last executing test programs: 31.959010882s ago: executing program 3 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="010008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000001c001000811223344"], 0x40) 31.216727402s ago: executing program 3 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x34}}, 0x0) 30.243631654s ago: executing program 3 (id=37): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x1]}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000400)={0x1, [0x1]}, 0x8) connect$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) 29.782777773s ago: executing program 3 (id=39): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newsa={0x154, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x1, 0x2, 0x2}, [@algo_crypt={0x58, 0x6, {{'cbc(aes)\x00'}, 0x80, "000102030405060708090a0b0c0d0e0f"}}, @offload={0xc, 0x11, {0x1}}]}, 0x154}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x13, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x2}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000400)="01020304", 0x4, 0x0, &(0x7f0000000440)={0x2, 0x1234, @loopback}, 0x10) 29.660588587s ago: executing program 3 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x801, 0x0) write(r0, &(0x7f0000000400)='10 2\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x801, 0x0) write(r1, &(0x7f0000000600)='120\n', 0x4) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001200010001000000000000000000000000000000000000000000000009000300657468310000000008001d0001000000"], 0x34}}, 0x0) 24.849507206s ago: executing program 3 (id=59): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 9.556140407s ago: executing program 32 (id=59): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 7.274857239s ago: executing program 1 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 6.99304212s ago: executing program 1 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x6c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0) 5.591507284s ago: executing program 1 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='8\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='2049\n\x00', 0x5) 4.722661906s ago: executing program 0 (id=157): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="01000000", 0x4) read(r2, &(0x7f0000000000), 0x4) write(r3, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r2, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 4.323362531s ago: executing program 2 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000040)={0x1c, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x1c}}, 0x0) 4.136145019s ago: executing program 2 (id=159): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='abort', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x10f, 0x1, "0100000000000000"}], 0x30}, 0x0) shutdown(r0, 0x2) close(r0) nanosleep(&(0x7f0000000400)={0xb}, 0x0) 3.770615138s ago: executing program 4 (id=160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 3.576180713s ago: executing program 0 (id=161): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @loopback}, 0x10) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='vers\x00', &(0x7f0000000240)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='addr\x00', &(0x7f00000002c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000340)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='proto\x00', &(0x7f00000003c0)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000500)=""/100, 0x64, 0x40, &(0x7f0000000600)={0x2, 0x0, @empty}, 0x10) 3.344662009s ago: executing program 4 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) read(r1, &(0x7f0000000c00)=""/4096, 0x1000) 2.981091713s ago: executing program 4 (id=163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 2.9359495s ago: executing program 2 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000400)="0123456789", 0xa) read(r5, &(0x7f0000000500), 0xa) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) read(r4, &(0x7f0000000600), 0x100) nanosleep(&(0x7f0000000700)={0x3}, 0x0) 2.882315217s ago: executing program 0 (id=165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) write(r2, &(0x7f0000000240)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 2.077104152s ago: executing program 1 (id=166): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x801, @empty}, 0x10) getsockname(r0, &(0x7f0000000104), &(0x7f0000000120)=0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000600)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='addr\x00', &(0x7f0000000800)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000900)='nfsvers\x00', &(0x7f0000000a00)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b00)='proto\x00', &(0x7f0000000c00)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000d00)='port\x00', &(0x7f0000000e00)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000f00)='mountport\x00', &(0x7f0000001000)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='mountproto\x00', &(0x7f0000001200)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000001300)='ro\x00', 0x0, 0x0) syz_clone(0x511, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000500)='127.0.0.1:/export\x00', &(0x7f0000001400)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,nfsvers=3,proto=tcp,port=2049,mountport=2049,nolock\x00']) r3 = accept4$inet(r1, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000100)=""/8, 0x8, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000100), 0x40) recvfrom$inet(r3, &(0x7f0000000100)=""/8, 0x8, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000100), 0x40) recvfrom$inet(r3, &(0x7f0000000100)=""/8, 0x8, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000100), 0x40) r4 = fsmount(r2, 0x0, 0x0) move_mount(r4, &(0x7f0000001500)='\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x4) getxattr(&(0x7f0000001400)='./mnt/file\x00', &(0x7f0000001600)=@known='system.posix_acl_access\x00', &(0x7f0000001700)=""/256, 0x100) 2.045648857s ago: executing program 4 (id=167): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x3) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) syz_emit_ethernet(0x13, &(0x7f0000000080)={@empty, @empty, @void, {@llc={0x4, {@llc={0x2, 0x2, "020253"}}}}}, 0x0) 1.585837525s ago: executing program 0 (id=168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x1a4, 0x10, 0x32, 0x0, 0x0, {{@in=@private=0xa010101, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x32}, {@in=@private=0xa010101, 0x1234, 0x32}, @in=@private=0xa010102, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x28, 0x1, {{'hmac(sha1)\x00'}, 0x80, '\x00'/20}}, @algo_crypt={0x28, 0x2, {{'cbc(aes)\x00'}, 0x80, '\x00'/16}}]}, 0x1a4}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="940000002900010000000000000000000a01010100000000000000000000000034120000020032000a0101030000000000000000000000000a01010400000000000000000000000000000000000000000a0101010000000000000000000000000a010102000000000000000000000000000000000000020020203200000000000000000000000000020002000000"], 0x94}], 0x1}, 0x0) 1.568752254s ago: executing program 2 (id=169): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0x0, 0x1c, 0x0, @val=@iter={&(0x7f0000000400)=@cgroup={0x0, 0x0}, 0x10}}, 0x40) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r1}, 0x8) read(r2, &(0x7f0000000600), 0x100) 1.567929678s ago: executing program 4 (id=170): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="01000000", 0x4) read(r2, &(0x7f0000000000), 0x4) write(r3, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r2, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 1.163675061s ago: executing program 0 (id=171): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000200)=0x1, 0x4) 914.641153ms ago: executing program 2 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000c00)=""/4096, 0x1000) 625.00697ms ago: executing program 1 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/65536, 0x10000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x10, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r1, 0x80000000) sendmsg$xdp(r1, &(0x7f0000000200), 0x40) 234.365379ms ago: executing program 4 (id=174): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="0200", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001010101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000700)=@in={0x2, 0x1234, @loopback}, 0x10) recvfrom$rxrpc(r1, &(0x7f0000000900), 0x100, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 123.603026ms ago: executing program 2 (id=175): r0 = socket(0x8, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40046102, &(0x7f0000000100)="0100") 89.152092ms ago: executing program 0 (id=176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) 0s ago: executing program 1 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) bind(r1, &(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xc0, 0xa8, 0x1, 0x1}}, 0x10) listen(r1, 0x5) write(r0, &(0x7f0000000300)="00000800450000540000400040840000c0a80102c0a8010110e24e230000000000000000010000380102030400010000000a000a00000000800200240102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20", 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 91.939960][ T822] cfg80211: failed to load regulatory.db [ 92.613068][ T5585] cgroup: Unknown subsys name 'net' [ 92.855621][ T5585] cgroup: Unknown subsys name 'cpuset' [ 92.928285][ T5585] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.872334][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.061529][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.089547][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.099629][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.103452][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.104235][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.104242][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.109521][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.140770][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.163043][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.172005][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.187347][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.189963][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.193968][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.194078][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.208218][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.385108][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.395205][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.404321][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.419403][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.423787][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.447909][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.448341][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.453841][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.511677][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.515439][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.340138][ T5611] Bluetooth: hci3: command tx timeout [ 101.417671][ T5611] Bluetooth: hci1: command tx timeout [ 101.417816][ T5611] Bluetooth: hci0: command tx timeout [ 101.497691][ T5618] Bluetooth: hci4: command tx timeout [ 101.577681][ T5618] Bluetooth: hci2: command tx timeout [ 102.166201][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.167445][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.169617][ T5603] bridge_slave_0: entered allmulticast mode [ 102.176797][ T5603] bridge_slave_0: entered promiscuous mode [ 102.232708][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.232794][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.233153][ T5604] bridge_slave_0: entered allmulticast mode [ 102.235129][ T5604] bridge_slave_0: entered promiscuous mode [ 102.274578][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.274707][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.274890][ T5603] bridge_slave_1: entered allmulticast mode [ 102.277139][ T5603] bridge_slave_1: entered promiscuous mode [ 102.316844][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.316971][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.317138][ T5602] bridge_slave_0: entered allmulticast mode [ 102.334203][ T5602] bridge_slave_0: entered promiscuous mode [ 102.345740][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.345938][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.346807][ T5604] bridge_slave_1: entered allmulticast mode [ 102.354366][ T5604] bridge_slave_1: entered promiscuous mode [ 102.398908][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.399085][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.399432][ T5606] bridge_slave_0: entered allmulticast mode [ 102.401384][ T5606] bridge_slave_0: entered promiscuous mode [ 102.402923][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.403055][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.403574][ T5602] bridge_slave_1: entered allmulticast mode [ 102.405541][ T5602] bridge_slave_1: entered promiscuous mode [ 102.487970][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.488095][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.488607][ T5606] bridge_slave_1: entered allmulticast mode [ 102.490659][ T5606] bridge_slave_1: entered promiscuous mode [ 102.560232][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.605518][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.631043][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.656337][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.664160][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.664822][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.666130][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.666626][ T5607] bridge_slave_0: entered allmulticast mode [ 102.680665][ T5607] bridge_slave_0: entered promiscuous mode [ 102.720744][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.747127][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.747372][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.749618][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.757246][ T5607] bridge_slave_1: entered allmulticast mode [ 102.777167][ T5607] bridge_slave_1: entered promiscuous mode [ 102.804569][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.867070][ T5603] team0: Port device team_slave_0 added [ 102.892498][ T5604] team0: Port device team_slave_0 added [ 102.931210][ T5603] team0: Port device team_slave_1 added [ 102.956768][ T5604] team0: Port device team_slave_1 added [ 102.965945][ T5602] team0: Port device team_slave_0 added [ 102.979673][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.009136][ T5606] team0: Port device team_slave_0 added [ 103.032438][ T5602] team0: Port device team_slave_1 added [ 103.034958][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.065438][ T5606] team0: Port device team_slave_1 added [ 103.118897][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.118911][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.118931][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.163847][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.163901][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.163976][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.240864][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.240883][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.240913][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.293470][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.293487][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.293517][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.294722][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.294734][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.294753][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.306028][ T5607] team0: Port device team_slave_0 added [ 103.379490][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.379541][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.379616][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.419882][ T5618] Bluetooth: hci3: command tx timeout [ 103.448442][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.448459][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.448490][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.450878][ T5607] team0: Port device team_slave_1 added [ 103.453960][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.453972][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.453992][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.510508][ T5618] Bluetooth: hci0: command tx timeout [ 103.510631][ T5618] Bluetooth: hci1: command tx timeout [ 103.587786][ T5611] Bluetooth: hci4: command tx timeout [ 103.657859][ T5611] Bluetooth: hci2: command tx timeout [ 104.016405][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.016419][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.016438][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.118326][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.118340][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.118361][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.182646][ T5603] hsr_slave_0: entered promiscuous mode [ 104.183893][ T5603] hsr_slave_1: entered promiscuous mode [ 104.202990][ T5604] hsr_slave_0: entered promiscuous mode [ 104.204018][ T5604] hsr_slave_1: entered promiscuous mode [ 104.204885][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 104.204974][ T5604] Cannot create hsr debugfs directory [ 104.273704][ T5602] hsr_slave_0: entered promiscuous mode [ 104.274751][ T5602] hsr_slave_1: entered promiscuous mode [ 104.275415][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 104.275433][ T5602] Cannot create hsr debugfs directory [ 104.307202][ T5606] hsr_slave_0: entered promiscuous mode [ 104.312315][ T5606] hsr_slave_1: entered promiscuous mode [ 104.315526][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 104.315588][ T5606] Cannot create hsr debugfs directory [ 104.500958][ T5607] hsr_slave_0: entered promiscuous mode [ 104.501920][ T5607] hsr_slave_1: entered promiscuous mode [ 104.502619][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 104.502636][ T5607] Cannot create hsr debugfs directory [ 105.499243][ T5611] Bluetooth: hci3: command tx timeout [ 105.544238][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.577810][ T5611] Bluetooth: hci1: command tx timeout [ 105.577864][ T5611] Bluetooth: hci0: command tx timeout [ 105.603509][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.616166][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.653141][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.662140][ T5618] Bluetooth: hci4: command tx timeout [ 105.664311][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.712412][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.738097][ T5618] Bluetooth: hci2: command tx timeout [ 105.754083][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.797363][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.944924][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.974461][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.989803][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.019172][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.023358][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.073583][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.098308][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.132084][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.294933][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.331450][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.348304][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.374237][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.387735][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.411251][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.443448][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.471288][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.672834][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.713565][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.763547][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.815111][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.829613][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.866661][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.920850][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.962134][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.023858][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.149909][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.194895][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.224556][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.252203][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.267752][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.311390][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.339921][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.341207][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.374806][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.431028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.431187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.481364][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.512639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.512768][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.577893][ T5618] Bluetooth: hci3: command tx timeout [ 107.625709][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.660389][ T5618] Bluetooth: hci0: command tx timeout [ 107.660427][ T5618] Bluetooth: hci1: command tx timeout [ 107.698603][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.698795][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.727007][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.737739][ T5611] Bluetooth: hci4: command tx timeout [ 107.765191][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.765344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.817690][ T5611] Bluetooth: hci2: command tx timeout [ 107.890545][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.940478][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.970830][ T1288] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.971057][ T1288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.050677][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.055227][ T3278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.143556][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.262350][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.279511][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.385690][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.403884][ T3402] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.404226][ T3402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.574042][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.635908][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.636121][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.700234][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.700376][ T3278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.223162][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.712063][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.834006][ T5603] veth0_vlan: entered promiscuous mode [ 109.944782][ T5603] veth1_vlan: entered promiscuous mode [ 109.991897][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.183102][ T5606] veth0_vlan: entered promiscuous mode [ 110.202861][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.277389][ T5603] veth0_macvtap: entered promiscuous mode [ 110.306156][ T5606] veth1_vlan: entered promiscuous mode [ 110.365408][ T5603] veth1_macvtap: entered promiscuous mode [ 110.446660][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.493848][ T5602] veth0_vlan: entered promiscuous mode [ 110.533564][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.601594][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.642485][ T5602] veth1_vlan: entered promiscuous mode [ 110.706045][ T3429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.728307][ T3429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.730465][ T5606] veth0_macvtap: entered promiscuous mode [ 110.754691][ T3429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.784120][ T3429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.807293][ T5606] veth1_macvtap: entered promiscuous mode [ 111.152630][ T5604] veth0_vlan: entered promiscuous mode [ 111.199900][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.263715][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.283356][ T5602] veth0_macvtap: entered promiscuous mode [ 111.301557][ T5604] veth1_vlan: entered promiscuous mode [ 111.373095][ T5602] veth1_macvtap: entered promiscuous mode [ 111.393407][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.411293][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.416506][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.445545][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.445571][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.489324][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.605868][ T5607] veth0_vlan: entered promiscuous mode [ 111.716159][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.736310][ T3278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.736334][ T3278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.840242][ T5607] veth1_vlan: entered promiscuous mode [ 111.886957][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.055865][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.102244][ T5604] veth0_macvtap: entered promiscuous mode [ 112.138624][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.157281][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.178885][ T3278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.178907][ T3278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.219123][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.251658][ T5604] veth1_macvtap: entered promiscuous mode [ 112.701221][ T3278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.701243][ T3278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.760836][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.860180][ T5607] veth0_macvtap: entered promiscuous mode [ 112.930478][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.009296][ T5607] veth1_macvtap: entered promiscuous mode [ 113.110512][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.174278][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.288125][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.308597][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.313011][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.313030][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.605852][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.721939][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.721955][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.793855][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.838600][ T198] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 113.895633][ T198] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 114.042969][ T3402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.072352][ T3402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.109538][ T178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.150363][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 114.154547][ T178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.488316][ T5808] tipc: Started in network mode [ 114.488358][ T5808] tipc: Node identity ac1414aa, cluster identity 4711 [ 114.566934][ T5804] ceph: No mds server is up or the cluster is laggy [ 114.590184][ T5808] tipc: New replicast peer: 172.20.20.187 [ 114.680794][ T198] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 114.761190][ T5808] tipc: Enabled bearer , priority 10 [ 114.805833][ T5812] tipc: Started in network mode [ 114.805866][ T5812] tipc: Node identity 0010000000000000002, cluster identity 1 [ 114.820377][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.820397][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.420391][ T3402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.420531][ T3402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.447016][ T5820] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 115.468780][ T5819] FAULT_INJECTION: forcing a failure. [ 115.468780][ T5819] name failslab, interval 1, probability 0, space 0, times 1 [ 115.468842][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.468871][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.468892][ T5819] Call Trace: [ 115.468900][ T5819] [ 115.468910][ T5819] dump_stack_lvl+0xe8/0x150 [ 115.468959][ T5819] should_fail_ex+0x467/0x600 [ 115.469000][ T5819] should_failslab+0xa8/0x100 [ 115.469029][ T5819] kmem_cache_alloc_noprof+0xa4/0x650 [ 115.469052][ T5819] ? jbd2__journal_start+0x145/0x5c0 [ 115.469084][ T5819] ? jbd2__journal_start+0x145/0x5c0 [ 115.469123][ T5819] jbd2__journal_start+0x145/0x5c0 [ 115.469160][ T5819] __ext4_journal_start_sb+0x203/0x5d0 [ 115.469201][ T5819] ext4_dirty_inode+0x93/0x110 [ 115.469235][ T5819] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 115.469270][ T5819] __mark_inode_dirty+0x3a8/0x13b0 [ 115.469309][ T5819] file_update_time_flags+0x3f4/0x4b0 [ 115.469344][ T5819] ext4_page_mkwrite+0x225/0x1150 [ 115.469389][ T5819] ? __pfx_filemap_fault+0x10/0x10 [ 115.469428][ T5819] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 115.469468][ T5819] ? __pte_offset_map+0x29/0x200 [ 115.469507][ T5819] do_page_mkwrite+0x14a/0x310 [ 115.469539][ T5819] do_pte_missing+0x734/0x28f0 [ 115.469574][ T5819] ? handle_mm_fault+0xe8/0x13f0 [ 115.469601][ T5819] handle_mm_fault+0xd28/0x13f0 [ 115.469633][ T5819] ? handle_mm_fault+0xe8/0x13f0 [ 115.469666][ T5819] ? __pfx_handle_mm_fault+0x10/0x10 [ 115.469686][ T5819] ? lock_vma_under_rcu+0x45a/0x500 [ 115.469712][ T5819] ? __pfx_do_futex+0x10/0x10 [ 115.469765][ T5819] do_user_addr_fault+0xa4d/0x1340 [ 115.469800][ T5819] ? trace_page_fault_user+0x84/0x1e0 [ 115.469831][ T5819] exc_page_fault+0x6a/0xc0 [ 115.469860][ T5819] asm_exc_page_fault+0x26/0x30 [ 115.469882][ T5819] RIP: 0033:0x7f5c7e0d2d52 [ 115.469910][ T5819] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 115.469928][ T5819] RSP: 002b:00007ffe92e167c0 EFLAGS: 00010202 [ 115.469956][ T5819] RAX: 000000000000a008 RBX: 00007f5c7efb5720 RCX: 0000000000000000 [ 115.469970][ T5819] RDX: 0000001b32f1a000 RSI: 0000000000000008 RDI: 00007f5c7efb5720 [ 115.469984][ T5819] RBP: 00000000000002c5 R08: 00007f5c7e470000 R09: 00007f5c7e486038 [ 115.469998][ T5819] R10: 0000000000000003 R11: 0000000000000007 R12: ffffffff8b3fc268 [ 115.470011][ T5819] R13: 00007f5c7e486038 R14: 000000000000006a R15: ffffffffffff6000 [ 115.470028][ T5819] ? number+0xaf8/0xed0 [ 115.470062][ T5819] [ 115.874431][ T5794] tipc: Node number set to 2886997162 [ 116.175841][ T3278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.175860][ T3278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.588784][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.588807][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.330160][ T5840] syz.2.16 (5840) used greatest stack depth: 19656 bytes left [ 119.158963][ T5865] syz.1.21 (5865) used greatest stack depth: 19008 bytes left [ 121.319249][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 124.226195][ T5854] NFSD: Failed to start, no listeners configured. [ 124.412939][ T5950] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 124.432127][ T5950] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 124.696976][ T5331] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 125.088087][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 125.184993][ T5952] ceph: No mds server is up or the cluster is laggy [ 125.309146][ T5711] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 125.812957][ T5975] smc: net device veth0 applied user defined pnetid SYZ0 [ 125.849484][ T5974] rdma_rxe: rxe_newlink: failed to add veth0 [ 125.862325][ T5975] smc: net device lo applied user defined pnetid SYZ1 [ 125.862561][ T5972] lo speed is unknown, defaulting to 1000 [ 125.977475][ T5972] lo speed is unknown, defaulting to 1000 [ 125.984688][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 125.986388][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 126.177618][ T5972] lo speed is unknown, defaulting to 1000 [ 126.508680][ T5975] syz.1.49 (5975) used greatest stack depth: 18376 bytes left [ 127.651825][ T1122] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.690405][ T5711] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.827657][ T5970] infiniband syz0: set active [ 127.827679][ T5970] infiniband syz0: added veth0 [ 127.910539][ T5970] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 127.928974][ T5970] infiniband syz0: Couldn't open port 1 [ 127.936518][ T5970] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 127.936559][ T5970] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 127.936607][ T5970] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 128.008187][ T1288] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.154246][ T5711] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 128.154278][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 128.154293][ T5711] usb 5-1: Product: syz [ 128.154303][ T5711] usb 5-1: Manufacturer: syz [ 128.818083][ T5970] RDS/IB: syz0: added [ 128.825525][ T5970] smc: adding ib device syz0 with port count 1 [ 128.827060][ T5970] smc: ib device syz0 port 1 has no pnetid [ 129.281385][ T5711] speedtch 5-1:1.0: speedtch_bind: wrong device class 0 [ 129.281432][ T5711] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 129.390573][ T5711] usb 5-1: USB disconnect, device number 2 [ 129.779454][ T6018] NFSD: Failed to start, no listeners configured. [ 130.169328][ T6026] Zero length message leads to an empty skb [ 130.374466][ T5874] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 130.386387][ T5874] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 130.638890][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 130.796941][ T6035] syz.0.67 uses obsolete (PF_INET,SOCK_PACKET) [ 131.126997][ T6028] ceph: No mds server is up or the cluster is laggy [ 131.162939][ T5874] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 131.409127][ T6040] bridge0: port 3(dummy0) entered blocking state [ 131.449944][ T6040] bridge0: port 3(dummy0) entered disabled state [ 131.451443][ T6040] dummy0: entered allmulticast mode [ 131.539831][ T6040] dummy0: entered promiscuous mode [ 131.541437][ T6040] bridge0: port 3(dummy0) entered blocking state [ 131.541539][ T6040] bridge0: port 3(dummy0) entered forwarding state [ 132.262554][ T6054] atomic_op ffff88803731da18 conn xmit_atomic 0000000000000000 [ 132.452994][ T6056] NFSD: Failed to start, no listeners configured. [ 132.547762][ T5972] infiniband syz1: set active [ 132.547790][ T5972] infiniband syz1: added lo [ 132.548465][ T5874] lo speed is unknown, defaulting to 1000 [ 132.597210][ T5972] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 132.597242][ T5972] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 132.597274][ T5972] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 132.681004][ T5972] RDS/IB: syz1: added [ 132.681090][ T5972] smc: adding ib device syz1 with port count 1 [ 132.681111][ T5972] smc: ib device syz1 port 1 has no pnetid [ 132.682349][ T5874] lo speed is unknown, defaulting to 1000 [ 132.691732][ T5972] lo speed is unknown, defaulting to 1000 [ 132.865302][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.865403][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.182765][ T5972] lo speed is unknown, defaulting to 1000 [ 133.341225][ T6060] svc: failed to register lockdv1 RPC service (errno 111). [ 133.341709][ T6060] lockd_up: makesock failed, error=-111 [ 133.511505][ T5972] lo speed is unknown, defaulting to 1000 [ 133.752810][ T5972] lo speed is unknown, defaulting to 1000 [ 133.834626][ T6060] svc: failed to register nfsdv3 RPC service (errno 111). [ 133.834946][ T6060] svc: failed to register nfsaclv3 RPC service (errno 512). [ 133.834964][ T6060] failed to unregister udp with rpcbind [ 133.835822][ T6060] svc: failed to register nfsdv3 RPC service (errno 97). [ 133.835844][ T6060] svc: failed to register nfsaclv3 RPC service (errno 97). [ 133.835859][ T6060] failed to unregister udp with rpcbind [ 134.200318][ T6073] tipc: Started in network mode [ 134.200338][ T6073] tipc: Node identity , cluster identity 4711 [ 134.200353][ T6073] tipc: Failed to set node id, please configure manually [ 134.200399][ T6073] tipc: Enabling of bearer rejected, failed to enable media [ 134.410160][ T6071] svc: failed to register lockdv1 RPC service (errno 111). [ 134.447026][ T5972] lo speed is unknown, defaulting to 1000 [ 134.950258][ T6001] siw: device registration error -23 [ 135.009817][ T6004] rdma_rxe: rxe_newlink: failed to add lo [ 135.057079][ T6013] smc: removing ib device syz1 [ 135.180534][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 135.209736][ T6007] smc: removing ib device syz0 [ 135.228203][ T6071] svc: failed to register nfsdv3 RPC service (errno 512). [ 135.228444][ T6071] svc: failed to register nfsaclv3 RPC service (errno 512). [ 135.228461][ T6071] failed to unregister udp with rpcbind [ 135.228663][ T6071] svc: failed to register nfsdv3 RPC service (errno 97). [ 135.228680][ T6071] svc: failed to register nfsaclv3 RPC service (errno 97). [ 135.228694][ T6071] failed to unregister udp with rpcbind [ 135.230637][ T6071] svc: failed to register nfsdv3 RPC service (errno 512). [ 135.257928][ T6071] svc: failed to register nfsaclv3 RPC service (errno 512). [ 135.257991][ T6071] failed to unregister tcp with rpcbind [ 135.325010][ T6096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 135.411829][ T6071] svc: failed to register nfsdv3 RPC service (errno 97). [ 135.411857][ T6071] svc: failed to register nfsaclv3 RPC service (errno 97). [ 135.411871][ T6071] failed to unregister tcp with rpcbind [ 135.424865][ T44] rpcbind: server 127.0.0.1 not responding, timed out [ 135.701591][ T6007] smbdirect: ib_dev[syz0] removed [ 135.860200][ T6013] smbdirect: ib_dev[syz1] removed [ 135.951186][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 136.433305][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 136.434036][ T6124] netlink: 268 bytes leftover after parsing attributes in process `syz.2.96'. [ 136.544731][ T6126] bridge0: port 4(syz_tun) entered blocking state [ 136.544962][ T6126] bridge0: port 4(syz_tun) entered disabled state [ 136.545129][ T6126] syz_tun: entered allmulticast mode [ 136.614120][ T6126] syz_tun: entered promiscuous mode [ 136.623154][ T6126] bridge0: port 4(syz_tun) entered blocking state [ 136.623274][ T6126] bridge0: port 4(syz_tun) entered listening state [ 136.920806][ T6142] tipc: Cannot configure node identity twice [ 137.172355][ T44] bridge0: port 4(syz_tun) entered disabled state [ 137.755263][ T5603] svc: failed to register nfsdv3 RPC service (errno 111). [ 137.768623][ T5603] svc: failed to register nfsaclv3 RPC service (errno 111). [ 137.768648][ T5603] failed to unregister tcp with rpcbind [ 137.769969][ T5603] svc: failed to register nfsdv3 RPC service (errno 97). [ 137.769988][ T5603] svc: failed to register nfsaclv3 RPC service (errno 97). [ 137.777171][ T5603] failed to unregister tcp with rpcbind [ 138.187653][ T5708] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.487870][ T5708] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.490943][ T5708] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.490972][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.490993][ T5708] usb 5-1: SerialNumber: syz [ 138.629334][ T44] rpcbind: server 127.0.0.1 not responding, timed out [ 138.739099][ T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'. [ 138.739260][ T6173] openvswitch: netlink: Message has 4 unknown bytes. [ 139.290764][ T6186] rdma_rxe: rxe_newlink: failed to add veth0 [ 139.595285][ T5708] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 139.731885][ T5708] usb 5-1: USB disconnect, device number 3 [ 140.283629][ T5874] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 140.312134][ T5874] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 140.476820][ T6207] rdma_rxe: rxe_newlink: failed to add lo [ 140.487801][ T6207] smc: net device lo applied user defined pnetid SYZ0 [ 140.568638][ T5874] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 140.767669][ T6181] NFSD: Unable to initialize client recovery tracking! (-110) [ 140.767691][ T6181] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 140.767703][ T6181] NFSD: starting 90-second grace period (net f00003cb) [ 140.937837][ T5874] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.954364][ T6199] ceph: No mds server is up or the cluster is laggy [ 141.138160][ T5874] usb 5-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 141.138192][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.138213][ T5874] usb 5-1: Product: syz [ 141.138228][ T5874] usb 5-1: Manufacturer: syz [ 141.138244][ T5874] usb 5-1: SerialNumber: syz [ 141.853933][ T6218] tipc: Enabling of bearer rejected, already enabled [ 143.001446][ T6194] svc: failed to register nfsdv3 RPC service (errno 512). [ 143.001781][ T6194] svc: failed to register nfsaclv3 RPC service (errno 512). [ 143.001798][ T6194] failed to unregister tcp with rpcbind [ 143.005741][ T6194] svc: failed to register nfsdv3 RPC service (errno 97). [ 143.005825][ T6194] svc: failed to register nfsaclv3 RPC service (errno 97). [ 143.005841][ T6194] failed to unregister tcp with rpcbind [ 143.601399][ T5874] ax88179_178a 5-1:1.0: probe with driver ax88179_178a failed with error -71 [ 144.185758][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.211937][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.216902][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.237101][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.259542][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.343388][ T5874] usb 5-1: USB disconnect, device number 4 [ 145.153446][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 145.319505][ T6264] svc: failed to register nfsdv3 RPC service (errno 111). [ 145.322926][ T6264] svc: failed to register nfsaclv3 RPC service (errno 111). [ 145.939544][ T6267] NFSD: Failed to start, no listeners configured. [ 146.617739][ T5611] Bluetooth: hci5: command tx timeout [ 147.306424][ T6304] FAULT_INJECTION: forcing a failure. [ 147.306424][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 147.306823][ T6304] CPU: 0 UID: 0 PID: 6304 Comm: syz.4.150 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.306852][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 147.306865][ T6304] Call Trace: [ 147.306873][ T6304] [ 147.306888][ T6304] dump_stack_lvl+0xe8/0x150 [ 147.306937][ T6304] should_fail_ex+0x467/0x600 [ 147.306977][ T6304] _copy_from_user+0x2d/0xb0 [ 147.307006][ T6304] get_timespec64+0x96/0x1b0 [ 147.307048][ T6304] ? __pfx_get_timespec64+0x10/0x10 [ 147.307084][ T6304] __se_sys_clock_nanosleep+0x1ce/0x3b0 [ 147.307122][ T6304] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 147.307166][ T6304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.307191][ T6304] do_syscall_64+0x174/0x580 [ 147.307218][ T6304] ? trace_irq_disable+0x3b/0x140 [ 147.307239][ T6304] ? clear_bhb_loop+0x40/0x90 [ 147.307267][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.307289][ T6304] RIP: 0033:0x7fe1b324e6ce [ 147.307309][ T6304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.307328][ T6304] RSP: 002b:00007fff146a5298 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 147.307351][ T6304] RAX: ffffffffffffffda RBX: 000055556164d500 RCX: 00007fe1b324e6ce [ 147.307367][ T6304] RDX: 00007fff146a52f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.307381][ T6304] RBP: 00007fe1b3517da0 R08: 0000000000000000 R09: 0000000000000000 [ 147.307394][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000240f5 [ 147.307409][ T6304] R13: 00007fe1b3515fac R14: 0000000000023e2f R15: 00007fff146a5420 [ 147.307443][ T6304] [ 147.491032][ T6307] rdma_rxe: rxe_newlink: failed to add lo [ 147.993674][ T6314] NFSD: Failed to start, no listeners configured. [ 148.192510][ T6318] bridge0: port 3(veth1_to_bridge) entered blocking state [ 148.192631][ T6318] bridge0: port 3(veth1_to_bridge) entered disabled state [ 148.193250][ T6318] veth1_to_bridge: entered allmulticast mode [ 148.314982][ T6318] veth1_to_bridge: entered promiscuous mode [ 148.335161][ T6318] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 148.433693][ T6318] bridge0: port 3(veth1_to_bridge) entered blocking state [ 148.433885][ T6318] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 148.699247][ T5611] Bluetooth: hci5: command tx timeout [ 148.860303][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.860686][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.861196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.861582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.861996][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.862383][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.862768][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.863162][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.863560][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.863942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.781187][ T5611] Bluetooth: hci5: command tx timeout [ 151.632756][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.632864][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.633069][ T6241] bridge_slave_0: entered allmulticast mode [ 151.691720][ T6241] bridge_slave_0: entered promiscuous mode [ 151.813614][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.813995][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.814255][ T6241] bridge_slave_1: entered allmulticast mode [ 151.833672][ T6241] bridge_slave_1: entered promiscuous mode [ 152.551383][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.572775][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.872480][ T5611] Bluetooth: hci5: command tx timeout [ 153.062657][ T6241] team0: Port device team_slave_0 added [ 153.072419][ T6241] team0: Port device team_slave_1 added [ 153.272177][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.272194][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.272215][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.274491][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.274509][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.274537][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.411931][ T6393] [ 153.411943][ T6393] ============================= [ 153.411951][ T6393] WARNING: suspicious RCU usage [ 153.411967][ T6393] syzkaller #0 Not tainted [ 153.411978][ T6393] ----------------------------- [ 153.411986][ T6393] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 153.412001][ T6393] [ 153.412001][ T6393] other info that might help us debug this: [ 153.412001][ T6393] [ 153.412009][ T6393] [ 153.412009][ T6393] rcu_scheduler_active = 2, debug_locks = 1 [ 153.412023][ T6393] 1 lock held by syz.0.176/6393: [ 153.412036][ T6393] #0: ffff888039232048 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 153.412110][ T6393] [ 153.412110][ T6393] stack backtrace: [ 153.412123][ T6393] CPU: 1 UID: 0 PID: 6393 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.412148][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.412161][ T6393] Call Trace: [ 153.412169][ T6393] [ 153.412179][ T6393] dump_stack_lvl+0xe8/0x150 [ 153.412216][ T6393] lockdep_rcu_suspicious+0x13f/0x1d0 [ 153.412252][ T6393] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 153.412285][ T6393] xfrm_send_migrate_state+0x870/0xae0 [ 153.412347][ T6393] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 153.412383][ T6393] ? xfrm_state_add+0xf0/0xa40 [ 153.412428][ T6393] ? xfrm_state_migrate_install+0x192/0x550 [ 153.412462][ T6393] xfrm_do_migrate_state+0x1749/0x1e90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 153.412499][ T6393] ? xfrm_do_migrate_state+0x12ea/0x1e90 [ 153.412543][ T6393] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 153.412598][ T6393] ? safesetid_security_capable+0xa9/0x1a0 [ 153.412630][ T6393] ? __nla_parse+0x40/0x60 [ 153.412660][ T6393] xfrm_user_rcv_msg+0x7a8/0xf30 [ 153.412697][ T6393] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 153.412767][ T6393] ? __lock_acquire+0x683/0x2ce0 [ 153.412801][ T6393] ? __pfx_ref_tracker_free+0x10/0x10 [ 153.412833][ T6393] netlink_rcv_skb+0x226/0x4a0 [ 153.412864][ T6393] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 153.412897][ T6393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.412938][ T6393] ? lockdep_hardirqs_on+0x7a/0x110 [ 153.412969][ T6393] ? mutex_lock_nested+0x152/0x1d0 [ 153.413003][ T6393] ? xfrm_netlink_rcv+0x6a/0x90 [ 153.413037][ T6393] xfrm_netlink_rcv+0x79/0x90 [ 153.413068][ T6393] netlink_unicast+0x7f5/0x990 [ 153.413106][ T6393] netlink_sendmsg+0x813/0xb40 [ 153.413146][ T6393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.413178][ T6393] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 153.413220][ T6393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.413249][ T6393] sock_sendmsg_nosec+0x13a/0x180 [ 153.413289][ T6393] ____sys_sendmsg+0x565/0x870 [ 153.413317][ T6393] ? __might_fault+0xaf/0x130 [ 153.413349][ T6393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.413388][ T6393] ? import_iovec+0x73/0xa0 [ 153.413429][ T6393] ___sys_sendmsg+0x2a5/0x360 [ 153.413456][ T6393] ? __lock_acquire+0x683/0x2ce0 [ 153.413485][ T6393] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.413520][ T6393] ? futex_wait+0x2a2/0x390 [ 153.413588][ T6393] ? __fget_files+0x2a/0x420 [ 153.413613][ T6393] ? __fget_files+0x3a8/0x420 [ 153.413649][ T6393] __x64_sys_sendmsg+0x1b7/0x290 [ 153.413680][ T6393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.413726][ T6393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.413751][ T6393] do_syscall_64+0x174/0x580 [ 153.413777][ T6393] ? trace_irq_disable+0x3b/0x140 [ 153.413800][ T6393] ? clear_bhb_loop+0x40/0x90 [ 153.413828][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.413851][ T6393] RIP: 0033:0x7fd7c338de99 [ 153.413873][ T6393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.413891][ T6393] RSP: 002b:00007fd7c15e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.413914][ T6393] RAX: ffffffffffffffda RBX: 00007fd7c3615fa0 RCX: 00007fd7c338de99 [ 153.413932][ T6393] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 153.413946][ T6393] RBP: 00007fd7c3423eaf R08: 0000000000000000 R09: 0000000000000000 [ 153.413960][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.413973][ T6393] R13: 00007fd7c3616038 R14: 00007fd7c3615fa0 R15: 00007ffd3670a2f8 [ 153.414008][ T6393] [ 154.049947][ C0] net_ratelimit: 7798 callbacks suppressed [ 154.049966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:11:1e:45:d3:bd, vlan:0) [ 154.057234][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.086857][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.091614][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:11:1e:45:d3:bd, vlan:0) [ 154.091959][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.092303][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.092772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:11:1e:45:d3:bd, vlan:0) [ 154.093088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.093395][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.093689][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:11:1e:45:d3:bd, vlan:0) [ 157.337135][ T3278] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.091762][ T6241] syz-executor (6241) used greatest stack depth: 18304 bytes left [ 158.130690][ T5604] bridge0: port 4(syz_tun) entered disabled state [ 158.260668][ T5604] syz_tun (unregistering): left allmulticast mode [ 158.260704][ T5604] syz_tun (unregistering): left promiscuous mode [ 158.261424][ T5604] bridge0: port 4(syz_tun) entered disabled state [ 159.057876][ C0] net_ratelimit: 11069 callbacks suppressed [ 159.057902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:11:1e:45:d3:bd, vlan:0) [ 159.058246][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.058555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.058803][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:11:1e:45:d3:bd, vlan:0) [ 159.059084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.059376][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.059638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:11:1e:45:d3:bd, vlan:0) [ 159.059891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.060138][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.060424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:11:1e:45:d3:bd, vlan:0) [ 159.463785][ T3278] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.825446][ T3278] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.149429][ T3278] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.886440][ T3278] netdevsim netdevsim10 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.250625][ T3278] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.867834][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 162.158790][ T3278] bridge_slave_1: left allmulticast mode [ 162.159051][ T3278] bridge_slave_1: left promiscuous mode [ 162.208251][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.458145][ T3278] bridge_slave_0: left allmulticast mode [ 162.458183][ T3278] bridge_slave_0: left promiscuous mode [ 162.458429][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state