last executing test programs: 1.79772256s ago: executing program 4 (id=5): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) (async) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) 1.728944118s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x2) close(r2) write(0xffffffffffffffff, &(0x7f0000000400)="013030303030302032303030303030303030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x76) 1.656520889s ago: executing program 0 (id=10): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) listen(r0, 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 1.65633047s ago: executing program 0 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @random="0242ac110002"}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syz_tun\x00'}) syz_emit_ethernet(0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000242ac110001000742420300000000"], 0x0) 1.627699001s ago: executing program 0 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, [@algo_crypt={0x0, 0xa, {{'cbc(aes)\x00'}, 0x80, "00112233445566778899aabbccddeeff"}}, @replay_esn_val={0x0, 0x15, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}}, 0xe8) sendto$inet(r1, &(0x7f0000000500)="12345678", 0x8, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) 1.618315269s ago: executing program 0 (id=13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) write(r2, &(0x7f0000000240)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 1.159633593s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000550)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000650)='100', 0x3) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000700)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000750)={0x2, 0x1234, @loopback}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/self/fail-nth\x00', 0x1, 0x0) write(r4, &(0x7f0000000850)='4', 0x1) sendto$inet(r3, &(0x7f0000000700)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000750)={0x2, 0x1234, @loopback}, 0x10) 1.079900052s ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x30}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000700)=@raw=[@generic={0xbf, 0x2, 0x1}, @generic={0xb7, 0x3}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0x7b, 0xa, 0x3, 0xffc8}, @generic={0x7b, 0xa, 0x3, 0xffd0}, @generic={0x7b, 0xa, 0x3, 0xffd8}, @generic={0x7b, 0xa, 0x3, 0xffe0}, @generic={0x7b, 0xa, 0x3, 0xffe8}, @generic={0x7b, 0xa, 0x3, 0xfff0}, @generic={0x7b, 0xa, 0x3, 0xfff8}, @generic={0xbf, 0x1, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x10, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789abcdef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.022735017s ago: executing program 3 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}]}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 939.187661ms ago: executing program 3 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000100000000000000000000000000000000001c0012800b00010076657468300000000c000280140001000b0001007665746831000000"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001000000000000000000000000000100000001000000100003800b0001007665746830000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001000000000000000000000000000100000001000000100003800b0001007665746831000000"], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x28}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x8b88) bind$packet(r3, &(0x7f0000000100)={0x11, 0x8b88, 0x3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r3, &(0x7f0000000200)="ffffffffffff02000000000188ca1000"/66, 0x40, 0x0, &(0x7f0000000100)={0x11, 0x8b88, 0x3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 938.15371ms ago: executing program 4 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x76) 911.881147ms ago: executing program 4 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4) connect$inet(r1, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000700)='hello', 0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) 856.535543ms ago: executing program 3 (id=22): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) 856.164905ms ago: executing program 4 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000020)={&(0x7f0000000040)={0x20, 0x10, 0x1, 0x0, 0x0, {0x3}, [@typed={0xb, 0x2, 0x0, 0x0, @str='nlctrl\x00'}]}, 0x20}}, 0x0) 855.977534ms ago: executing program 4 (id=24): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind(r1, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x10) connect(r1, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300), 0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x1, 0xa, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x9c) nanosleep(&(0x7f0000000600)={0x0, 0x11e1a300}, 0x0) 766.170819ms ago: executing program 0 (id=25): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) getsockname(r0, &(0x7f0000000104), &(0x7f0000000120)=0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000600)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='addr\x00', &(0x7f0000000800)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000900)='nfsvers\x00', &(0x7f0000000a00)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b00)='proto\x00', &(0x7f0000000c00)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000d00)='port\x00', &(0x7f0000000e00)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000f00)='mountport\x00', &(0x7f0000001000)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='mountproto\x00', &(0x7f0000001200)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000001300)='ro\x00', 0x0, 0x0) syz_clone(0x511, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 544.58522ms ago: executing program 1 (id=27): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'dvmrp0\x00', 0x1}) r2 = socket(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000100)={'dvmrp0\x00', 0x0, 0x1}) 535.314721ms ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='3\n', 0x2) write(r1, &(0x7f0000000200)='4\n', 0x2) write(r1, &(0x7f0000000240)='5\n', 0x2) write(r1, &(0x7f0000000280)='6\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='-2 -3\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1\n', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x801, @loopback}, 0x10) 502.977099ms ago: executing program 1 (id=29): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000700)=@raw=[@generic={0xbf, 0x2, 0x1}, @generic={0xb7, 0x3}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0x7b, 0xa, 0x3, 0xffc8}, @generic={0x7b, 0xa, 0x3, 0xffd0}, @generic={0x7b, 0xa, 0x3, 0xffd8}, @generic={0x7b, 0xa, 0x3, 0xffe0}, @generic={0x7b, 0xa, 0x3, 0xffe8}, @generic={0x7b, 0xa, 0x3, 0xfff0}, @generic={0x7b, 0xa, 0x3, 0xfff8}, @generic={0xbf, 0x1, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x10, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789abcdef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 483.706094ms ago: executing program 1 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/65536, 0x10000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x10, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r1, 0x80000000) sendmsg$xdp(r1, &(0x7f0000000200), 0x40) 433.430557ms ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="013030303030302032303030303030303030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x76) 432.32955ms ago: executing program 1 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000400)="0123456789", 0xa) read(r5, &(0x7f0000000500), 0xa) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000700)={0x3}, 0x0) 220.503864ms ago: executing program 2 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1000, 0x2}}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0x2, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x6, 0x3, '\x00\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}}}, 0xf4}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 220.311723ms ago: executing program 2 (id=34): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x49, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "000012341234567890123456"}}}}, 0x0) 220.130222ms ago: executing program 2 (id=35): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_ivalue=0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000010)={&(0x7f0000000020)=@getlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000000000000000001142420300"/33], 0x0) 184.279008ms ago: executing program 2 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca2000002800000001010000010100000200"/50, 0x32) write(r0, &(0x7f0000000600)="ffffffffffff00000000000188ca2000002800000002010000010100000200"/50, 0x32) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x3e8, 0x1}}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='hello world', 0xb}], 0x1}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x989680}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff00000000000188ca200000280000000001000001010000020000000000000000000000000000000100010000", 0x32) 116.068251ms ago: executing program 2 (id=37): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000)=nil, 0x1000, 0x3, 0x32, 0xffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{0x0, 0x1000}, 0x1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000001200)=""/4, &(0x7f0000001100)=0x4) (async) read(r1, &(0x7f0000000300), 0x20) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000400)={{0x0, 0x1000}}) 542.842µs ago: executing program 3 (id=38): r0 = socket(0x8, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40046102, &(0x7f0000000100)="0100") 221.575µs ago: executing program 3 (id=39): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) 0s ago: executing program 4 (id=40): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789abcdef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 21.657588][ T4665] cgroup: Unknown subsys name 'net' [ 21.738777][ T4665] cgroup: Unknown subsys name 'cpuset' [ 21.740659][ T4665] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.880199][ T4665] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 22.697422][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 22.699217][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 22.699825][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 22.699916][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 22.701420][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 22.705506][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 22.707796][ T4723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 22.708225][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 22.708864][ T4716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 22.711184][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 22.712104][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 22.712437][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 22.712585][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 22.712903][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 22.713103][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 22.737006][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 22.738770][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 22.739403][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 22.744735][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 22.747888][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 22.749532][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 22.749882][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 22.750255][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 22.750476][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 22.756906][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 23.120352][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.122235][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.123726][ T4717] bridge_slave_0: entered allmulticast mode [ 23.125523][ T4717] bridge_slave_0: entered promiscuous mode [ 23.141955][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.143379][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.143477][ T4717] bridge_slave_1: entered allmulticast mode [ 23.143964][ T4717] bridge_slave_1: entered promiscuous mode [ 23.197005][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.201439][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.216015][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.216168][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.216244][ T4727] bridge_slave_0: entered allmulticast mode [ 23.216687][ T4727] bridge_slave_0: entered promiscuous mode [ 23.225845][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.227247][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.228732][ T4722] bridge_slave_0: entered allmulticast mode [ 23.230472][ T4722] bridge_slave_0: entered promiscuous mode [ 23.235226][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.235744][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.235817][ T4727] bridge_slave_1: entered allmulticast mode [ 23.236599][ T4727] bridge_slave_1: entered promiscuous mode [ 23.247873][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.247921][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.248021][ T4722] bridge_slave_1: entered allmulticast mode [ 23.248452][ T4722] bridge_slave_1: entered promiscuous mode [ 23.256025][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.257111][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.259827][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.261198][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.261292][ T4713] bridge_slave_0: entered allmulticast mode [ 23.261750][ T4713] bridge_slave_0: entered promiscuous mode [ 23.262685][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.262708][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.262757][ T4713] bridge_slave_1: entered allmulticast mode [ 23.263166][ T4713] bridge_slave_1: entered promiscuous mode [ 23.268986][ T4717] team0: Port device team_slave_0 added [ 23.269914][ T4717] team0: Port device team_slave_1 added [ 23.274266][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.275916][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.289258][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.296727][ T4727] team0: Port device team_slave_0 added [ 23.300862][ T4722] team0: Port device team_slave_0 added [ 23.302769][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.306488][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.307775][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.312582][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.316171][ T4727] team0: Port device team_slave_1 added [ 23.319263][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.319354][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.319468][ T4712] bridge_slave_0: entered allmulticast mode [ 23.320001][ T4712] bridge_slave_0: entered promiscuous mode [ 23.320874][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.320894][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.320977][ T4712] bridge_slave_1: entered allmulticast mode [ 23.321552][ T4712] bridge_slave_1: entered promiscuous mode [ 23.322636][ T4722] team0: Port device team_slave_1 added [ 23.329760][ T4713] team0: Port device team_slave_0 added [ 23.330005][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.330012][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.330026][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.331482][ T4713] team0: Port device team_slave_1 added [ 23.350038][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.350063][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.350078][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.350664][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.350671][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.350684][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.361033][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.361044][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.361058][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.361649][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.361657][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.361672][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.364661][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.364670][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.364681][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.365663][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.365672][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.365688][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.369629][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.371021][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.398486][ T4727] hsr_slave_0: entered promiscuous mode [ 23.398870][ T4727] hsr_slave_1: entered promiscuous mode [ 23.409838][ T4712] team0: Port device team_slave_0 added [ 23.414433][ T4717] hsr_slave_0: entered promiscuous mode [ 23.416180][ T4717] hsr_slave_1: entered promiscuous mode [ 23.416603][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 23.416642][ T4717] Cannot create hsr debugfs directory [ 23.423705][ T4712] team0: Port device team_slave_1 added [ 23.428960][ T4713] hsr_slave_0: entered promiscuous mode [ 23.429324][ T4713] hsr_slave_1: entered promiscuous mode [ 23.429544][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 23.429554][ T4713] Cannot create hsr debugfs directory [ 23.431883][ T4722] hsr_slave_0: entered promiscuous mode [ 23.432197][ T4722] hsr_slave_1: entered promiscuous mode [ 23.432410][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 23.432419][ T4722] Cannot create hsr debugfs directory [ 23.453707][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.453737][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.453933][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.470528][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.470556][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.470570][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.515899][ T4712] hsr_slave_0: entered promiscuous mode [ 23.517543][ T4712] hsr_slave_1: entered promiscuous mode [ 23.518891][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 23.520019][ T4712] Cannot create hsr debugfs directory [ 23.610236][ T4717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.613419][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.614178][ T4717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.616170][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.619569][ T4717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.621919][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.622230][ T4717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.624687][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.641936][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.641993][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.642155][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.642189][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.651290][ T4727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.653548][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.654207][ T4727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.656988][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.662043][ T4727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.664417][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.666461][ T4727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.668628][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.681301][ T4722] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.683800][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.689924][ T4722] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.692315][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.692652][ T4722] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.694680][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.699835][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.699881][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.699957][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.699986][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.701323][ T4722] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.703519][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.724553][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.727121][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.728953][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.731358][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.733147][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.735914][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.747584][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.749832][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.758967][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.763891][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.763935][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.764010][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.764038][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.777865][ T4712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.780542][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.784205][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.786001][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.788056][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.789493][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.790912][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.792256][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.805421][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.815905][ T4712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.818609][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.820531][ T4712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.823548][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.826736][ T4712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.829155][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.831608][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.834443][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.834498][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.835096][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.835117][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.847964][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.864684][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.864727][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.865088][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.865116][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.873078][ T4727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.875100][ T4727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.887643][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.914136][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.929062][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.941801][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.957778][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.967229][ T3586] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.967272][ T3586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.971304][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.974501][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.974553][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.977209][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.984883][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.984939][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.992836][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.992863][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.014069][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.016531][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.037549][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.039558][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.055013][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.057669][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.062584][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.062633][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.063339][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.063370][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.121011][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.172359][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.174875][ T4717] veth0_vlan: entered promiscuous mode [ 24.178590][ T4717] veth1_vlan: entered promiscuous mode [ 24.190455][ T4717] veth0_macvtap: entered promiscuous mode [ 24.193146][ T4717] veth1_macvtap: entered promiscuous mode [ 24.198581][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.201288][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.213231][ T4727] veth0_vlan: entered promiscuous mode [ 24.224987][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.227702][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.228483][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.228524][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.242493][ T4727] veth1_vlan: entered promiscuous mode [ 24.283860][ T4727] veth0_macvtap: entered promiscuous mode [ 24.289467][ T4727] veth1_macvtap: entered promiscuous mode [ 24.289648][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.289660][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.318829][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.320494][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.320756][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.322296][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.331615][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.332775][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.339117][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.341542][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.341600][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.341629][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.341649][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.364433][ T4713] veth0_vlan: entered promiscuous mode [ 24.368083][ T4712] veth0_vlan: entered promiscuous mode [ 24.369865][ T4712] veth1_vlan: entered promiscuous mode [ 24.397079][ T4717] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.400585][ T4713] veth1_vlan: entered promiscuous mode [ 24.422100][ T4712] veth0_macvtap: entered promiscuous mode [ 24.423360][ T4712] veth1_macvtap: entered promiscuous mode [ 24.451046][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.455905][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.461957][ T1363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.462071][ T1363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.462099][ T1363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.462123][ T1363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.484530][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.484570][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.495136][ T4713] veth0_macvtap: entered promiscuous mode [ 24.502159][ T4713] veth1_macvtap: entered promiscuous mode [ 24.519779][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.519802][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.529723][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.531043][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.539592][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.539650][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.539672][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.539690][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.543969][ T4722] veth0_vlan: entered promiscuous mode [ 24.554528][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.554563][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.568310][ T4722] veth1_vlan: entered promiscuous mode [ 24.606962][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.606994][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.616250][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.616284][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.622733][ T4722] veth0_macvtap: entered promiscuous mode [ 24.628594][ T4722] veth1_macvtap: entered promiscuous mode [ 24.638814][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.638849][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.643411][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.650428][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.658053][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.658097][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.658115][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.658131][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.713809][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.713843][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.741951][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.744079][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.745924][ T4720] Bluetooth: hci0: command tx timeout [ 24.745935][ T50] Bluetooth: hci2: command tx timeout [ 24.746185][ T4714] Bluetooth: hci3: command tx timeout [ 24.749329][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.751096][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.825717][ T4714] Bluetooth: hci4: command tx timeout [ 24.825759][ T50] Bluetooth: hci1: command tx timeout [ 24.837665][ T39] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.851173][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 24.923529][ T4921] bridge0: port 3(syz_tun) entered blocking state [ 24.924313][ T4921] bridge0: port 3(syz_tun) entered disabled state [ 24.924481][ T4921] syz_tun: entered allmulticast mode [ 24.925085][ T4921] syz_tun: entered promiscuous mode [ 24.926651][ T4921] bridge0: port 3(syz_tun) entered blocking state [ 24.926689][ T4921] bridge0: port 3(syz_tun) entered listening state [ 24.934521][ T4921] bridge0: port 3(syz_tun) entered disabled state [ 24.961301][ T4923] Zero length message leads to an empty skb [ 25.444720][ T4934] FAULT_INJECTION: forcing a failure. [ 25.444720][ T4934] name failslab, interval 1, probability 100, space 0, times 1 [ 25.448236][ T4934] CPU: 1 UID: 0 PID: 4934 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT [ 25.448261][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 25.448268][ T4934] Call trace: [ 25.448272][ T4934] show_stack+0x2c/0x3c (C) [ 25.448297][ T4934] __dump_stack+0x30/0x40 [ 25.448310][ T4934] dump_stack_lvl+0xd8/0x12c [ 25.448323][ T4934] dump_stack+0x1c/0x28 [ 25.448334][ T4934] should_fail_ex+0x41c/0x590 [ 25.448354][ T4934] should_failslab+0xc4/0x120 [ 25.448363][ T4934] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 25.448374][ T4934] __alloc_skb+0x1f0/0x610 [ 25.448385][ T4934] alloc_skb_with_frags+0xb8/0x690 [ 25.448394][ T4934] sock_alloc_send_pskb+0x740/0x850 [ 25.448403][ T4934] __ip_append_data+0x26cc/0x3744 [ 25.448413][ T4934] ip_make_skb+0x208/0x254 [ 25.448421][ T4934] udp_sendmsg+0x13a0/0x1bd4 [ 25.448434][ T4934] inet_sendmsg+0xb4/0xd8 [ 25.448447][ T4934] __sock_sendmsg+0xc8/0x17c [ 25.448456][ T4934] __sys_sendto+0x250/0x328 [ 25.448465][ T4934] __arm64_sys_sendto+0xe4/0x104 [ 25.448475][ T4934] invoke_syscall+0x98/0x244 [ 25.448487][ T4934] el0_svc_common+0xec/0x23c [ 25.448499][ T4934] do_el0_svc+0x4c/0x5c [ 25.448511][ T4934] el0_svc+0x64/0x260 [ 25.448523][ T4934] el0t_64_sync_handler+0x48/0x148 [ 25.448534][ T4934] el0t_64_sync+0x198/0x19c [ 25.450504][ T4665] FAULT_INJECTION: forcing a failure. [ 25.450504][ T4665] name failslab, interval 1, probability 100, space 0, times 1 [ 25.450520][ T4665] CPU: 1 UID: 0 PID: 4665 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 25.450535][ T4665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 25.450541][ T4665] Call trace: [ 25.450545][ T4665] show_stack+0x2c/0x3c (C) [ 25.450560][ T4665] __dump_stack+0x30/0x40 [ 25.450570][ T4665] dump_stack_lvl+0xd8/0x12c [ 25.450580][ T4665] dump_stack+0x1c/0x28 [ 25.450589][ T4665] should_fail_ex+0x41c/0x590 [ 25.450599][ T4665] should_failslab+0xc4/0x120 [ 25.450607][ T4665] kmem_cache_alloc_noprof+0x94/0x5d8 [ 25.450615][ T4665] skb_clone+0x1ac/0x320 [ 25.450624][ T4665] dev_queue_xmit_nit+0x280/0x920 [ 25.450631][ T4665] dev_hard_start_xmit+0xac/0x9d4 [ 25.450638][ T4665] sch_direct_xmit+0x1ac/0x3b0 [ 25.450646][ T4665] __dev_queue_xmit+0x1130/0x2bc0 [ 25.450654][ T4665] ip_finish_output2+0xcd0/0x1274 [ 25.450662][ T4665] __ip_finish_output+0x198/0x41c [ 25.450669][ T4665] ip_finish_output+0x44/0x2fc [ 25.450676][ T4665] ip_output+0x28c/0x400 [ 25.450683][ T4665] ip_local_out+0x110/0x148 [ 25.450690][ T4665] __ip_queue_xmit+0xd58/0x16bc [ 25.450697][ T4665] ip_queue_xmit+0x5c/0x7c [ 25.450704][ T4665] __tcp_transmit_skb+0x1e9c/0x3860 [ 25.450714][ T4665] tcp_write_xmit+0x1330/0x4794 [ 25.450723][ T4665] __tcp_push_pending_frames+0x98/0x320 [ 25.450732][ T4665] tcp_push+0x3e8/0x658 [ 25.450741][ T4665] tcp_sendmsg_locked+0x2a04/0x3298 [ 25.450751][ T4665] tcp_sendmsg+0x40/0x64 [ 25.450760][ T4665] inet_sendmsg+0xb4/0xd8 [ 25.450770][ T4665] __sock_sendmsg+0xc8/0x17c [ 25.450778][ T4665] sock_write_iter+0x220/0x310 [ 25.450787][ T4665] vfs_write+0x51c/0xa0c [ 25.450797][ T4665] ksys_write+0x12c/0x228 [ 25.450803][ T4665] __arm64_sys_write+0x7c/0x90 [ 25.450810][ T4665] invoke_syscall+0x98/0x244 [ 25.450820][ T4665] el0_svc_common+0xec/0x23c [ 25.450829][ T4665] do_el0_svc+0x4c/0x5c [ 25.450839][ T4665] el0_svc+0x64/0x260 [ 25.450848][ T4665] el0t_64_sync_handler+0x48/0x148 [ 25.450857][ T4665] el0t_64_sync+0x198/0x19c [ 25.506681][ T4933] FAULT_INJECTION: forcing a failure. [ 25.506681][ T4933] name fail_futex, interval 1, probability 0, space 0, times 1 [ 25.506699][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT [ 25.506708][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 25.506713][ T4933] Call trace: [ 25.506716][ T4933] show_stack+0x2c/0x3c (C) [ 25.506736][ T4933] __dump_stack+0x30/0x40 [ 25.506747][ T4933] dump_stack_lvl+0xd8/0x12c [ 25.506757][ T4933] dump_stack+0x1c/0x28 [ 25.506766][ T4933] should_fail_ex+0x41c/0x590 [ 25.506777][ T4933] should_fail+0x14/0x24 [ 25.506786][ T4933] get_futex_key+0x1ec/0x12b0 [ 25.506795][ T4933] futex_wake+0x10c/0x594 [ 25.506803][ T4933] do_futex+0x2ec/0x3b0 [ 25.506811][ T4933] __arm64_sys_futex+0x2dc/0x410 [ 25.506819][ T4933] invoke_syscall+0x98/0x244 [ 25.506829][ T4933] el0_svc_common+0xec/0x23c [ 25.506839][ T4933] do_el0_svc+0x4c/0x5c [ 25.506848][ T4933] el0_svc+0x64/0x260 [ 25.506859][ T4933] el0t_64_sync_handler+0x48/0x148 [ 25.506868][ T4933] el0t_64_sync+0x198/0x19c [ 25.551022][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 25.551438][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 25.636393][ T4942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19'. [ 25.637230][ T4942] tipc: Started in network mode [ 25.637242][ T4942] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 25.637339][ T4942] tipc: Enabled bearer , priority 10 [ 25.691056][ T4947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 25.693616][ T4947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 25.699069][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 25.701898][ T4947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 26.423349][ T4985] tipc: Started in network mode [ 26.424668][ T4985] tipc: Node identity 1000001, cluster identity 4711 [ 26.426116][ T4985] tipc: Node number set to 16777217 [ 26.426760][ T4985] tipc: Enabled bearer , priority 1 [ 26.438653][ T4984] tipc: Resetting bearer [ 26.443180][ T4984] tipc: Disabling bearer [ 26.606841][ T4992] [ 26.607325][ T4992] ============================= [ 26.608136][ T4992] WARNING: suspicious RCU usage [ 26.608915][ T4992] syzkaller #0 Not tainted [ 26.609676][ T4992] ----------------------------- [ 26.610650][ T4992] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 26.611967][ T4992] [ 26.611967][ T4992] other info that might help us debug this: [ 26.611967][ T4992] [ 26.613658][ T4992] [ 26.613658][ T4992] rcu_scheduler_active = 2, debug_locks = 1 [ 26.615167][ T4992] 1 lock held by syz.3.39/4992: [ 26.616282][ T4992] #0: ffff0000da9f6ad0 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x70/0x9c [ 26.618515][ T4992] [ 26.618515][ T4992] stack backtrace: [ 26.619433][ T4992] CPU: 0 UID: 0 PID: 4992 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT [ 26.620785][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 26.622414][ T4992] Call trace: [ 26.622905][ T4992] show_stack+0x2c/0x3c (C) [ 26.623628][ T4992] __dump_stack+0x30/0x40 [ 26.624433][ T4992] dump_stack_lvl+0xd8/0x12c [ 26.625190][ T4992] dump_stack+0x1c/0x28 [ 26.625909][ T4992] lockdep_rcu_suspicious+0x168/0x26c [ 26.626836][ T4992] xfrm_send_migrate_state+0x6b0/0x958 [ 26.627802][ T4992] xfrm_do_migrate_state+0x1114/0x1728 [ 26.628792][ T4992] xfrm_user_rcv_msg+0x4e0/0x950 [ 26.629626][ T4992] netlink_rcv_skb+0x238/0x414 [ 26.630491][ T4992] xfrm_netlink_rcv+0x80/0x9c [ 26.631348][ T4992] netlink_unicast+0x600/0x7f8 [ 26.632206][ T4992] netlink_sendmsg+0x648/0x948 [ 26.633024][ T4992] __sock_sendmsg+0xc8/0x17c [ 26.633862][ T4992] ____sys_sendmsg+0x3d0/0x6c8 [ 26.634667][ T4992] ___sys_sendmsg+0x198/0x224 [ 26.635466][ T4992] __sys_sendmsg+0x158/0x204 [ 26.636268][ T4992] __arm64_sys_sendmsg+0x80/0x94 [ 26.637121][ T4992] invoke_syscall+0x98/0x244 [ 26.637939][ T4992] el0_svc_common+0xec/0x23c [ 26.638754][ T4992] do_el0_svc+0x4c/0x5c [ 26.639501][ T4992] el0_svc+0x64/0x260 [ 26.640220][ T4992] el0t_64_sync_handler+0x48/0x148 [ 26.641146][ T4992] el0t_64_sync+0x198/0x19c [ 26.756183][ T9] tipc: Node number set to 11709098 [ 26.825386][ T50] Bluetooth: hci3: command tx timeout [ 26.825407][ T4714] Bluetooth: hci0: command tx timeout [ 26.835468][ T50] Bluetooth: hci2: command tx timeout [ 26.905677][ T50] Bluetooth: hci4: command tx timeout [ 26.915403][ T50] Bluetooth: hci1: command tx timeout [ 28.915420][ T4714] Bluetooth: hci3: command tx timeout [ 28.915461][ T4714] Bluetooth: hci0: command tx timeout [ 28.916006][ T50] Bluetooth: hci2: command tx timeout [ 28.985966][ T4720] Bluetooth: hci4: command tx timeout [ 28.986595][ T50] Bluetooth: hci1: command tx timeout [ 30.985736][ T4720] Bluetooth: hci3: command tx timeout [ 30.985784][ T4720] Bluetooth: hci2: command tx timeout [ 30.988151][ T50] Bluetooth: hci0: command tx timeout [ 31.065390][ T50] Bluetooth: hci1: command tx timeout [ 31.065400][ T4714] Bluetooth: hci4: command tx timeout