510/11144: 7, last CPU#1: [ 460.677663][ T39] #0: ffffffff9a0c6618 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x340/0xa40 [ 460.677834][ T39] #1: ffffffff8f51f3c0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 460.677990][ T39] #2: ffffffff8f510300 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 460.678149][ T39] #3: ffffffff8f510540 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x27c/0x3e0 [ 460.678309][ T39] #4: ffff888029e691c8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 460.678454][ T39] #5: ffffffff8e50af90 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 460.678611][ T39] #6: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 460.678773][ T39] locks held by syz.5.1534/11224: 3, on CPU#0: [ 460.678834][ T39] #0: ffff888025b26b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.761667][ T39] #1: ffff88804e30e510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.761842][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 460.762016][ T39] locks held by syz.5.1534/11225: 3, on CPU#1: [ 460.762072][ T39] #0: ffff88802b8ced28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.762242][ T39] #1: ffff88804e30e510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.762415][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 460.762617][ T39] locks held by syz.5.1534/11226: 3, on CPU#0: [ 460.762662][ T39] #0: ffff88802b8cef28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 460.762801][ T39] #1: ffff88804e30e510 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 460.762962][ T39] #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 460.763126][ T39] locks held by syz.4.1554/11298: 1, on CPU#1: [ 460.763177][ T39] #0: ffffffff8e3c9a70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 460.763335][ T39] [ 460.763355][ T39] ============================================= [ 460.763355][ T39] [ 460.763468][ T39] NMI backtrace for cpu 1 [ 460.763551][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 460.763624][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 460.763667][ T39] Call Trace: [ 460.763689][ T39] [ 460.763712][ T39] dump_stack_lvl+0xe8/0x150 [ 460.763797][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 460.763883][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 460.763971][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 460.764060][ T39] sys_info+0x135/0x170 [ 460.764135][ T39] watchdog+0xfd7/0x1030 [ 460.764242][ T39] ? watchdog+0x1c7/0x1030 [ 460.764349][ T39] kthread+0x388/0x470 [ 460.764430][ T39] ? __pfx_watchdog+0x10/0x10 [ 460.764517][ T39] ? __pfx_kthread+0x10/0x10 [ 460.764602][ T39] ret_from_fork+0x514/0xb70 [ 460.764690][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 460.764773][ T39] ? __switch_to+0xc89/0x1420 [ 460.764839][ T39] ? __pfx_kthread+0x10/0x10 [ 460.764872][ T39] ret_from_fork_asm+0x1a/0x30 [ 460.765004][ T39] [ 460.765083][ T39] Sending NMI from CPU 1 to CPUs 0: [ 460.765143][ C0] NMI backtrace for cpu 0 [ 460.765163][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 460.765184][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 460.765196][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 460.765221][ C0] Code: e8 6e 3b 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 92 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 460.765282][ C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 460.765298][ C0] RAX: 1ffffffff340f000 RBX: 00000000000003fd RCX: 0000000000000000 [ 460.765311][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 460.765323][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.765335][ C0] R10: dffffc0000000000 R11: ffffffff856067f0 R12: dffffc0000000000 [ 460.765350][ C0] R13: 0000000000000000 R14: ffffffff9a078580 R15: 0000000000000000 [ 460.765362][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 460.765378][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.765391][ C0] CR2: 0000001b33124000 CR3: 0000000077256000 CR4: 00000000003526f0 [ 460.765407][ C0] Call Trace: [ 460.765414][ C0] [ 460.765429][ C0] wait_for_lsr+0x190/0x300 [ 460.765453][ C0] serial8250_console_write+0x113a/0x1b40 [ 460.765482][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 460.765509][ C0] ? console_flush_one_record+0x49d/0xb90 [ 460.765541][ C0] console_flush_one_record+0x667/0xb90 [ 460.765573][ C0] ? console_flush_one_record+0xfa/0xb90 [ 460.765604][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 460.765635][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 460.765657][ C0] legacy_kthread_func+0x1b6/0x250 [ 460.765687][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 460.765716][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 460.765743][ C0] ? __kthread_parkme+0x71/0x1f0 [ 460.765766][ C0] ? __kthread_parkme+0x196/0x1f0 [ 460.765796][ C0] kthread+0x388/0x470 [ 460.765821][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 460.765848][ C0] ? __pfx_kthread+0x10/0x10 [ 460.765874][ C0] ret_from_fork+0x514/0xb70 [ 460.765901][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 460.765927][ C0] ? __switch_to+0xc89/0x1420 [ 460.765951][ C0] ? __pfx_kthread+0x10/0x10 [ 460.765976][ C0] ret_from_fork_asm+0x1a/0x30 [ 460.766012][ C0] [ 460.822686][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 460.822750][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 460.822818][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 460.822854][ T39] Call Trace: [ 460.822883][ T39] [ 460.822906][ T39] vpanic+0x56c/0xa60 [ 460.822984][ T39] ? __pfx___schedule+0x10/0x10 [ 460.823092][ T39] ? __pfx_vpanic+0x10/0x10 [ 460.823173][ T39] panic+0xc5/0xd0 [ 460.823226][ T39] ? __pfx_panic+0x10/0x10 [ 460.823280][ T39] ? preempt_schedule_common+0x82/0xd0 [ 460.823378][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 460.823435][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 460.823525][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 460.823601][ T39] watchdog+0x1030/0x1030 [ 460.823673][ T39] ? watchdog+0x1c7/0x1030 [ 460.823810][ T39] kthread+0x388/0x470 [ 460.823896][ T39] ? __pfx_watchdog+0x10/0x10 [ 460.823983][ T39] ? __pfx_kthread+0x10/0x10 [ 460.824070][ T39] ret_from_fork+0x514/0xb70 [ 460.824159][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 460.824247][ T39] ? __switch_to+0xc89/0x1420 [ 460.824318][ T39] ? __pfx_kthread+0x10/0x10 [ 460.824403][ T39] ret_from_fork_asm+0x1a/0x30 [ 460.824531][ T39] [ 460.825164][ T39] Kernel Offset: disabled