last executing test programs: 30.333041069s ago: executing program 1 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1 1 1\x00', 0x6) close(0xffffffffffffffff) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'netdevsim0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0x0) 30.264071866s ago: executing program 1 (id=365): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x40, 0x11, 0x0, @remote, @local, {[], {0x4000, 0x4e20, 0x20, 0x0, @opaque='\x00'/16}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 30.1371865s ago: executing program 1 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "ffffffff"}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "ffffffff"}]}]}, 0x48}}, 0x0) 30.122107927s ago: executing program 1 (id=367): r0 = socket$inet6(0xa, 0x3, 0x63) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000086340fe8000000000000000000000000000bbfe8000000000000000000000000000aa0092000000000000"], 0x0) recvfrom$inet6(r0, &(0x7f0000000000), 0x1, 0x20, 0x0, 0x0) 30.009593166s ago: executing program 1 (id=369): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000300)='sit0:0\x00'/16, 0x10) pread64(r0, &(0x7f0000000000), 0x10, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x890b, &(0x7f0000000100)="00000000000000000200000000000000000000000000000002000000000000000000000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000007f00"/126) 29.8628096s ago: executing program 1 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01\\x02\\x03\\x04 2000000000 0 0 0 krb5 \\x00\\x00\\x00\\x00\\xff\\xff\\x7f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\x10\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\x10\n', 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000450)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000003000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) 14.347201585s ago: executing program 32 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01\\x02\\x03\\x04 2000000000 0 0 0 krb5 \\x00\\x00\\x00\\x00\\xff\\xff\\x7f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\x10\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\x10\n', 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000450)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000003000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) 5.302483791s ago: executing program 4 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1002}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000350)={'syzkaller0\x00', @random="0100aabbccdd"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x0, 0x0, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@bridge_setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_PHYS_PORT_ID={0x0, 0x0, "050008000100000005002700010000000500280001000000"}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', 0x1}) write$tun(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="00112233445500aabbccddee08004500002800010000401174c0010101010101010212345678001400006162636465666768"], 0x32) 5.075001271s ago: executing program 3 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0x2, 0xb}, {0xffffffff}}, [@qdisc_kind_options=@q_fq_pie={{}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r2}, 0x14) sendto(r3, &(0x7f0000000400)="00112233445566778899aabbccdd", 0xe, 0x0, &(0x7f0000000300)=@ll={0x11, 0x0, r2}, 0x14) 4.752877443s ago: executing program 2 (id=480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000106000000000000000000000000000000001000030073797a6b616c6c657230000014001280080001007672660008000280e8030000"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000000a010000000000000000000000000a18000000000a010400000000000000000a00000a0800010073797a304c000000030a010400000000000000000a00000a0800010073797a300800030073797a30140004800800010003000000080002000000000008000500000000000c00060066696c746572000014000000010a010000000000000000000000000a"], 0x8c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000700)='veth0\x00', 0x6) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000740)=0x1, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000003c0)='hello', 0x5}], 0x1, &(0x7f0000000900)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r2}}}], 0x28}, 0x0) 2.79709458s ago: executing program 2 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/netfilter\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/netfilter/nf_conntrack_max\x00', 0x0, 0x0) 2.784450047s ago: executing program 0 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r0, &(0x7f0000000470), 0x0) 2.773794159s ago: executing program 3 (id=487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000300)=0x64, 0x4) 2.604933895s ago: executing program 4 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x80, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x9}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010101}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000240)='\x00\x00', 0x2, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f00000002c0)={0x0, 0x1dcd6500}, 0x0) 2.529761344s ago: executing program 2 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='5\n\x00', 0x2) 2.361451524s ago: executing program 0 (id=490): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x2}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x3}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 2.143706406s ago: executing program 0 (id=491): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="01020304203230303030303030303020", 0x10) 1.904872149s ago: executing program 0 (id=492): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100)="0000000011223344", 0x8, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="06000004", 0x4, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) shutdown(r2, 0x2) close(r1) close(0xffffffffffffffff) close(r0) 1.85353269s ago: executing program 4 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r0, &(0x7f0000000470)='10\n', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) 1.800532777s ago: executing program 2 (id=494): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @empty, 0xc0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff00000000c0000001"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400014073683b00000000ffffffff0000000000000000"], 0x0) 1.722951839s ago: executing program 3 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000400)="5b4000380000000000000000010010020000000000000000010010020000000000000000000000000000126770656572315f6e6f64655f69645f3132", 0x38, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x0, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x18}}, 0x0) 1.547678439s ago: executing program 4 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'erspan0\x00', @ifru_flags=0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000500)="4500002000000000401100000a0000010a0000020000000000000000", 0x1c, 0x0, &(0x7f0000000600)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.40920831s ago: executing program 3 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x60d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_connmark={0x54, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x5, 0x6, '\x00'}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.408824947s ago: executing program 2 (id=498): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x8, 0x0, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.121028471s ago: executing program 2 (id=499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x41}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0x601, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x8003}, {}, {0x0, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x50}, {0x0, 0x2, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40010) write(r0, &(0x7f0000000300)="000008004500001c0001000040117ccd7f0000017f0000011234123400080000", 0x20) 810.634371ms ago: executing program 0 (id=500): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x400, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 397.894103ms ago: executing program 4 (id=501): r0 = socket$inet_tcp(0x2, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x1234, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000)="00112233", 0x4, 0x0, 0x0, 0x0) 271.658855ms ago: executing program 3 (id=502): socket$phonet(0x23, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/phonet/local_port_range\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='200 100\n', 0x8) 271.336484ms ago: executing program 4 (id=503): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x3, &(0x7f0000000040)={&(0x7f0000800000), 0x1000, 0x800}, 0x20) 38.621688ms ago: executing program 0 (id=504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/29, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 3 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0 1 1\x00', 0x6) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x1}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x605, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.83' (ED25519) to the list of known hosts. [ 92.017913][ T197] cfg80211: failed to load regulatory.db [ 92.367968][ T5587] cgroup: Unknown subsys name 'net' [ 92.590913][ T5587] cgroup: Unknown subsys name 'cpuset' [ 92.644295][ T5587] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.699147][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.430808][ T4917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.438053][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.448788][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.452486][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.461780][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.462519][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.500161][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.504970][ T4917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.529578][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.540336][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.612183][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.641204][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.676668][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.678883][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.699628][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.705636][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.706385][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.721214][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.735634][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.760436][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.762529][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.763074][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.764320][ T5607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.795157][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.837495][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.585531][ T5607] Bluetooth: hci0: command tx timeout [ 99.663876][ T5607] Bluetooth: hci1: command tx timeout [ 99.904115][ T59] Bluetooth: hci2: command tx timeout [ 99.904238][ T59] Bluetooth: hci4: command tx timeout [ 99.904322][ T59] Bluetooth: hci3: command tx timeout [ 100.627198][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.628570][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.628727][ T5600] bridge_slave_0: entered allmulticast mode [ 100.630739][ T5600] bridge_slave_0: entered promiscuous mode [ 100.724232][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.724338][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.724528][ T5600] bridge_slave_1: entered allmulticast mode [ 100.726602][ T5600] bridge_slave_1: entered promiscuous mode [ 100.727670][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.727782][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.727909][ T5599] bridge_slave_0: entered allmulticast mode [ 100.729864][ T5599] bridge_slave_0: entered promiscuous mode [ 100.739124][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.739445][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.742896][ T5601] bridge_slave_0: entered allmulticast mode [ 100.751945][ T5601] bridge_slave_0: entered promiscuous mode [ 100.842859][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.842981][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.843118][ T5599] bridge_slave_1: entered allmulticast mode [ 100.858098][ T5599] bridge_slave_1: entered promiscuous mode [ 100.863243][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.863632][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.872448][ T5601] bridge_slave_1: entered allmulticast mode [ 100.881494][ T5601] bridge_slave_1: entered promiscuous mode [ 100.986936][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.061375][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.074275][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.078451][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.108332][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.108539][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.108719][ T5603] bridge_slave_0: entered allmulticast mode [ 101.110925][ T5603] bridge_slave_0: entered promiscuous mode [ 101.158313][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.162533][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.162927][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.163072][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.163224][ T5602] bridge_slave_0: entered allmulticast mode [ 101.182676][ T5602] bridge_slave_0: entered promiscuous mode [ 101.203711][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.204098][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.204739][ T5603] bridge_slave_1: entered allmulticast mode [ 101.230215][ T5603] bridge_slave_1: entered promiscuous mode [ 101.286329][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.286475][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.286602][ T5602] bridge_slave_1: entered allmulticast mode [ 101.288490][ T5602] bridge_slave_1: entered promiscuous mode [ 101.330019][ T5600] team0: Port device team_slave_0 added [ 101.402158][ T5600] team0: Port device team_slave_1 added [ 101.411833][ T5599] team0: Port device team_slave_0 added [ 101.416296][ T5601] team0: Port device team_slave_0 added [ 101.454658][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.484390][ T5599] team0: Port device team_slave_1 added [ 101.486557][ T5601] team0: Port device team_slave_1 added [ 101.489656][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.492606][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.562029][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.586187][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.586205][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.586233][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.663548][ T5607] Bluetooth: hci0: command tx timeout [ 101.691257][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.691276][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.691304][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.698987][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.699030][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.699106][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.725451][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.725503][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.725570][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.744742][ T5607] Bluetooth: hci1: command tx timeout [ 101.835938][ T5603] team0: Port device team_slave_0 added [ 101.851732][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.851746][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.851766][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.860452][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.860535][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.860611][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.899836][ T5602] team0: Port device team_slave_0 added [ 101.912748][ T5603] team0: Port device team_slave_1 added [ 101.977211][ T5602] team0: Port device team_slave_1 added [ 101.983906][ T5607] Bluetooth: hci3: command tx timeout [ 101.983998][ T5607] Bluetooth: hci4: command tx timeout [ 101.984055][ T5607] Bluetooth: hci2: command tx timeout [ 102.455644][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.455662][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.455688][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.540130][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.540144][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.540165][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.541397][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.541412][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.541440][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.632665][ T5600] hsr_slave_0: entered promiscuous mode [ 102.635932][ T5600] hsr_slave_1: entered promiscuous mode [ 102.680656][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.680674][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.680712][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.736478][ T5599] hsr_slave_0: entered promiscuous mode [ 102.737754][ T5599] hsr_slave_1: entered promiscuous mode [ 102.738559][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 102.738645][ T5599] Cannot create hsr debugfs directory [ 102.754838][ T5601] hsr_slave_0: entered promiscuous mode [ 102.758289][ T5601] hsr_slave_1: entered promiscuous mode [ 102.760971][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 102.761046][ T5601] Cannot create hsr debugfs directory [ 102.977503][ T5603] hsr_slave_0: entered promiscuous mode [ 102.978549][ T5603] hsr_slave_1: entered promiscuous mode [ 102.979265][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 102.979283][ T5603] Cannot create hsr debugfs directory [ 103.035623][ T5602] hsr_slave_0: entered promiscuous mode [ 103.036702][ T5602] hsr_slave_1: entered promiscuous mode [ 103.037386][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 103.037403][ T5602] Cannot create hsr debugfs directory [ 103.743813][ T59] Bluetooth: hci0: command tx timeout [ 103.823670][ T59] Bluetooth: hci1: command tx timeout [ 103.970806][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.017230][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.022676][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.058360][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.063261][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.063987][ T59] Bluetooth: hci2: command tx timeout [ 104.064015][ T59] Bluetooth: hci4: command tx timeout [ 104.064033][ T59] Bluetooth: hci3: command tx timeout [ 104.129824][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.163181][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.186995][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.291301][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.318940][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.333664][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.368458][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.370507][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.408851][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.452845][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.488534][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.668686][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.698692][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.714541][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.742254][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.758005][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.778477][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.813954][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.850209][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.999676][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.028447][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.046988][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.078489][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.086468][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.139811][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.186163][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.228641][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.409857][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.436312][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.470247][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.491626][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.527210][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.539646][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.585031][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.598053][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.627984][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.705624][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.747050][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.761487][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.761662][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.825205][ T5607] Bluetooth: hci0: command tx timeout [ 105.847511][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.847646][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.903586][ T5607] Bluetooth: hci1: command tx timeout [ 105.956557][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.014280][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.014493][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.060767][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.112154][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.112319][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.143717][ T5607] Bluetooth: hci3: command tx timeout [ 106.143760][ T5607] Bluetooth: hci4: command tx timeout [ 106.143784][ T5607] Bluetooth: hci2: command tx timeout [ 106.216767][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.255318][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.298541][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.302873][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.365346][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.365458][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.456813][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.507230][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.530905][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.531042][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.609858][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.609995][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.737566][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.837492][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.837712][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.947623][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.947830][ T3406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.699222][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.184732][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.216869][ T5600] veth0_vlan: entered promiscuous mode [ 108.332096][ T5600] veth1_vlan: entered promiscuous mode [ 108.497935][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.567862][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.613848][ T5601] veth0_vlan: entered promiscuous mode [ 108.618165][ T5600] veth0_macvtap: entered promiscuous mode [ 108.668243][ T5600] veth1_macvtap: entered promiscuous mode [ 108.700974][ T5601] veth1_vlan: entered promiscuous mode [ 108.814142][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.847344][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.874929][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.959103][ T5603] veth0_vlan: entered promiscuous mode [ 109.032065][ T5602] veth0_vlan: entered promiscuous mode [ 109.063218][ T5603] veth1_vlan: entered promiscuous mode [ 109.074287][ T5601] veth0_macvtap: entered promiscuous mode [ 109.192002][ T5601] veth1_macvtap: entered promiscuous mode [ 109.212988][ T5602] veth1_vlan: entered promiscuous mode [ 109.447982][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.518159][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.550540][ T5603] veth0_macvtap: entered promiscuous mode [ 109.592165][ T5603] veth1_macvtap: entered promiscuous mode [ 109.663892][ T5602] veth0_macvtap: entered promiscuous mode [ 109.700815][ T3406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.700842][ T3406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.781696][ T5602] veth1_macvtap: entered promiscuous mode [ 109.811503][ T5599] veth0_vlan: entered promiscuous mode [ 109.968181][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.064257][ T3406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.064278][ T3406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.090753][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.145437][ T5599] veth1_vlan: entered promiscuous mode [ 110.231171][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.314406][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.335660][ T372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.335681][ T372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.962306][ T3383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.962327][ T3383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.360546][ T5599] veth0_macvtap: entered promiscuous mode [ 111.421821][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.421844][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.525406][ T5599] veth1_macvtap: entered promiscuous mode [ 111.832083][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.848877][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.848898][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.915833][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.959066][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.208688][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.208710][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.301414][ T5800] syz.0.8 (5800) used greatest stack depth: 19232 bytes left [ 112.478177][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.478202][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.978648][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.378496][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.378515][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.437691][ T3375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.570726][ T3375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.792797][ T1176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.375045][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.375068][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.463976][ T3406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.465451][ T372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.513792][ T372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.514618][ T372] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.515094][ T1176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.515577][ T1176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.515836][ T1176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.516257][ T1176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.516497][ T1176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.335593][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 116.937474][ T5894] hsr_slave_0: left promiscuous mode [ 117.009251][ T5894] hsr_slave_1: left promiscuous mode [ 117.268985][ T5906] Zero length message leads to an empty skb [ 117.344635][ T9] IPVS: starting estimator thread 0... [ 117.370577][ T5912] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 1, id = 0 [ 117.462006][ T5911] IPVS: using max 10 ests per chain, 24000 per kthread [ 117.755457][ T3406] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.830915][ T3406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.831964][ T3406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.962247][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.962711][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.040416][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.349231][ T5932] netlink: 268 bytes leftover after parsing attributes in process `syz.1.38'. [ 118.380796][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.380837][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.393663][ T5884] NFSD: Unable to initialize client recovery tracking! (-110) [ 118.393683][ T5884] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 118.393696][ T5884] NFSD: starting 10-second grace period (net f0000536) [ 118.443542][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.531115][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.635620][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.689303][ T5927] syz.4.37 (5927) used greatest stack depth: 19160 bytes left [ 119.311069][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.367358][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.416592][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.423107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.459403][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.582404][ T5983] NFSD: Failed to start, no listeners configured. [ 121.957238][ T5709] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 122.026863][ T5709] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 122.069765][ T5996] ceph: No mds server is up or the cluster is laggy [ 122.288124][ T197] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 122.582888][ T5975] infiniband syz0: set active [ 122.582912][ T5975] infiniband syz0: added veth0 [ 122.818645][ T5975] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 122.818689][ T5975] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 122.818734][ T5975] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 123.230154][ T5975] RDS/IB: syz0: added [ 123.261802][ T5975] smc: adding ib device syz0 with port count 1 [ 123.262022][ T5975] smc: ib device syz0 port 1 has no pnetid [ 123.420213][ T6003] svc: failed to register lockdv1 RPC service (errno 111). [ 123.420756][ T6003] lockd_up: makesock failed, error=-111 [ 123.504085][ C0] net_ratelimit: 43 callbacks suppressed [ 123.504105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.543171][ T48] IPVS: starting estimator thread 0... [ 123.549439][ T6022] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 123.633574][ T6021] IPVS: using max 10 ests per chain, 24000 per kthread [ 123.824436][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.032299][ T6003] svc: failed to register nfsdv3 RPC service (errno 512). [ 124.032545][ T6003] svc: failed to register nfsaclv3 RPC service (errno 512). [ 124.032562][ T6003] failed to unregister tcp with rpcbind [ 124.078062][ T6003] svc: failed to register nfsdv3 RPC service (errno 97). [ 124.078090][ T6003] svc: failed to register nfsaclv3 RPC service (errno 97). [ 124.078104][ T6003] failed to unregister tcp with rpcbind [ 124.686493][ T1126] netdevsim netdevsim99 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.864243][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.105644][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.273673][ T6004] NFSD: Unable to initialize client recovery tracking! (-110) [ 125.273695][ T6004] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 125.273708][ T6004] NFSD: starting 10-second grace period (net f0000536) [ 125.446337][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.593589][ T48] usb 1-1: device descriptor read/64, error -71 [ 125.637279][ T6036] netlink: 76 bytes leftover after parsing attributes in process `syz.2.72'. [ 125.879895][ T48] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.914293][ T5590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.093546][ T48] usb 1-1: device descriptor read/64, error -71 [ 126.144047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.221353][ T48] usb usb1-port1: attempt power cycle [ 126.615841][ T6046] NFSD: Failed to start, no listeners configured. [ 126.733609][ T48] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.754351][ T48] usb 1-1: device descriptor read/8, error -71 [ 126.890325][ T6059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.890555][ T6060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.942800][ T6062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.959588][ T5590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.087483][ T48] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.116104][ T48] usb 1-1: device descriptor read/8, error -71 [ 127.230433][ T48] usb usb1-port1: unable to enumerate USB device [ 127.484658][ T6061] svc: failed to register lockdv1 RPC service (errno 111). [ 127.540435][ T6070] hsr_slave_0: left promiscuous mode [ 127.578958][ T6070] hsr_slave_1: left promiscuous mode [ 127.690155][ T6074] bond0: entered promiscuous mode [ 127.690173][ T6074] bond_slave_0: entered promiscuous mode [ 127.690353][ T6074] bond_slave_1: entered promiscuous mode [ 127.711183][ T6074] gretap0: entered promiscuous mode [ 127.720904][ T6074] dummy0: entered promiscuous mode [ 128.248377][ T6061] svc: failed to register nfsdv3 RPC service (errno 512). [ 128.248603][ T6061] svc: failed to register nfsaclv3 RPC service (errno 512). [ 128.248620][ T6061] failed to unregister tcp with rpcbind [ 128.248906][ T6061] svc: failed to register nfsdv3 RPC service (errno 97). [ 128.248925][ T6061] svc: failed to register nfsaclv3 RPC service (errno 97). [ 128.248939][ T6061] failed to unregister tcp with rpcbind [ 128.609705][ T13] net_ratelimit: 10 callbacks suppressed [ 128.640015][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.018190][ T6097] smc: net device lo applied user defined pnetid SYZ0 [ 129.018403][ T6097] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 129.023760][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.078137][ T6099] netlink: 'syz.4.91': attribute type 2 has an invalid length. [ 129.785848][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.945001][ T5789] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.064061][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.158252][ T5789] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 130.158284][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 130.158307][ T5789] usb 1-1: Product: syz [ 130.158322][ T5789] usb 1-1: Manufacturer: syz [ 131.105487][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.689358][ T5789] usb 1-1: selecting invalid altsetting 1 [ 131.689399][ T5789] speedtch 1-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 131.760068][ T5789] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -22! [ 131.760127][ T5789] speedtch 1-1:1.0: probe with driver speedtch failed with error -22 [ 131.899932][ T5789] usb 1-1: selecting invalid altsetting 1 [ 131.899956][ T5789] speedtch 1-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 132.123817][ T5789] speedtch 1-1:1.1: usbatm_usb_probe: bind failed: -22! [ 132.123893][ T5789] speedtch 1-1:1.1: probe with driver speedtch failed with error -22 [ 132.172968][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.560113][ T5789] usb 1-1: USB disconnect, device number 6 [ 132.892726][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.000091][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.000193][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.127070][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 133.127092][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 133.183746][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.583827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.939649][ T6178] netlink: 76 bytes leftover after parsing attributes in process `syz.2.117'. [ 133.939678][ T6178] netlink: 76 bytes leftover after parsing attributes in process `syz.2.117'. [ 134.265126][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.346927][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.672050][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 135.781276][ T6196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.906450][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.133594][ T6188] NFSD: Unable to initialize client recovery tracking! (-110) [ 136.133616][ T6188] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 136.133628][ T6188] NFSD: starting 90-second grace period (net f0000532) [ 136.384216][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.529213][ T6196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.047778][ T6196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.427609][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.876100][ T6196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.467736][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.585386][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.591642][ T5710] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 138.613787][ T6245] ceph: No mds server is up or the cluster is laggy [ 138.954837][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.438203][ T6257] NFSD: Unable to initialize client recovery tracking! (-110) [ 139.438231][ T6257] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 139.438239][ T6257] NFSD: starting 90-second grace period (net f0000408) [ 139.516035][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.992412][ T5590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.548273][ T5590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.552383][ T6296] netlink: 56 bytes leftover after parsing attributes in process `syz.2.154'. [ 141.596392][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.623745][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.933824][ T6331] NFSD: Unable to initialize client recovery tracking! (-110) [ 142.933847][ T6331] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 142.933861][ T6331] NFSD: starting 90-second grace period (net f0000408) [ 143.029041][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.663798][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.464189][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.507172][ T6398] smc: smcd device lo applied user defined pnetid SYZ0 [ 144.705161][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.459487][ T5717] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 145.477957][ T6404] ceph: No mds server is up or the cluster is laggy [ 145.486118][ T6432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.200'. [ 145.497930][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.200'. [ 145.730706][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 145.745060][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.783751][ T5590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.503977][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.678240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.823747][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.863681][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.904789][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.545970][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.953862][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.986234][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 151.873151][ T6561] FAULT_INJECTION: forcing a failure. [ 151.873151][ T6561] name failslab, interval 1, probability 100, space 0, times 1 [ 151.873206][ T6558] FAULT_INJECTION: forcing a failure. [ 151.873206][ T6558] name failslab, interval 1, probability 100, space 0, times 1 [ 151.873219][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.873248][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.873267][ T6561] Call Trace: [ 151.873275][ T6561] [ 151.873282][ T6561] dump_stack_lvl+0xe8/0x150 [ 151.873336][ T6561] should_fail_ex+0x467/0x600 [ 151.873377][ T6561] should_failslab+0xa8/0x100 [ 151.873406][ T6561] kmem_cache_alloc_noprof+0xa4/0x650 [ 151.873429][ T6561] ? do_getname+0x2e/0x250 [ 151.873500][ T6561] ? do_getname+0x2e/0x250 [ 151.873612][ T6561] do_getname+0x2e/0x250 [ 151.873705][ T6561] ? __se_sys_symlinkat+0x22/0x2b0 [ 151.873790][ T6561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.873854][ T6561] __se_sys_symlinkat+0x2e/0x2b0 [ 151.873939][ T6561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.874001][ T6561] do_syscall_64+0x174/0x580 [ 151.874077][ T6561] ? trace_irq_disable+0x3b/0x140 [ 151.874150][ T6561] ? clear_bhb_loop+0x40/0x90 [ 151.874216][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.874279][ T6561] RIP: 0033:0x7fb5b97cd0d7 [ 151.874338][ T6561] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.874383][ T6561] RSP: 002b:00007ffd8f488a38 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 151.874461][ T6561] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb5b97cd0d7 [ 151.874483][ T6561] RDX: 00007fb5b9865fc5 RSI: 00000000ffffff9c RDI: 00007ffd8f488ad0 [ 151.874518][ T6561] RBP: 00007ffd8f488a7c R08: 0000000000000001 R09: 00000000ffffffff [ 151.874560][ T6561] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000002d [ 151.874593][ T6561] R13: 00000000000927c0 R14: 0000000000024eeb R15: 00007ffd8f488ad0 [ 151.874671][ T6561] [ 151.897521][ T6558] CPU: 0 UID: 0 PID: 6558 Comm: syz.4.248 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.897621][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.897662][ T6558] Call Trace: [ 151.897683][ T6558] [ 151.897699][ T6558] dump_stack_lvl+0xe8/0x150 [ 151.897807][ T6558] should_fail_ex+0x467/0x600 [ 151.897922][ T6558] should_failslab+0xa8/0x100 [ 151.897993][ T6558] kmem_cache_alloc_noprof+0xa4/0x650 [ 151.898058][ T6558] ? do_getname+0x2e/0x250 [ 151.898098][ T6558] ? do_getname+0x2e/0x250 [ 151.898146][ T6558] do_getname+0x2e/0x250 [ 151.898215][ T6558] ? getname_flags+0x11/0x20 [ 151.898314][ T6558] do_sys_openat2+0xcc/0x200 [ 151.898382][ T6558] ? __se_sys_futex+0x3a8/0x450 [ 151.898473][ T6558] ? __pfx_do_sys_openat2+0x10/0x10 [ 151.898552][ T6558] ? rcu_is_watching+0x15/0xb0 [ 151.898635][ T6558] __x64_sys_openat+0x138/0x170 [ 151.898710][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.898776][ T6558] do_syscall_64+0x174/0x580 [ 151.898864][ T6558] ? trace_irq_disable+0x3b/0x140 [ 151.898922][ T6558] ? clear_bhb_loop+0x40/0x90 [ 151.898998][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.899040][ T6558] RIP: 0033:0x7f77661be019 [ 151.899061][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.899130][ T6558] RSP: 002b:00007f7764416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.899223][ T6558] RAX: ffffffffffffffda RBX: 00007f7766445fa0 RCX: 00007f77661be019 [ 151.899273][ T6558] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 151.899317][ T6558] RBP: 00007f776625500c R08: 0000000000000000 R09: 0000000000000000 [ 151.899358][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.899392][ T6558] R13: 00007f7766446038 R14: 00007f7766445fa0 R15: 00007fffd9c06608 [ 151.899481][ T6558] [ 152.171268][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.943306][ T6580] netlink: 76 bytes leftover after parsing attributes in process `syz.2.257'. [ 152.943689][ T6580] netlink: 76 bytes leftover after parsing attributes in process `syz.2.257'. [ 153.092239][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 153.117312][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 153.183802][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.596470][ T6560] NFSD: Unable to initialize client recovery tracking! (-110) [ 153.596492][ T6560] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 153.596505][ T6560] NFSD: starting 10-second grace period (net f00003bf) [ 153.629195][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.223697][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.704972][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.273705][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.303823][ T5590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.463785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.464014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.345218][ T6626] netlink: 'syz.2.267': attribute type 2 has an invalid length. [ 157.347438][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.375635][ T48] IPVS: starting estimator thread 0... [ 157.463670][ T6628] IPVS: using max 8 ests per chain, 19200 per kthread [ 157.744272][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.383776][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.444926][ T6619] NFSD: Unable to initialize client recovery tracking! (-110) [ 158.444948][ T6619] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 158.444962][ T6619] NFSD: starting 90-second grace period (net f0000408) [ 159.423648][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.393587][ T6642] NFSD: Unable to initialize client recovery tracking! (-110) [ 160.393607][ T6642] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 160.393619][ T6642] NFSD: starting 90-second grace period (net f0000532) [ 160.480649][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.783777][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.268415][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 161.504157][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.553676][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.603610][ T6680] NFSD: Unable to initialize client recovery tracking! (-110) [ 162.603630][ T6680] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 162.603644][ T6680] NFSD: starting 10-second grace period (net f0000408) [ 163.583978][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.706612][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 163.837537][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.624245][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.876547][ T6773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.326'. [ 164.893669][ T6774] netlink: 44 bytes leftover after parsing attributes in process `syz.0.325'. [ 165.535296][ T6748] NFSD: Unable to initialize client recovery tracking! (-110) [ 165.535316][ T6748] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 165.535329][ T6748] NFSD: starting 10-second grace period (net f0000532) [ 165.663697][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.891756][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'. [ 165.891784][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 166.325851][ T6814] rdma_rxe: rxe_newlink: failed to add veth0 [ 166.632390][ T6824] bridge0: port 3(erspan0) entered blocking state [ 166.648338][ T6824] bridge0: port 3(erspan0) entered disabled state [ 166.656513][ T6824] erspan0: entered allmulticast mode [ 166.677463][ T6824] erspan0: entered promiscuous mode [ 166.710007][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.804236][ T6824] bridge0: port 3(erspan0) entered blocking state [ 166.804421][ T6824] bridge0: port 3(erspan0) entered forwarding state [ 166.951299][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.442317][ T6838] bridge0: port 3(veth0) entered blocking state [ 167.442466][ T6838] bridge0: port 3(veth0) entered disabled state [ 167.442673][ T6838] veth0: entered allmulticast mode [ 167.500456][ T6838] veth0: entered promiscuous mode [ 167.611452][ T6838] bridge0: port 3(veth0) entered blocking state [ 167.620214][ T6838] bridge0: port 3(veth0) entered forwarding state [ 167.754696][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.786572][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.786784][ T6849] NFSD: Unable to initialize client recovery tracking! (-110) [ 168.786797][ T6849] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 168.786806][ T6849] NFSD: starting 10-second grace period (net f000042c) [ 168.879989][ T6892] netlink: 'syz.0.373': attribute type 2 has an invalid length. [ 168.880014][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 168.955838][ T6892] : entered promiscuous mode [ 169.823907][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.983714][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.176949][ T6911] rdma_rxe: rxe_newlink: failed to add eth0 [ 170.567835][ T6916] tipc: Started in network mode [ 170.567863][ T6916] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 170.569074][ T6916] tipc: Enabled bearer , priority 10 [ 170.622843][ T6917] tipc: Disabling bearer [ 170.878467][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.961956][ T6919] syz.0.381 (6919) used greatest stack depth: 18528 bytes left [ 171.425493][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 171.916745][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.276780][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 172.946082][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.009136][ T6953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.396'. [ 173.029225][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.085021][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 173.264160][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.731000][ T6972] netlink: 292 bytes leftover after parsing attributes in process `syz.0.401'. [ 173.984344][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.066269][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.023961][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.103914][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.663846][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.074039][ T5724] net_ratelimit: 1 callbacks suppressed [ 176.074056][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.144286][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.303775][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.465080][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.105597][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.185629][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.153740][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.225884][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.703708][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.026039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.265343][ T5717] net_ratelimit: 6 callbacks suppressed [ 181.265363][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.343878][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.745312][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.306832][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.384045][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.384375][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.345704][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.413606][ T6888] NFSD: Unable to initialize client recovery tracking! (-110) [ 183.413628][ T6888] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 183.413646][ T6888] NFSD: starting 10-second grace period (net f0000408) [ 183.449385][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.506243][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.534312][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.852561][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.889761][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.894982][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.905955][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.912949][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.219703][ T7005] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 186.463923][ T5724] net_ratelimit: 31 callbacks suppressed [ 186.463945][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.544187][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.545731][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.105924][ T59] Bluetooth: hci5: command tx timeout [ 187.106662][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.127658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.149393][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.151915][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.152528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.511957][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.584659][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.656937][ T5717] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 187.658675][ T3305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.699223][ T7063] ceph: No mds server is up or the cluster is laggy [ 188.414937][ T3305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.491165][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 189.100616][ T3305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.183549][ T59] Bluetooth: hci5: command tx timeout [ 189.550674][ T7126] netlink: 'syz.2.447': attribute type 2 has an invalid length. [ 189.550729][ T7126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.447'. [ 189.741072][ T3305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.856760][ T7128] veth0: entered promiscuous mode [ 189.861073][ T7128] veth1: entered promiscuous mode [ 189.900028][ T7128] veth0: left promiscuous mode [ 190.005898][ T7128] veth1: left promiscuous mode [ 190.287341][ T5710] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 190.292251][ T7118] ceph: No mds server is up or the cluster is laggy [ 191.263440][ T59] Bluetooth: hci5: command tx timeout [ 191.321120][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.322469][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.322651][ T6997] bridge_slave_0: entered allmulticast mode [ 191.337425][ T6997] bridge_slave_0: entered promiscuous mode [ 191.744178][ T5590] net_ratelimit: 18 callbacks suppressed [ 191.744196][ T5590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.744356][ T5590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.847326][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.847496][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.847682][ T6997] bridge_slave_1: entered allmulticast mode [ 191.851340][ T6997] bridge_slave_1: entered promiscuous mode [ 191.887384][ T7184] tipc: Started in network mode [ 191.887417][ T7184] tipc: Node identity 7f000001, cluster identity 4711 [ 192.018929][ T7184] tipc: New replicast peer: 127.0.0.1 [ 192.042344][ T7184] tipc: Enabled bearer , priority 10 [ 192.143701][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.540114][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.623855][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.784530][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.784716][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.818385][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.108228][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.182025][ T3305] veth0: left allmulticast mode [ 193.182418][ T3305] veth0: left promiscuous mode [ 193.218597][ T3305] bridge0: port 3(veth0) entered disabled state [ 193.309831][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 193.343673][ T59] Bluetooth: hci5: command tx timeout [ 193.436876][ T3305] bridge_slave_1: left allmulticast mode [ 193.436918][ T3305] bridge_slave_1: left promiscuous mode [ 193.437214][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.687671][ T3305] bridge_slave_0: left allmulticast mode [ 193.687703][ T3305] bridge_slave_0: left promiscuous mode [ 193.690206][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.745829][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.796529][ T7235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.480'. [ 193.824475][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.211974][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 194.394208][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394259][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.733558][ T3305] gretap0 (unregistering): left promiscuous mode [ 194.865193][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.003462][ T3305] bond0 (unregistering): left promiscuous mode [ 195.003486][ T3305] bond_slave_0: left promiscuous mode [ 195.003888][ T3305] bond_slave_1: left promiscuous mode [ 195.104411][ T3305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.189471][ T3305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.229972][ T3305] bond0 (unregistering): Released all slaves [ 195.326663][ T9] tipc: Node number set to 2130706433 [ 195.405697][ T7231] netlink: 56 bytes leftover after parsing attributes in process `syz.3.477'. [ 195.410529][ T6997] team0: Port device team_slave_0 added [ 195.461192][ T6997] team0: Port device team_slave_1 added [ 195.882172][ T3305] IPVS: stopping backup sync thread 5912 ... [ 195.896445][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.896464][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.896493][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.899208][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.899225][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.899254][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.945409][ T48] net_ratelimit: 3 callbacks suppressed [ 196.945430][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.690449][ T7316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.712248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.712701][ T7316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.772763][ T7316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.847419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.876534][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 197.880593][ T7318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.906855][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.973021][ T6997] hsr_slave_0: entered promiscuous mode [ 197.987755][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.992664][ T6997] hsr_slave_1: entered promiscuous mode [ 198.007696][ T6997] debugfs: 'hsr0' already exists in 'hsr' [ 198.007727][ T6997] Cannot create hsr debugfs directory [ 198.194527][ T7315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.603197][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 198.657096][ T5789] ------------[ cut here ]------------ [ 198.657108][ T5789] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 198.657125][ T5789] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#0: kworker/0:6/5789 [ 198.657165][ T5789] Modules linked in: [ 198.657179][ T5789] CPU: 0 UID: 0 PID: 5789 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.657197][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.657208][ T5789] Workqueue: ceph-msgr ceph_con_workfn [ 198.657231][ T5789] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 198.657256][ T5789] Code: 45 31 e4 e9 3f d1 ff ff e8 68 a6 be f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a a6 be f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c a6 be f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 198.657269][ T5789] RSP: 0018:ffffc90005eaf180 EFLAGS: 00010293 [ 198.657282][ T5789] RAX: ffffffff8b073574 RBX: 0000000000000001 RCX: ffff888030561f00 [ 198.657293][ T5789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.657302][ T5789] RBP: ffffc90005eafa78 R08: 0000000000000000 R09: 0000000000000000 [ 198.657312][ T5789] R10: 0000000000000100 R11: 000000000000000d R12: ffff88802ca64488 [ 198.657322][ T5789] R13: fffff52000bd5e70 R14: dffffc0000000000 R15: 0000000000000000 [ 198.657333][ T5789] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 198.657346][ T5789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.657386][ T5789] CR2: 00007ffe89935170 CR3: 000000003c5dc000 CR4: 00000000003526f0 [ 198.657405][ T5789] Call Trace: [ 198.657414][ T5789] [ 198.657447][ T5789] ? __lock_acquire+0x683/0x2ce0 [ 198.657502][ T5789] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 198.657540][ T5789] ? __lock_acquire+0x683/0x2ce0 [ 198.657559][ T5789] ? __lock_acquire+0x683/0x2ce0 [ 198.657580][ T5789] ? __lock_acquire+0x683/0x2ce0 [ 198.657636][ T5789] ? unwind_next_frame+0x8f/0x2550 [ 198.657658][ T5789] ? unwind_next_frame+0x8f/0x2550 [ 198.657680][ T5789] ? unwind_next_frame+0x8f/0x2550 [ 198.657706][ T5789] ? unwind_next_frame+0x8f/0x2550 [ 198.657725][ T5789] ? unwind_next_frame+0x8f/0x2550 [ 198.657743][ T5789] ? unwind_next_frame+0x1baf/0x2550 [ 198.657764][ T5789] ? ret_from_fork_asm+0x1a/0x30 [ 198.657779][ T5789] ? unwind_next_frame+0x8f/0x2550 [ 198.657799][ T5789] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 198.657815][ T5789] ? arch_stack_walk+0x11b/0x150 [ 198.657837][ T5789] ? ret_from_fork_asm+0x1a/0x30 [ 198.657859][ T5789] ? __lock_acquire+0x683/0x2ce0 [ 198.657886][ T5789] ? __lock_acquire+0x683/0x2ce0 [ 198.657907][ T5789] ? __lock_acquire+0x683/0x2ce0 [ 198.657929][ T5789] ? look_up_lock_class+0x57/0x110 [ 198.657952][ T5789] ? register_lock_class+0x31/0x2e0 [ 198.657972][ T5789] ? __lock_acquire+0x683/0x2ce0 [ 198.658002][ T5789] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 198.658024][ T5789] ? lockdep_hardirqs_on+0x7a/0x110 [ 198.658044][ T5789] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 198.658066][ T5789] ? mutex_lock_nested+0x152/0x1d0 [ 198.658081][ T5789] ? ceph_con_workfn+0x3b/0x14a0 [ 198.658105][ T5789] ceph_con_workfn+0x208/0x14a0 [ 198.658130][ T5789] ? rcu_is_watching+0x15/0xb0 [ 198.658152][ T5789] ? process_scheduled_works+0xa20/0x14e0 [ 198.658172][ T5789] process_scheduled_works+0xa8e/0x14e0 [ 198.658212][ T5789] ? __pfx_process_scheduled_works+0x10/0x10 [ 198.658237][ T5789] ? assign_work+0x3cf/0x5d0 [ 198.658260][ T5789] worker_thread+0xa47/0xfb0 [ 198.658290][ T5789] ? __kthread_parkme+0x71/0x1f0 [ 198.658320][ T5789] kthread+0x388/0x470 [ 198.658344][ T5789] ? __pfx_worker_thread+0x10/0x10 [ 198.658362][ T5789] ? __pfx_kthread+0x10/0x10 [ 198.658387][ T5789] ret_from_fork+0x514/0xb70 [ 198.658436][ T5789] ? __pfx_ret_from_fork+0x10/0x10 [ 198.658462][ T5789] ? __switch_to+0xc89/0x1420 [ 198.658485][ T5789] ? __pfx_kthread+0x10/0x10 [ 198.658510][ T5789] ret_from_fork_asm+0x1a/0x30 [ 198.658563][ T5789] [ 198.658575][ T5789] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 198.658598][ T5789] CPU: 0 UID: 0 PID: 5789 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.658629][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Go