last executing test programs:

3m59.111588043s ago: executing program 32 (id=63):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @rand_addr=0xa000001}})
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags=0x1})
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @rand_addr=0xa000002}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='dummy0\x00'})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r2)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x48, r3, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000400)='dummy0\x00', 0x7)
bind$inet(r4, &(0x7f0000000500)={0x2, 0x4e21, @rand_addr=0xa000001}, 0x10)
listen(r4, 0x5)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000400)='dummy0\x00', 0x7)
connect$inet(r5, &(0x7f0000000600)={0x2, 0x4e21, @rand_addr=0xa000002}, 0x10) (async)
r6 = accept(r4, 0x0, 0x0)
recvmsg(r6, &(0x7f00000003c0), 0x0)

3m46.239245057s ago: executing program 33 (id=117):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000001}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000001}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x2}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000002}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000002}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000002e0)=@dellink={0x10, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000001}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000001}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x2}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000002}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000002}]}, 0x3c}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r2, &(0x7f0000000500)=@in={0x2, 0x1f90, @private=0xa0000001}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r3, &(0x7f0000000520)=@in={0x2, 0x0, @private=0xa0000002}, 0x10)
connect$inet(r3, &(0x7f0000000540)={0x2, 0x1f90, @private=0xa0000001}, 0x10)
accept(r2, 0x0, 0x0)

3m3.729727394s ago: executing program 34 (id=172):
unshare(0x40000000)
unshare(0x40000000)

3m3.594057221s ago: executing program 35 (id=209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x30}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x0, 0x10, 0x1, 0x0, 0x1, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r4, &(0x7f0000000500)='3\n', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r5, &(0x7f00000005c0)='1\n', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r6, &(0x7f0000000680)='1\n', 0x2)
close(r6)
syz_emit_ethernet(0x2a, &(0x7f0000000700)={@link_local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2}}}}}, 0x0)

3m2.657380659s ago: executing program 36 (id=210):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0)
write(r1, &(0x7f0000000450)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0)
write(r2, &(0x7f0000000550)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r3, &(0x7f0000000650)='100', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/failslab/times\x00', 0x1, 0x0)
write(r4, &(0x7f0000000750)='100', 0x3)
sendto$inet(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10)

3m2.28468487s ago: executing program 37 (id=194):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1})
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10)
listen(r1, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

3m2.172766468s ago: executing program 38 (id=204):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f00000018c0)=[{0x8, 0x0, 0x0, 0x0}], 0x1})

2m30.089238085s ago: executing program 3 (id=251):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2, 0x2}, 0x14)
sendto$inet6(r0, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000100)={0xa, 0x1f40, 0x0, @mcast2, 0x2}, 0x1c)

2m29.8012396s ago: executing program 3 (id=254):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10)

2m21.824070345s ago: executing program 3 (id=298):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind(r0, &(0x7f0000000140)=@in={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='3\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='1\n', 0x2)

2m11.56893232s ago: executing program 2 (id=337):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='3\n\x00', 0x2)
write(r1, &(0x7f0000000200)='4\n\x00', 0x2)
write(r1, &(0x7f0000000240)='5\n\x00', 0x2)
write(r1, &(0x7f0000000280)='6\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='-2 -3\n\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='1\n\x00', 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f00000003c0)={0x2, 0x801, @loopback}, 0x10)

2m10.298195924s ago: executing program 39 (id=280):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000050)='net/rpc\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='8\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="000000020000000000000002000186a30000000400"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="000000030000000000000002000186a3000000030000000100"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

2m8.24739243s ago: executing program 40 (id=285):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='tcp 2049\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='1\x00', 0x2)

2m6.177790904s ago: executing program 41 (id=298):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind(r0, &(0x7f0000000140)=@in={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='3\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='1\n', 0x2)

2m3.737611266s ago: executing program 0 (id=349):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811212290000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

2m2.644053624s ago: executing program 42 (id=317):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

2m2.621171452s ago: executing program 0 (id=351):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='2\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)="013030303030302032303030303030303030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x76)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78)
read(r4, &(0x7f0000000700)=""/256, 0x100)

1m59.519857912s ago: executing program 43 (id=327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x9902, @loopback}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000120)={0x2, 0x9a02, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x9b02, @loopback}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000160)={0x2, 0x9c02, @loopback}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='tcp 2049\x00', 0x9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0)
write(r5, &(0x7f00000002c0)='1\x00', 0x2)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m56.256364721s ago: executing program 44 (id=337):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='3\n\x00', 0x2)
write(r1, &(0x7f0000000200)='4\n\x00', 0x2)
write(r1, &(0x7f0000000240)='5\n\x00', 0x2)
write(r1, &(0x7f0000000280)='6\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='-2 -3\n\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='1\n\x00', 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f00000003c0)={0x2, 0x801, @loopback}, 0x10)

1m47.445683415s ago: executing program 45 (id=351):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='2\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)="013030303030302032303030303030303030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x76)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78)
read(r4, &(0x7f0000000700)=""/256, 0x100)

1m46.689544669s ago: executing program 4 (id=386):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='3\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='1\n\x00', 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10)
write(r4, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

1m39.100536715s ago: executing program 7 (id=412):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972e", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd6e193c280eac0e484d38db0e45923cc47acab1da2c1b47f999d17a7f681eb1f12fb8771d4c103091f99d1c1a", 0x9f}, {&(0x7f0000000c80)="b8659518b69136c840de12f29e56372661ffc3250247a0a5b4d89fe71a1b9ced94b7b8948f88860d2b103e52888892ee3eb1e378638a70d7f47bf1d2df6b6fc368665f92a84b8b03a2ed4710b1f9b4b35b854ffc0ed7ba5e4bd0502b95e5e602b087f5ae9d22ba48614db6f84623ba247e94da8d20d86dfea4c5a23cf57da0471ab476d25bb5a252dde00c1c57140c", 0x8f}, {&(0x7f0000000dc0)="820b29dccf3af022d0ddfd370dd8dda2b3c897775aa4271e74", 0x19}], 0x3}}], 0x2, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1m38.677684643s ago: executing program 3 (id=383):
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x100, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@private=0xa010101, 0x12345678, 0x32}, @in=@private=0xa010101, {}, {}, {}, 0x0, 0x0, 0x2}}, 0x100}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="940000002900010000000000000000000a010101000000000000000000000000123456780000000000000000020032000a0101020000000000000000000000000a010101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000202000000000020000000000000000000000000002000000"], 0x94}], 0x1}, 0x0)

1m38.520151803s ago: executing program 3 (id=413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

1m38.113056095s ago: executing program 7 (id=414):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x0, 0x0)
write(r0, &(0x7f0000000100)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='2049\n', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='2049\n', 0x5)

1m35.261730993s ago: executing program 46 (id=375):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-3 +4.0\n', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='2\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000004000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r4, &(0x7f0000000800)=""/100, 0x100)
close(r4)

1m30.748773543s ago: executing program 47 (id=386):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='3\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='1\n\x00', 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10)
write(r4, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

1m26.57754173s ago: executing program 48 (id=402):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='proc\x00', &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='proc/sys/net/ipv4/conf/default/forwarding\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='1\n', 0x2)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x0, 0x0, @private=0xa0000001, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}}}}}, 0x0)

1m25.735504995s ago: executing program 49 (id=407):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3\x00', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='udp 2049\x00', 0x9)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./pipefs/nfsd/cld\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='1\x00', 0x2)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x11)
sendto$inet(r3, &(0x7f0000000600)='hello\x00', 0x5, 0x0, &(0x7f0000000700)={0x2, 0x8008, @loopback}, 0x10)

1m23.231410982s ago: executing program 50 (id=413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

1m22.699578731s ago: executing program 51 (id=414):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x0, 0x0)
write(r0, &(0x7f0000000100)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='2049\n', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='2049\n', 0x5)

1m19.73835627s ago: executing program 2 (id=423):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./recdir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='./recdir\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='-3\n+4\n+4.2\n\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='tcp 2049\n\x00', 0x9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='1\n\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r6, &(0x7f00000004c0)='1\n\x00', 0x2)

1m18.49282418s ago: executing program 0 (id=427):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0 1 1\x00', 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0x83, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000000), 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x3, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x6, [{0x6, 0x2}]}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000000), 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0x83, 0x1}]}, 0x38}}, 0x0)

1m18.283695082s ago: executing program 0 (id=434):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='1\x00', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='1\x00', 0x1)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x1, 0x0)
write(r5, &(0x7f0000000100)='1\x00', 0x1)
close(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'})
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x0, 0x4, 0x0, 0x0, 0x3e, 0x64, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x1234, 0x5678, 0x8, 0x0, @opaque="1234"}}}}}, 0x0)

1m18.13895574s ago: executing program 0 (id=435):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='localhost ./export 2147483647 0 0 0 0\n\x00', 0x26)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/file1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/file2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/file3\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./export/file4\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./export/file5\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./export/file6\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./export/file7\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./export/file8\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export/file9\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./export/file10\x00', 0x1ff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10)
write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a3000000030000001000000000000000000000000000000000000000000000000000000020", 0x3c)
nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0)

1m15.817150113s ago: executing program 4 (id=433):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv4_newroute={0x34, 0x18, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000001}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x21, 0x1}, @RTA_ENCAP={0xc, 0x22, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x64, 0x0, 0x1}]}}]}, 0x34}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000500)=0x64, 0x4)
connect$inet(r1, &(0x7f0000000540)={0x2, 0x1234, @private=0xa000001}, 0x10)
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='\x00'/1000, 0x3e8}], 0x1}, 0x0)

1m15.744139795s ago: executing program 4 (id=438):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
r3 = accept(r1, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000300)={0x0, 0x10000}, 0x10)
recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)=""/100, 0x100}], 0x1}, 0x0)

1m15.499306354s ago: executing program 4 (id=439):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
close(r0)

1m14.461662569s ago: executing program 52 (id=421):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='2049\x00', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='\\x01\\x00\\x00\\x00 2000000000 0 0 0 krb5 \\x01\\x00\\x00\\x00\\xff\\xff\\xff\\x7f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x11\\x00\\x00\\x00\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\n', 0x7d)
close(r2)
r3 = socket(0x2, 0x1, 0x6)
connect(r3, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10)
write(r3, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r3, &(0x7f0000000800)=""/256, 0x100)
close(r3)

1m14.450198134s ago: executing program 4 (id=441):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000600)={0x0, <r1=>0x0})
write(r0, &(0x7f0000000200)='3\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='ctx1 2000000000 0 0 0 krb5 \\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\00017\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000 principal1\n\x00', 0x80)
write(r1, &(0x7f0000000500)="000000010000000000000002000186a3000000030000000000000006000000280000000100000002000000010000000100000004637478310000000100000000000000000000000600000004746573740000", 0x54)

1m8.271092259s ago: executing program 53 (id=431):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='-2 -3\n', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2) (async)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000500)="00000050123456780000000000000002000186a30000000400000001000000010000001400000000000000000000000000000000000000000000000000000000000000000000000000000001", 0x54, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000800)='nfsd 127.0.0.1 9999999 domain\n', 0x1e)
close(r4)

1m6.430568236s ago: executing program 1 (id=449):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
listen(r0, 0x5)
sendto$inet(r0, &(0x7f0000000100)="1a", 0x100, 0x0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)

1m6.312548403s ago: executing program 1 (id=450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtfilter={0x60, 0x2c, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x0, 0x3}}, [@filter_kind_options=@f_matchall={{}, {0x0, 0x2, [@TCA_MATCHALL_ACT={0x0, 0x1, [@m_mpls={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x0, 0x1, {{}, 0x3}}, @TCA_MPLS_LABEL={0x0, 0x3, 0x64}]}, {}, {0x0, 0x0}, {0x0, 0x0}}}]}]}}]}, 0x60}}, 0x0)
write(r1, &(0x7f0000000300)="000008004500002800010000401100007f0000017f00000112341234001400"/40, 0x28)

1m5.961012113s ago: executing program 1 (id=451):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@ipv4_newroute={0x0, 0x18, 0x605, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x0, 0x1, @empty}, @RTA_OIF={0x0, 0x4, r2}]}, 0x1}}, 0x0)
close(r0)

1m5.794453412s ago: executing program 1 (id=452):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
close(r1)
close(r0)

1m5.511705427s ago: executing program 1 (id=453):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 +3 -4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='2\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r4, &(0x7f0000000800)=""/100, 0x100)
close(r4)

1m4.43805284s ago: executing program 54 (id=423):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./recdir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='./recdir\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='-3\n+4\n+4.2\n\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='tcp 2049\n\x00', 0x9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='1\n\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r6, &(0x7f00000004c0)='1\n\x00', 0x2)

1m2.598024533s ago: executing program 55 (id=435):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='localhost ./export 2147483647 0 0 0 0\n\x00', 0x26)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/file1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/file2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/file3\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./export/file4\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./export/file5\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./export/file6\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./export/file7\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./export/file8\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export/file9\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./export/file10\x00', 0x1ff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10)
write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a3000000030000001000000000000000000000000000000000000000000000000000000020", 0x3c)
nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0)

59.019956837s ago: executing program 56 (id=441):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000600)={0x0, <r1=>0x0})
write(r0, &(0x7f0000000200)='3\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='ctx1 2000000000 0 0 0 krb5 \\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\00017\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000\\000 principal1\n\x00', 0x80)
write(r1, &(0x7f0000000500)="000000010000000000000002000186a3000000030000000000000006000000280000000100000002000000010000000100000004637478310000000100000000000000000000000600000004746573740000", 0x54)

56.484367778s ago: executing program 6 (id=462):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100090000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100100000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100110000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100120000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100130000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100140000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100150000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100160000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100170000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100180000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100190000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100200000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100210000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100220000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100230000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100240000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100250000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100260000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100270000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100280000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100290000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100300000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100310000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100320000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100330000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100340000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100350000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100360000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100370000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100380000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100390000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100400000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100410000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100420000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100430000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100440000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100450000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100460000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100470000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100480000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100490000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100500000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100510000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100520000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100530000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100540000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100550000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100560000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100570000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100580000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100590000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100600000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100610000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100620000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100630000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100640000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100650000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100660000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100670000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100680000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100690000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001006a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001006b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001006c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001006d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001006e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001006f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100700000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100710000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100720000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100730000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100740000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100750000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100760000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100770000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100780000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100790000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001007a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001007b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001007c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001007d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001007e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001007f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100800000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100810000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100820000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100830000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100840000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100850000000c000500000000000a000000"], 0xf00}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010300000000000000002d00000000000000"], 0x1c}}, 0x0)

56.323786979s ago: executing program 6 (id=463):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0), 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r1, &(0x7f0000000000)=@in={0x2, 0x1f90, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect(r2, &(0x7f0000000040)=@in={0x2, 0x1f90, @loopback}, 0x10)

56.029162942s ago: executing program 6 (id=464):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b59, @loopback}}, 0x24)
listen(r0, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b59, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000700)="0000000100000001000000010000000100000001010100000001", 0x1c, 0x0, &(0x7f0000000800)={0x2, 0x1b59, @loopback}, 0x10)
nanosleep(&(0x7f0000000900)={0x0, 0xbebc200}, 0x0)
recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)=""/100, 0x64}], 0x1}, 0x0)

55.657650238s ago: executing program 6 (id=465):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa1000000000000070100", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

55.447742254s ago: executing program 6 (id=466):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='-4 -2 +3\n\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000003c0)='tcp 2049\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440)='2\n\x00', 0x3)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000540)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000580)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68)
nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
read(r4, &(0x7f0000000640)=""/256, 0x100)

55.361595482s ago: executing program 3 (id=454):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./var\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./var/run\x00', 0x1ff)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000140)=@file={0x1, './var/run/rpcbind.sock\x00'}, 0x18)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='8\n\x00', 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10)

54.248073492s ago: executing program 7 (id=455):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz0/accept_source_route\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/eth0/accept_source_route\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='1\x00', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='1\x00', 0x1)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r5, &(0x7f0000000100)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/syz0/forwarding\x00', 0x1, 0x0)
write(r6, &(0x7f0000000100)='1\x00', 0x1)
close(r6)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'})
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)='syzkaller0\x00'})
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x0, 0x4, 0x0, 0x0, 0x3e, 0x64, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x1234, 0x5678, 0x8, 0x0, @opaque="1234"}}}}}, 0x0)

54.020501734s ago: executing program 7 (id=467):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x1f90, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x1f91, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x1f90, @loopback}, 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x1f90, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)

53.910022015s ago: executing program 7 (id=468):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="01", 0x1}], 0x1, &(0x7f00000001c0)=[{0x18, 0x11a, 0x1, "15"}], 0x18}, 0x0)
recvmsg(r2, 0x0, 0x0)

53.773447996s ago: executing program 7 (id=469):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9)
nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0)

50.280005464s ago: executing program 57 (id=453):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 +3 -4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='2\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r4, &(0x7f0000000800)=""/100, 0x100)
close(r4)

48.193209272s ago: executing program 9 (id=486):
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf25070000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)

48.058910942s ago: executing program 9 (id=487):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101003, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101003, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101004, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101005, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101005, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101006, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101006, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
syz_emit_ethernet(0x3e, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101007, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101007, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101008, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101008, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)

47.905362723s ago: executing program 9 (id=488):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

47.8485229s ago: executing program 9 (id=489):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, r2})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'})

46.816519175s ago: executing program 58 (id=445):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1\x00', 0x2)
close(r0)

46.144343762s ago: executing program 9 (id=491):
r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='proto\x00', &(0x7f0000000200)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f0000000300)='2049\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountport\x00', &(0x7f0000000380)='2049\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)

45.113129612s ago: executing program 9 (id=492):
socket(0x2b, 0x1, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'veth0\x00', @ifru_flags})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'veth0\x00', @ifru_flags=0x1})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

38.586038948s ago: executing program 59 (id=466):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='-4 -2 +3\n\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000003c0)='tcp 2049\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440)='2\n\x00', 0x3)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000540)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000580)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68)
nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
read(r4, &(0x7f0000000640)=""/256, 0x100)

38.568096651s ago: executing program 60 (id=454):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./var\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./var/run\x00', 0x1ff)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000140)=@file={0x1, './var/run/rpcbind.sock\x00'}, 0x18)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='8\n\x00', 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10)

38.501136038s ago: executing program 61 (id=469):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9)
nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0)

36.236638651s ago: executing program 2 (id=490):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10)
connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x8)
syz_emit_ethernet(0x1a, &(0x7f0000000200)={@dev, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0)
syz_emit_ethernet(0x1a, &(0x7f0000000300)={@dev, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0)

36.177027066s ago: executing program 2 (id=510):
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf25070000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)

35.974716548s ago: executing program 2 (id=512):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

35.889995273s ago: executing program 2 (id=513):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='-3 +4\n\x00', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='udp 2049\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='1\n\x00', 0x2)
r4 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r4, &(0x7f0000000400)="123456780000000000000002000186a300000004000000010000000100"/40, 0x28, 0x0, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
read(r0, &(0x7f0000000700)=""/1024, 0x400)

29.921041617s ago: executing program 62 (id=492):
socket(0x2b, 0x1, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'veth0\x00', @ifru_flags})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'veth0\x00', @ifru_flags=0x1})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

26.869159547s ago: executing program 8 (id=551):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24)
sendmsg$sock(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}, 0x0)
close(r0)
close(r1)
nanosleep(&(0x7f0000000600)={0xb}, 0x0)

25.976766482s ago: executing program 8 (id=552):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e}]}]}, 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701010000000000000004010000000000001c000100060006000800000008000600080000000a000d00000000111400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

25.787029411s ago: executing program 8 (id=553):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newsa={0x144, 0x10, 0x5, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x12340000, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x52, 0x1, {{'sha1\x00'}, 0x50, "01234567890123456789"}}]}, 0x144}}, 0x0)
syz_emit_ethernet(0xe0, &(0x7f0000000200)={@local, @remote, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x0, 0x3a, 0x40, @local, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x18, 0x11, 0x40, @local, @local, [], "1234123400180000003300003b0100001234000000000001"}}}}}}}, 0x0)

25.529564054s ago: executing program 8 (id=554):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write(r3, &(0x7f0000000300), 0x20)
read(r2, &(0x7f0000000700), 0x20)
write(r3, &(0x7f0000000500)="0200", 0x2)
read(r2, &(0x7f0000000314), 0x2)
write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13)
read(r2, &(0x7f000000031c), 0x13)
sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0)
getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4)

24.599607033s ago: executing program 8 (id=555):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000480), 0xc, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000070000506000000000000000007000000030000001400018008000100000001000500060001000000"]}}, 0x0)

24.393685186s ago: executing program 8 (id=556):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='3\x00', 0x2)

21.6207858s ago: executing program 4 (id=503):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000120)={0x2, 0x4e21, @loopback}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

20.558595867s ago: executing program 63 (id=513):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='-3 +4\n\x00', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='udp 2049\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='1\n\x00', 0x2)
r4 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r4, &(0x7f0000000400)="123456780000000000000002000186a300000004000000010000000100"/40, 0x28, 0x0, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
read(r0, &(0x7f0000000700)=""/1024, 0x400)

19.122599621s ago: executing program 0 (id=502):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='-3\n+4\n+4.2\n\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='tcp 2049\n\x00', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='1\n\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r5, &(0x7f0000000400)='1\n\x00', 0x2)

18.124868205s ago: executing program 1 (id=504):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='3\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='2\x00', 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="80000024000000010000000000000002000186a30000000300000000ffffffff00"/44, 0x28, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

8.945434171s ago: executing program 64 (id=556):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r1, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='3\x00', 0x2)

8.404297274s ago: executing program 6 (id=557):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='udp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='1\n\x00', 0x2)
r3 = socket(0x2, 0x2, 0x0)
sendto(r3, &(0x7f0000000800)='12345678901234567890\x00', 0x14, 0x0, &(0x7f0000000900)=@in={0x2, 0x801, @loopback}, 0x10)

6.477995402s ago: executing program 65 (id=503):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000120)={0x2, 0x4e21, @loopback}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

3.999557316s ago: executing program 66 (id=502):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='-3\n+4\n+4.2\n\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='tcp 2049\n\x00', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='1\n\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r5, &(0x7f0000000400)='1\n\x00', 0x2)

2.952161716s ago: executing program 67 (id=504):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='3\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='2\x00', 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="80000024000000010000000000000002000186a30000000300000000ffffffff00"/44, 0x28, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

2.367118914s ago: executing program 5 (id=571):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x1388, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="45000028000100004084364dac140001ac14000213881388000000000000000006000004"], 0x28)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1.530811172s ago: executing program 5 (id=572):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x1, 0x1, {0x2, 0x0, 0x0, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xac140000}, @RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x2c}}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
sendto$inet(r1, &(0x7f0000000100)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0xac140001}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@delnexthop={0x10, 0x69, 0x1, 0x1, 0x1, {0x2, 0x0, 0x0, 0x0, 0x1}, [{0x8, 0x1, 0x1}]}, 0x10}}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

738.075354ms ago: executing program 5 (id=573):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/sctp/addip_noauth\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1\x00', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10)

305.249227ms ago: executing program 5 (id=574):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x20, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x20, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000130001000000000000000000070000000000000000000000000000000c00030062726964676530005c001a8006000000020000005000068028000180080001000100000008000200030000000800030004000000060004000100000028000680080001000100000008000200e803000008000300030000000800040010270000"], 0x88}}, 0x0)

108.81866ms ago: executing program 5 (id=575):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x0, 0x0, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @bridge={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x0, 0x1, 0x2}]}}}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}, [], {0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}}, 0x28}}, 0x0)

0s ago: executing program 5 (id=576):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x1, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x34}}, 0x0)

kernel console output (not intermixed with test programs):

cted cc 0x0c03 length: 249 > 1
[  270.992369][ T5632] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  271.007299][ T5632] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  271.013687][ T8917] 8021q: adding VLAN 0 to HW filter on device team0
[  271.015649][ T5632] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  271.029216][ T5632] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  271.073908][ T8934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.112910][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.120079][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.139827][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.147006][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.202438][ T8934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.612594][ T8934] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  271.658105][ T8934] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  271.668194][ T8934] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  271.684313][ T5626] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  271.698208][ T5626] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  271.713982][ T5626] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  271.721496][ T5623] Bluetooth: hci14: command tx timeout
[  271.724259][ T8934] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  271.742052][ T5626] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  271.751250][ T8934] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  271.759251][ T5626] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  271.771140][ T8934] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  271.788507][ T8934] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  271.796508][ T5632] Bluetooth: hci15: command tx timeout
[  271.820866][ T8934] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  272.065042][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.141723][ T8934] 8021q: adding VLAN 0 to HW filter on device team0
[  272.169972][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.177145][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.250325][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.257516][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.576343][ T8917] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.595457][ T5632] Bluetooth: hci16: command tx timeout
[  272.806160][ T8917] veth0_vlan: entered promiscuous mode
[  272.848197][ T8917] veth1_vlan: entered promiscuous mode
[  272.991210][ T8917] veth0_macvtap: entered promiscuous mode
[  273.016187][ T8917] veth1_macvtap: entered promiscuous mode
[  273.075202][ T5632] Bluetooth: hci17: command tx timeout
[  273.103844][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.178599][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.277920][ T6770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.286767][ T6770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.323943][ T6770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.333745][ T6770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.348301][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.355759][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.362983][ T8975] bridge_slave_0: entered allmulticast mode
[  273.370839][ T8975] bridge_slave_0: entered promiscuous mode
[  273.380020][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.387227][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.394372][ T8975] bridge_slave_1: entered allmulticast mode
[  273.403014][ T8975] bridge_slave_1: entered promiscuous mode
[  273.420236][ T8934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.467032][ T8975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.481445][ T8975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.543724][ T8975] team0: Port device team_slave_0 added
[  273.578476][ T8975] team0: Port device team_slave_1 added
[  273.688276][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.696760][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.724592][ T8975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.770031][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.777299][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.795704][ T5632] Bluetooth: hci18: command tx timeout
[  273.805024][ T8975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.875172][ T5632] Bluetooth: hci15: command tx timeout
[  273.887537][ T6770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.897144][ T6770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.935894][ T8975] hsr_slave_0: entered promiscuous mode
[  273.942889][ T8975] hsr_slave_1: entered promiscuous mode
[  273.950093][ T8975] debugfs: 'hsr0' already exists in 'hsr'
[  273.961141][ T8975] Cannot create hsr debugfs directory
[  274.062191][ T8934] veth0_vlan: entered promiscuous mode
[  274.107667][  T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.115877][  T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.136640][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.143971][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.152564][ T8989] bridge_slave_0: entered allmulticast mode
[  274.165868][ T8989] bridge_slave_0: entered promiscuous mode
[  274.174557][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.182043][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.189343][ T8989] bridge_slave_1: entered allmulticast mode
[  274.204479][ T8989] bridge_slave_1: entered promiscuous mode
[  274.260727][ T8934] veth1_vlan: entered promiscuous mode
[  274.305542][ T8989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.332476][ T8989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.413446][ T8989] team0: Port device team_slave_0 added
[  274.423529][ T8989] team0: Port device team_slave_1 added
[  274.494283][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.501658][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.528660][ T8989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.550155][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.557235][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.588910][ T8989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.642019][ T8975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.675421][ T5632] Bluetooth: hci16: command tx timeout
[  274.716353][ T8934] veth0_macvtap: entered promiscuous mode
[  274.737565][ T8989] hsr_slave_0: entered promiscuous mode
[  274.744551][ T8989] hsr_slave_1: entered promiscuous mode
[  274.751599][ T8989] debugfs: 'hsr0' already exists in 'hsr'
[  274.759049][ T8989] Cannot create hsr debugfs directory
[  274.787337][ T8975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.803529][ T8934] veth1_macvtap: entered promiscuous mode
[  274.905385][ T8975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.943149][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.990389][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.018809][ T8975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.080619][   T94] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.096267][   T94] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.120465][   T94] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.129415][   T94] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.155282][ T5632] Bluetooth: hci17: command tx timeout
[  275.240651][ T8989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.323158][ T8989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.356144][   T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.364282][   T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.407906][ T8989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.443718][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.454117][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.496438][ T8989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.675667][ T8975] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  275.692456][ T8975] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  275.705522][ T8975] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  275.718794][ T8975] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  275.727065][ T8975] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  275.740173][ T8975] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  275.759581][ T8975] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  275.787612][ T8975] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  275.875327][ T5632] Bluetooth: hci18: command tx timeout
[  275.958923][ T5632] Bluetooth: hci15: command tx timeout
[  275.978578][ T8989] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  275.988835][ T8989] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  275.997864][ T8989] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  276.014228][ T8989] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  276.026857][ T8989] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  276.037420][ T8989] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  276.051479][ T8989] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  276.065430][ T8989] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  276.200843][ T8975] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.243941][ T8975] 8021q: adding VLAN 0 to HW filter on device team0
[  276.261804][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.268944][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.297457][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.304660][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.348356][ T8989] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.402685][ T8989] 8021q: adding VLAN 0 to HW filter on device team0
[  276.439755][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.446980][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.470954][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.478167][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.764925][ T5632] Bluetooth: hci16: command tx timeout
[  277.007100][ T8975] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.103010][ T8975] veth0_vlan: entered promiscuous mode
[  277.119084][ T8975] veth1_vlan: entered promiscuous mode
[  277.177282][ T8989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.189301][ T8975] veth0_macvtap: entered promiscuous mode
[  277.202753][ T8975] veth1_macvtap: entered promiscuous mode
[  277.228754][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_0
[  277.247752][ T5632] Bluetooth: hci17: command tx timeout
[  277.270782][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.289055][ T6770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.302071][  T183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.318393][  T183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.331016][  T183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.471931][   T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.500990][   T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.552447][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.571134][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.676653][ T8989] veth0_vlan: entered promiscuous mode
[  277.693515][ T8989] veth1_vlan: entered promiscuous mode
[  277.780796][ T8989] veth0_macvtap: entered promiscuous mode
[  277.792335][ T8989] veth1_macvtap: entered promiscuous mode
[  277.825460][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  277.844538][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.869387][ T6770] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.897693][ T6770] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.897769][ T9094] rdma_rxe: rxe_newlink: failed to add lo
[  277.908950][ T6770] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.932272][ T6770] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.966111][ T5632] Bluetooth: hci18: command tx timeout
[  278.027046][ T6770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.049346][ T9095] smc: removing ib device syz0
[  278.062651][ T6770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.098624][ T9095] smbdirect: ib_dev[syz0] removed
[  278.106095][ T6770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.133484][ T6770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.349297][ T9099] rdma_rxe: rxe_newlink: failed to add lo
[  278.616981][   T29] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  278.885960][ T5625] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  279.318540][ T5632] Bluetooth: hci17: command tx timeout
[  279.397147][ T5625] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  279.421452][ T9101] ceph: No mds server is up or the cluster is laggy
[  279.820766][ T5626] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  279.830922][ T5626] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  279.839684][ T5626] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  279.849247][ T5626] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  279.862607][ T5626] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  280.036018][ T5632] Bluetooth: hci18: command tx timeout
[  281.970639][ T5632] Bluetooth: hci19: command tx timeout
[  282.031202][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.041380][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.054749][ T9110] bridge_slave_0: entered allmulticast mode
[  282.074427][ T9110] bridge_slave_0: entered promiscuous mode
[  282.083488][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.091228][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.098720][ T9110] bridge_slave_1: entered allmulticast mode
[  282.145490][ T9110] bridge_slave_1: entered promiscuous mode
[  282.343811][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.389180][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.605326][ T9110] team0: Port device team_slave_0 added
[  282.614494][ T9110] team0: Port device team_slave_1 added
[  282.802714][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.811546][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.848493][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.862459][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.880552][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.911417][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.243696][ T9110] hsr_slave_0: entered promiscuous mode
[  283.251842][ T9110] hsr_slave_1: entered promiscuous mode
[  283.260822][ T9110] debugfs: 'hsr0' already exists in 'hsr'
[  283.268417][ T9110] Cannot create hsr debugfs directory
[  283.382617][ T4987] udevd[4987]: worker [5750] /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:10C4:EA90.0003/hidraw/hidraw0 is taking a long time
[  283.862190][ T9110] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.978156][ T9110] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.034742][ T5632] Bluetooth: hci19: command tx timeout
[  284.066298][ T9110] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.115008][ T5774] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  284.140341][ T9110] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.279371][ T5774] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  284.281915][ T9110] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  284.291453][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  284.309562][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  284.312192][ T5774] usb 2-1: SerialNumber: syz
[  284.317975][ T9110] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  284.331477][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  284.340035][ T9110] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  284.352586][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  284.364014][ T9110] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  284.374325][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  284.481497][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.509671][ T9110] 8021q: adding VLAN 0 to HW filter on device team0
[  284.523673][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.530822][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.550964][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.558127][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.088743][ T5774] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  285.127970][ T5774] usb 2-1: USB disconnect, device number 4
[  285.139299][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.408228][ T9110] veth0_vlan: entered promiscuous mode
[  285.421403][ T9110] veth1_vlan: entered promiscuous mode
[  285.458317][ T9110] veth0_macvtap: entered promiscuous mode
[  285.470098][ T9110] veth1_macvtap: entered promiscuous mode
[  285.495775][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.510938][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.525705][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.540610][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.550157][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.562892][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.661426][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.687813][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.788581][ T9158] bridge0: port 3(syz_tun) entered blocking state
[  285.796758][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.796849][ T9158] bridge0: port 3(syz_tun) entered disabled state
[  285.814894][ T9158] syz_tun: entered allmulticast mode
[  285.822954][ T9158] syz_tun: entered promiscuous mode
[  285.828186][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.851470][ T9158] bridge0: port 3(syz_tun) entered blocking state
[  285.858123][ T9158] bridge0: port 3(syz_tun) entered forwarding state
[  285.950640][ T9158] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  285.971064][ T5626] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  285.981156][ T5626] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  285.989022][ T5626] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  285.997205][ T5626] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  286.005540][ T5626] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  286.028527][ T9158] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  286.124889][ T5632] Bluetooth: hci19: command tx timeout
[  286.239195][ T9168] netlink: 7 bytes leftover after parsing attributes in process `syz.1.446'.
[  286.288404][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[  286.314755][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[  286.336136][ T9168] netlink: 7 bytes leftover after parsing attributes in process `syz.1.446'.
[  286.548971][ T9164] infiniband syz0: set active
[  286.570062][ T9164] infiniband syz0: added veth0
[  286.631847][ T9164] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  286.674210][ T9164] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  286.699741][ T9164] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  286.701847][ T9180] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  286.727443][ T9180] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  286.788484][ T9164] RDS/IB: syz0: added
[  286.792758][ T9164] smc: adding ib device syz0 with port count 1
[  286.801050][ T9164] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  287.360019][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.367673][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.390609][ T9160] bridge_slave_0: entered allmulticast mode
[  287.403369][ T9160] bridge_slave_0: entered promiscuous mode
[  287.417376][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.424582][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.434400][ T9160] bridge_slave_1: entered allmulticast mode
[  287.442893][ T9160] bridge_slave_1: entered promiscuous mode
[  287.512331][ T9160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.536127][ T9160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.668412][ T9160] team0: Port device team_slave_0 added
[  287.693375][ T9160] team0: Port device team_slave_1 added
[  287.773755][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.790069][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.823636][ T9160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.843484][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.852226][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.879792][ T9160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.893903][ T9193] netlink: 60 bytes leftover after parsing attributes in process `syz.1.450'.
[  287.917724][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'.
[  288.039225][ T5632] Bluetooth: hci20: command tx timeout
[  288.043708][ T9160] hsr_slave_0: entered promiscuous mode
[  288.056780][ T9160] hsr_slave_1: entered promiscuous mode
[  288.064590][ T9160] debugfs: 'hsr0' already exists in 'hsr'
[  288.074277][ T9160] Cannot create hsr debugfs directory
[  288.195007][ T5632] Bluetooth: hci19: command tx timeout
[  288.540430][ T9160] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.653732][ T9160] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.740953][ T9160] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.828557][ T9160] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.072482][ T9160] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  289.085263][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  289.093742][ T9160] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  289.105303][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  289.126123][ T9160] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  289.141283][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  289.150181][ T9160] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  289.171700][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  289.311555][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.351904][ T9160] 8021q: adding VLAN 0 to HW filter on device team0
[  289.369890][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.377095][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.413210][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.420445][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.881751][ T5626] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  289.894558][ T5626] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  289.907384][ T5626] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  289.917232][ T5626] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  289.927581][ T5626] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  290.116480][ T5632] Bluetooth: hci20: command tx timeout
[  290.328712][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.892941][ T9160] veth0_vlan: entered promiscuous mode
[  290.913639][ T9160] veth1_vlan: entered promiscuous mode
[  290.970418][ T9160] veth0_macvtap: entered promiscuous mode
[  290.983300][ T9160] veth1_macvtap: entered promiscuous mode
[  291.013172][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.036591][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.052038][   T94] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.078400][   T94] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.099703][   T94] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.117904][   T94] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.231118][   T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.251599][   T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.304355][  T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.314237][  T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.637567][ T5626] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  291.647685][ T5626] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[  291.656096][ T5626] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[  291.665600][ T5626] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[  291.678705][ T5626] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[  291.958015][ T5626] Bluetooth: hci21: command tx timeout
[  292.194957][ T5626] Bluetooth: hci20: command tx timeout
[  292.421842][ T9219] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.429230][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.440063][ T9219] bridge_slave_0: entered allmulticast mode
[  292.452143][ T9219] bridge_slave_0: entered promiscuous mode
[  292.464486][ T9219] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.476299][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.483550][ T9219] bridge_slave_1: entered allmulticast mode
[  292.504150][ T9219] bridge_slave_1: entered promiscuous mode
[  292.570126][ T9219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.583977][ T9219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.651237][ T9219] team0: Port device team_slave_0 added
[  292.660798][ T9219] team0: Port device team_slave_1 added
[  292.723844][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.731350][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.765787][ T9219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.781576][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.789750][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.822366][ T9219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.892815][ T9219] hsr_slave_0: entered promiscuous mode
[  292.906838][ T9219] hsr_slave_1: entered promiscuous mode
[  292.913158][ T9219] debugfs: 'hsr0' already exists in 'hsr'
[  292.920186][ T9219] Cannot create hsr debugfs directory
[  293.192298][ T9219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.350847][ T9219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.463949][ T9219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.589724][ T9219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.716747][ T5626] Bluetooth: hci22: command tx timeout
[  293.852225][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.862931][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.873537][ T9243] bridge_slave_0: entered allmulticast mode
[  293.883678][ T9243] bridge_slave_0: entered promiscuous mode
[  293.913866][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.922202][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.935591][ T9243] bridge_slave_1: entered allmulticast mode
[  293.944294][ T9243] bridge_slave_1: entered promiscuous mode
[  294.019650][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.057853][ T5626] Bluetooth: hci21: command tx timeout
[  294.076243][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.146128][ T9243] team0: Port device team_slave_0 added
[  294.153509][ T9219] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  294.167555][ T9219] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  294.179415][ T9243] team0: Port device team_slave_1 added
[  294.185653][ T9219] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  294.197456][ T9219] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  294.261157][ T9219] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  294.272153][ T9219] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  294.279567][ T5626] Bluetooth: hci20: command tx timeout
[  294.288334][ T9219] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  294.299897][ T9219] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  294.309350][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.316609][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  294.353046][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.384167][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.391625][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  294.417940][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.519300][ T9243] hsr_slave_0: entered promiscuous mode
[  294.526621][ T9243] hsr_slave_1: entered promiscuous mode
[  294.533847][ T9243] debugfs: 'hsr0' already exists in 'hsr'
[  294.545957][ T9243] Cannot create hsr debugfs directory
[  294.887609][ T9243] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.942077][ T9219] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.997290][ T9219] 8021q: adding VLAN 0 to HW filter on device team0
[  295.082948][ T9243] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.135898][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.143078][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.196572][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.203756][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.237588][ T5632] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[  295.247157][ T5632] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[  295.266703][ T5632] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[  295.278743][ T5632] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[  295.287257][ T5632] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[  295.339663][ T9243] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.446652][ T9243] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.797459][ T5632] Bluetooth: hci22: command tx timeout
[  295.853084][ T9243] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  295.886477][ T9243] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  295.899879][ T9243] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  295.916565][ T9243] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  295.930903][ T9243] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  295.949654][ T9243] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  295.979438][ T9243] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  296.002097][ T9243] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  296.115790][ T4937] Bluetooth: hci21: command tx timeout
[  296.174117][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.457'.
[  296.230212][ T9295] netlink: 20 bytes leftover after parsing attributes in process `syz.6.457'.
[  296.502512][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.577854][ T9243] 8021q: adding VLAN 0 to HW filter on device team0
[  296.633590][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.640786][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.714539][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.721724][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.924179][ T9219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.059293][ T9304] rdma_rxe: rxe_newlink: failed to add lo
[  297.064444][ T9219] veth0_vlan: entered promiscuous mode
[  297.228242][ T9219] veth1_vlan: entered promiscuous mode
[  297.315434][ T4937] Bluetooth: hci23: command tx timeout
[  297.515750][ T9219] veth0_macvtap: entered promiscuous mode
[  297.594247][ T9219] veth1_macvtap: entered promiscuous mode
[  297.636381][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.679457][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.751982][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.782161][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.810984][  T183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.830991][  T183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.845927][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.877844][ T4937] Bluetooth: hci22: command tx timeout
[  298.045739][ T4937] Bluetooth: hci7: command 0x0406 tx timeout
[  298.047584][   T50] Bluetooth: hci8: command 0x0406 tx timeout
[  298.052391][ T4937] Bluetooth: hci10: command 0x0406 tx timeout
[  298.059270][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  298.064320][ T5642] Bluetooth: hci9: command 0x0406 tx timeout
[  298.195860][ T5626] Bluetooth: hci21: command tx timeout
[  298.269148][ T9274] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.278303][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.286179][ T9274] bridge_slave_0: entered allmulticast mode
[  298.294201][ T9274] bridge_slave_0: entered promiscuous mode
[  298.310409][ T3356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.343827][ T3356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.354971][ T9274] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.371013][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.380368][ T9274] bridge_slave_1: entered allmulticast mode
[  298.395241][ T9274] bridge_slave_1: entered promiscuous mode
[  298.503933][ T9274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.526793][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.541943][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.558391][ T9274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.705783][ T9274] team0: Port device team_slave_0 added
[  298.721511][ T9274] team0: Port device team_slave_1 added
[  298.780436][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.787666][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.815654][ T9274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.831117][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.845481][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.872489][ T9274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.896495][ T9243] veth0_vlan: entered promiscuous mode
[  298.961417][ T9274] hsr_slave_0: entered promiscuous mode
[  298.968539][ T9274] hsr_slave_1: entered promiscuous mode
[  298.975156][ T9274] debugfs: 'hsr0' already exists in 'hsr'
[  298.981091][ T9274] Cannot create hsr debugfs directory
[  299.014084][ T9243] veth1_vlan: entered promiscuous mode
[  299.198161][ T9243] veth0_macvtap: entered promiscuous mode
[  299.221525][ T9243] veth1_macvtap: entered promiscuous mode
[  299.274054][ T9274] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.303197][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.339951][ T9274] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.369245][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.392199][   T94] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.401011][ T5626] Bluetooth: hci23: command tx timeout
[  299.410830][   T94] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.423729][   T94] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.433096][   T94] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.474349][ T9274] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.589348][ T9274] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.624484][ T3310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.649842][ T3310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.697728][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.707245][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.909047][ T9274] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  299.919602][ T9274] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  299.928060][ T9274] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  299.938849][ T9274] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  299.947091][ T9274] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  299.955552][ T5626] Bluetooth: hci22: command tx timeout
[  299.960105][ T9274] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  299.988589][ T9274] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  300.000354][ T9274] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  300.188470][ T9274] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.248223][ T9274] 8021q: adding VLAN 0 to HW filter on device team0
[  300.261637][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.268824][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.298241][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.305442][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.792698][ T9274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.072951][ T9274] veth0_vlan: entered promiscuous mode
[  301.110587][ T9274] veth1_vlan: entered promiscuous mode
[  301.143316][ T9274] veth0_macvtap: entered promiscuous mode
[  301.153567][ T9274] veth1_macvtap: entered promiscuous mode
[  301.183832][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.210987][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.229521][ T1017] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.239707][ T1017] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.249511][ T1017] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.261291][ T1017] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.373664][ T3310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.382071][ T3310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.438240][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.446330][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.474894][ T5626] Bluetooth: hci23: command tx timeout
[  301.550245][ T9386] syzkaller0: entered promiscuous mode
[  301.555991][ T9386] syzkaller0: entered allmulticast mode
[  302.559825][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.9.473'.
[  302.569652][ T9394] netlink: 20 bytes leftover after parsing attributes in process `syz.9.473'.
[  303.554949][ T5626] Bluetooth: hci23: command tx timeout
[  303.892829][ T5637] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1
[  303.902859][ T5637] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9
[  303.912449][ T5637] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9
[  303.922158][ T5637] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4
[  303.930076][ T5637] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2
[  304.999420][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.008464][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.019743][ T9409] bridge_slave_0: entered allmulticast mode
[  305.027656][ T9409] bridge_slave_0: entered promiscuous mode
[  305.035592][ T9431] syzkaller0: entered promiscuous mode
[  305.041060][ T9431] syzkaller0: entered allmulticast mode
[  305.050961][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.058196][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.066171][ T9409] bridge_slave_1: entered allmulticast mode
[  305.076973][ T9409] bridge_slave_1: entered promiscuous mode
[  305.139324][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.151632][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.202891][ T9409] team0: Port device team_slave_0 added
[  305.212590][ T9409] team0: Port device team_slave_1 added
[  305.280461][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.288263][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.326714][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.340940][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.354475][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.380960][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.482713][ T9409] hsr_slave_0: entered promiscuous mode
[  305.492296][ T9409] hsr_slave_1: entered promiscuous mode
[  305.508396][ T9409] debugfs: 'hsr0' already exists in 'hsr'
[  305.514138][ T9409] Cannot create hsr debugfs directory
[  305.520533][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.9.484'.
[  305.612663][ T9439] rdma_rxe: rxe_newlink: failed to add lo
[  305.759807][ T9409] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.888324][ T9409] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.914042][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.9.486'.
[  305.923916][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.9.486'.
[  305.959345][ T5637] Bluetooth: hci24: command tx timeout
[  305.974396][ T9409] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.030996][ T9444] syz_tun: entered allmulticast mode
[  306.047519][ T9443] syz_tun: left allmulticast mode
[  306.117256][ T9409] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.520889][ T5626] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1
[  307.534294][ T5626] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9
[  307.556907][ T5626] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9
[  307.571229][ T5626] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4
[  307.589746][ T5626] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2
[  307.848357][ T9409] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  307.871762][ T9409] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  307.882879][ T9409] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  307.903791][ T9409] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  307.921762][ T9409] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  307.962163][ T9409] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  307.985227][ T9409] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  308.001226][ T9409] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  308.034816][ T5637] Bluetooth: hci24: command tx timeout
[  308.149435][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.191351][ T9409] 8021q: adding VLAN 0 to HW filter on device team0
[  308.221285][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.228473][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.244638][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.251797][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.049748][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.214780][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.222082][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.231885][ T9450] bridge_slave_0: entered allmulticast mode
[  309.254590][ T9450] bridge_slave_0: entered promiscuous mode
[  309.270167][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.278452][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.292480][ T9450] bridge_slave_1: entered allmulticast mode
[  309.300797][ T9450] bridge_slave_1: entered promiscuous mode
[  309.376308][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.409272][ T9484] infiniband syz1: set active
[  309.419130][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.424844][ T9484] infiniband syz1: added veth0
[  309.472833][ T9484] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  309.485615][ T9450] team0: Port device team_slave_0 added
[  309.496743][ T9484] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  309.515628][ T9484] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  309.541610][ T9450] team0: Port device team_slave_1 added
[  309.549369][ T9484] RDS/IB: syz1: added
[  309.553491][ T9484] smc: adding ib device syz1 with port count 1
[  309.567369][ T9484] smc:    ib device syz1 port 1 has no pnetid
[  309.642233][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.651077][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.677249][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.691927][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.705115][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.731726][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.736031][ T5637] Bluetooth: hci25: command tx timeout
[  309.851957][ T9450] hsr_slave_0: entered promiscuous mode
[  309.867507][ T9450] hsr_slave_1: entered promiscuous mode
[  309.874114][ T9450] debugfs: 'hsr0' already exists in 'hsr'
[  309.880152][ T9450] Cannot create hsr debugfs directory
[  310.011513][ T9409] veth0_vlan: entered promiscuous mode
[  310.067309][ T9409] veth1_vlan: entered promiscuous mode
[  310.115112][ T5637] Bluetooth: hci24: command tx timeout
[  310.226154][ T9409] veth0_macvtap: entered promiscuous mode
[  310.269999][ T9450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.300387][ T9409] veth1_macvtap: entered promiscuous mode
[  310.328138][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.357620][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.403949][ T9450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.439503][ T3356] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.449281][ T3356] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.462650][ T3356] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.472656][ T3356] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.507150][ T9450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.627879][ T9450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.765946][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.791827][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.879581][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.896918][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.074245][ T9450] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  311.104521][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  311.114569][ T9450] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  311.150550][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  311.171515][ T9450] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  311.208225][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  311.225540][ T9450] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  311.266184][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  311.462905][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.487513][ T9510] bridge0: port 3(syz_tun) entered blocking state
[  311.494169][ T9510] bridge0: port 3(syz_tun) entered disabled state
[  311.501412][ T9510] syz_tun: entered allmulticast mode
[  311.509826][ T9510] syz_tun: entered promiscuous mode
[  311.516992][ T9510] bridge0: port 3(syz_tun) entered blocking state
[  311.523530][ T9510] bridge0: port 3(syz_tun) entered forwarding state
[  311.559100][ T9510] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  311.564304][ T9450] 8021q: adding VLAN 0 to HW filter on device team0
[  311.585954][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.593096][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.617208][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.624343][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.795653][ T5626] Bluetooth: hci25: command tx timeout
[  312.195402][ T5626] Bluetooth: hci24: command tx timeout
[  312.248196][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.8.498'.
[  312.295962][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.8.498'.
[  312.652079][ T9532] FAULT_INJECTION: forcing a failure.
[  312.652079][ T9532] name failslab, interval 1, probability 100, space 0, times 2
[  312.661825][    C1] FAULT_INJECTION: forcing a failure.
[  312.661825][    C1] name failslab, interval 1, probability 100, space 0, times 2
[  312.665169][    C0] FAULT_INJECTION: forcing a failure.
[  312.665169][    C0] name failslab, interval 1, probability 100, space 0, times 2
[  312.677700][    C1] CPU: 1 UID: 0 PID: 9484 Comm: syz.9.492 Not tainted syzkaller #0 PREEMPT(full) 
[  312.677728][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  312.677743][    C1] Call Trace:
[  312.677754][    C1]  <IRQ>
[  312.677764][    C1]  dump_stack_lvl+0xe8/0x150
[  312.677807][    C1]  should_fail_ex+0x40c/0x560
[  312.677847][    C1]  should_failslab+0xa8/0x100
[  312.677889][    C1]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  312.677922][    C1]  ? local_lock_release+0x9c/0x160
[  312.677950][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  312.677973][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  312.678006][    C1]  __alloc_skb+0x1d7/0x7a0
[  312.678051][    C1]  __netdev_alloc_skb+0xc1/0x810
[  312.678077][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.678108][    C1]  ? __ieee80211_beacon_get+0x36/0x1920
[  312.678142][    C1]  __ieee80211_beacon_get+0xcfd/0x1920
[  312.678171][    C1]  ? __ieee80211_beacon_get+0x36/0x1920
[  312.678206][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.678244][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  312.678281][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  312.678312][    C1]  ? perf_trace_contention_end+0x80/0x310
[  312.678344][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.678379][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  312.678413][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.678449][    C1]  __iterate_interfaces+0x2af/0x5a0
[  312.678478][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  312.678510][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  312.678542][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  312.678574][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  312.678605][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  312.678632][    C1]  mac80211_hwsim_beacon+0xaf/0x240
[  312.678657][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  312.678684][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  312.678734][    C1]  hrtimer_run_softirq+0x17a/0x240
[  312.678771][    C1]  handle_softirqs+0x225/0x840
[  312.678806][    C1]  ? __irq_exit_rcu+0xca/0x220
[  312.678847][    C1]  __irq_exit_rcu+0xca/0x220
[  312.678878][    C1]  irq_exit_rcu+0x9/0x30
[  312.678907][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  312.678938][    C1]  </IRQ>
[  312.678946][    C1]  <TASK>
[  312.678960][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  312.678988][    C1] RIP: 0010:kernfs_link_sibling+0x19d/0x5a0
[  312.679033][    C1] Code: 8b 24 24 eb 08 e8 d3 58 52 ff 45 31 e4 4d 8d 6f 18 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 17 ed bf ff 4d 8b 6d 00 <4d> 85 ed 74 24 e8 a9 58 52 ff 49 83 c5 60 4c 89 e8 48 c1 e8 03 80
[  312.679055][    C1] RSP: 0018:ffffc900215fe760 EFLAGS: 00000246
[  312.679077][    C1] RAX: 1ffff11008dc71af RBX: dffffc0000000000 RCX: 0000000000080000
[  312.679096][    C1] RDX: ffffc90049b74000 RSI: 000000000007ffff RDI: 0000000000080000
[  312.679113][    C1] RBP: 0000000000000001 R08: ffffffff8274772c R09: 0000000000000000
[  312.679130][    C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000000
[  312.679147][    C1] R13: 0000000000000000 R14: 000000003d84f730 R15: ffff888046e38d60
[  312.679173][    C1]  ? kernfs_root+0x1c/0x230
[  312.679232][    C1]  kernfs_add_one+0x1d2/0x5e0
[  312.679276][    C1]  __kernfs_create_file+0x22b/0x2e0
[  312.679311][    C1]  sysfs_add_file_mode_ns+0x237/0x300
[  312.679352][    C1]  internal_create_group+0x679/0x1180
[  312.679391][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.679432][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.679461][    C1]  ? kobject_add+0x163/0x240
[  312.679494][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.679528][    C1]  ? __pfx_internal_create_group+0x10/0x10
[  312.679574][    C1]  ? __kmalloc_noprof+0x1ad/0x720
[  312.679613][    C1]  sysfs_create_groups+0x59/0x120
[  312.679653][    C1]  ib_setup_port_attrs+0xfd8/0x2420
[  312.679692][    C1]  ? __lock_acquire+0x683/0x2cf0
[  312.679761][    C1]  ? __pfx_ib_setup_port_attrs+0x10/0x10
[  312.679797][    C1]  ? __mutex_unlock_slowpath+0x731/0x900
[  312.679827][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.679860][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  312.679888][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.679918][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  312.679949][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.679986][    C1]  ? kobject_put+0x50f/0x550
[  312.680023][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  312.680057][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.680086][    C1]  ? device_add+0x6f6/0xb80
[  312.680118][    C1]  add_one_compat_dev+0x446/0x650
[  312.680160][    C1]  enable_device_and_get+0x2b3/0x3e0
[  312.680190][    C1]  ? __pfx_enable_device_and_get+0x10/0x10
[  312.680227][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.680256][    C1]  ? device_add+0x6f6/0xb80
[  312.680287][    C1]  ib_register_device+0x10af/0x1380
[  312.680328][    C1]  ? __pfx_ib_register_device+0x10/0x10
[  312.680355][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.680391][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.680423][    C1]  ? xa_load+0x60/0x210
[  312.680455][    C1]  ? xa_load+0x60/0x210
[  312.680484][    C1]  ? xa_load+0x60/0x210
[  312.680516][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.680545][    C1]  ? xa_load+0x1db/0x210
[  312.680586][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.680615][    C1]  ? ib_device_set_netdev+0x5c9/0x6d0
[  312.680656][    C1]  rxe_register_device+0x1e3/0x350
[  312.680689][    C1]  rxe_net_add+0x81/0x110
[  312.680721][    C1]  rxe_newlink+0xf4/0x1c0
[  312.680762][    C1]  nldev_newlink+0x5bc/0x650
[  312.680792][    C1]  ? __pfx_nldev_newlink+0x10/0x10
[  312.680973][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.681002][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.681036][    C1]  ? security_capable+0x7e/0x2c0
[  312.681066][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.681098][    C1]  ? __pfx_nldev_newlink+0x10/0x10
[  312.681123][    C1]  rdma_nl_rcv+0x6ef/0xa40
[  312.681165][    C1]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  312.681218][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  312.681250][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  312.681287][    C1]  netlink_unicast+0x7bb/0x940
[  312.681328][    C1]  netlink_sendmsg+0x813/0xb40
[  312.681370][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  312.681406][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.681435][    C1]  ? aa_sock_msg_perm+0xf1/0x1b0
[  312.681466][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.681500][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  312.681530][    C1]  sock_sendmsg_nosec+0x13a/0x180
[  312.681571][    C1]  ____sys_sendmsg+0x54e/0x850
[  312.681608][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  312.681641][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.681676][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.681705][    C1]  ? import_iovec+0x73/0xa0
[  312.681736][    C1]  ___sys_sendmsg+0x2a5/0x360
[  312.681766][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.681795][    C1]  ? __lock_acquire+0x683/0x2cf0
[  312.681837][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  312.681872][    C1]  ? futex_wait+0x2a2/0x390
[  312.681939][    C1]  ? __fget_files+0x2a/0x420
[  312.681973][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.682002][    C1]  ? __fget_files+0x3a2/0x420
[  312.682056][    C1]  __x64_sys_sendmsg+0x1b1/0x290
[  312.682086][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.682119][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  312.682159][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.682199][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.682227][    C1]  do_syscall_64+0x174/0x580
[  312.682257][    C1]  ? trace_irq_disable+0x3b/0x140
[  312.682297][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.682323][    C1] RIP: 0033:0x7f61dd39de99
[  312.682346][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.682366][    C1] RSP: 002b:00007f61de2cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  312.682391][    C1] RAX: ffffffffffffffda RBX: 00007f61dd625fa0 RCX: 00007f61dd39de99
[  312.682410][    C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  312.682426][    C1] RBP: 00007f61dd433eaf R08: 0000000000000000 R09: 0000000000000000
[  312.682442][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.682458][    C1] R13: 00007f61dd626038 R14: 00007f61dd625fa0 R15: 00007ffc33790f18
[  312.682498][    C1]  </TASK>
[  312.682532][    C1] FAULT_INJECTION: forcing a failure.
[  312.682532][    C1] name failslab, interval 1, probability 100, space 0, times 1
[  312.690460][    C0] CPU: 0 UID: 0 PID: 9532 Comm: syz.8.501 Not tainted syzkaller #0 PREEMPT(full) 
[  312.690488][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  312.690503][    C0] Call Trace:
[  312.690513][    C0]  <IRQ>
[  312.690530][    C0]  dump_stack_lvl+0xe8/0x150
[  312.690570][    C0]  should_fail_ex+0x40c/0x560
[  312.690608][    C0]  should_failslab+0xa8/0x100
[  312.690649][    C0]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  312.690681][    C0]  ? local_lock_release+0x9c/0x160
[  312.690707][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.690736][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  312.690759][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  312.690792][    C0]  __alloc_skb+0x1d7/0x7a0
[  312.690823][    C0]  __netdev_alloc_skb+0xc1/0x810
[  312.690849][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.690879][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  312.690912][    C0]  __ieee80211_beacon_get+0xcfd/0x1920
[  312.690942][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  312.690977][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.691015][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  312.691051][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  312.691084][    C0]  ? perf_trace_contention_end+0x80/0x310
[  312.691114][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.691150][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  312.691184][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.691220][    C0]  __iterate_interfaces+0x2af/0x5a0
[  312.691248][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  312.691280][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  312.691310][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  312.691342][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  312.691373][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  312.691399][    C0]  mac80211_hwsim_beacon+0xaf/0x240
[  312.691425][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  312.691451][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  312.691507][    C0]  hrtimer_run_softirq+0x17a/0x240
[  312.691549][    C0]  handle_softirqs+0x225/0x840
[  312.691584][    C0]  ? __irq_exit_rcu+0xca/0x220
[  312.691623][    C0]  __irq_exit_rcu+0xca/0x220
[  312.691655][    C0]  irq_exit_rcu+0x9/0x30
[  312.691684][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  312.691712][    C0]  </IRQ>
[  312.691720][    C0]  <TASK>
[  312.691731][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  312.691759][    C0] RIP: 0010:console_flush_all+0x7d2/0xaf0
[  312.691789][    C0] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 10 2b 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c3
[  312.691809][    C0] RSP: 0018:ffffc90051406e80 EFLAGS: 00000287
[  312.691834][    C0] RAX: ffffffff81a5d4ec RBX: ffffc90051406fe0 RCX: 0000000000080000
[  312.691853][    C0] RDX: ffffc9004c37d000 RSI: 0000000000005dab RDI: 0000000000005dac
[  312.691870][    C0] RBP: ffffc90051406f90 R08: ffffffff90579137 R09: 1ffffffff20af226
[  312.691890][    C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: dffffc0000000000
[  312.691909][    C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f6a0
[  312.691935][    C0]  ? console_flush_all+0x7cc/0xaf0
[  312.691980][    C0]  ? console_flush_all+0x123/0xaf0
[  312.692016][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  312.692050][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.692078][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  312.692116][    C0]  console_unlock+0xd1/0x1c0
[  312.692146][    C0]  ? __pfx_console_unlock+0x10/0x10
[  312.692170][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.692202][    C0]  ? _printk+0xdd/0x130
[  312.692232][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.692266][    C0]  vprintk_emit+0x485/0x560
[  312.692299][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  312.692337][    C0]  _printk+0xdd/0x130
[  312.692372][    C0]  ? __pfx__printk+0x10/0x10
[  312.692402][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.692433][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.692463][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.692499][    C0]  should_fail_ex+0x3ed/0x560
[  312.692543][    C0]  should_failslab+0xa8/0x100
[  312.692583][    C0]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  312.692615][    C0]  ? local_lock_release+0x9c/0x160
[  312.692641][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  312.692664][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  312.692697][    C0]  __alloc_skb+0x1d7/0x7a0
[  312.692728][    C0]  alloc_skb_with_frags+0xc6/0x760
[  312.692761][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.692793][    C0]  ? __lock_acquire+0x683/0x2cf0
[  312.692834][    C0]  sock_alloc_send_pskb+0x878/0x990
[  312.692889][    C0]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  312.692922][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.692972][    C0]  __ip_append_data+0x29ea/0x3cf0
[  312.693012][    C0]  ? rcu_is_watching+0x15/0xb0
[  312.693037][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.693076][    C0]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  312.693117][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.693156][    C0]  ? __pfx___ip_append_data+0x10/0x10
[  312.693186][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.693216][    C0]  ? ipv4_mtu+0x23/0x670
[  312.693254][    C0]  ? __pfx_ipv4_mtu+0x10/0x10
[  312.693289][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.693318][    C0]  ? ip_setup_cork+0x4ed/0x8f0
[  312.693346][    C0]  ip_make_skb+0x22e/0x440
[  312.693376][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.693407][    C0]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  312.693434][    C0]  ? __pfx_ip_make_skb+0x10/0x10
[  312.693478][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.693517][    C0]  udp_sendmsg+0x1937/0x2140
[  312.693568][    C0]  ? tomoyo_check_inet_address+0x6b5/0x930
[  312.693608][    C0]  ? __pfx_udp_sendmsg+0x10/0x10
[  312.693632][    C0]  ? tomoyo_check_inet_address+0x27f/0x930
[  312.693673][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.693736][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.693765][    C0]  ? sock_rps_record_flow+0x19/0x350
[  312.693793][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.693822][    C0]  ? inet_sendmsg+0x23e/0x320
[  312.693850][    C0]  ? __pfx_inet_sendmsg+0x10/0x10
[  312.693874][    C0]  sock_sendmsg_nosec+0x10e/0x180
[  312.693914][    C0]  __sys_sendto+0x408/0x5a0
[  312.693947][    C0]  ? __pfx___sys_sendto+0x10/0x10
[  312.694005][    C0]  ? rcu_is_watching+0x15/0xb0
[  312.694029][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.694065][    C0]  __x64_sys_sendto+0xde/0x100
[  312.694092][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.694120][    C0]  do_syscall_64+0x174/0x580
[  312.694149][    C0]  ? trace_irq_disable+0x3b/0x140
[  312.694189][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.694215][    C0] RIP: 0033:0x7f9ab259de99
[  312.694236][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.694256][    C0] RSP: 002b:00007f9ab3469028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  312.694280][    C0] RAX: ffffffffffffffda RBX: 00007f9ab2825fa0 RCX: 00007f9ab259de99
[  312.694298][    C0] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005
[  312.694315][    C0] RBP: 00007f9ab2633eaf R08: 0000200000000300 R09: 0000000000000010
[  312.694332][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.694347][    C0] R13: 00007f9ab2826038 R14: 00007f9ab2825fa0 R15: 00007ffd674e4488
[  312.694387][    C0]  </TASK>
[  312.721004][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.8.501 Not tainted syzkaller #0 PREEMPT(full) 
[  312.721039][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  312.721055][ T9532] Call Trace:
[  312.721091][ T9532]  <TASK>
[  312.721103][ T9532]  dump_stack_lvl+0xe8/0x150
[  312.721149][ T9532]  should_fail_ex+0x40c/0x560
[  312.721189][ T9532]  should_failslab+0xa8/0x100
[  312.721231][ T9532]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  312.721264][ T9532]  ? local_lock_release+0x9c/0x160
[  312.721292][ T9532]  ? __alloc_skb+0x1d7/0x7a0
[  312.721315][ T9532]  ? __alloc_skb+0x1d7/0x7a0
[  312.721348][ T9532]  __alloc_skb+0x1d7/0x7a0
[  312.721379][ T9532]  alloc_skb_with_frags+0xc6/0x760
[  312.721413][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.721443][ T9532]  ? __lock_acquire+0x683/0x2cf0
[  312.721485][ T9532]  sock_alloc_send_pskb+0x878/0x990
[  312.721541][ T9532]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  312.721575][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.721622][ T9532]  __ip_append_data+0x29ea/0x3cf0
[  312.721659][ T9532]  ? rcu_is_watching+0x15/0xb0
[  312.721685][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.721723][ T9532]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  312.721764][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.721804][ T9532]  ? __pfx___ip_append_data+0x10/0x10
[  312.721828][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.721858][ T9532]  ? ipv4_mtu+0x23/0x670
[  312.721897][ T9532]  ? __pfx_ipv4_mtu+0x10/0x10
[  312.721932][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.721961][ T9532]  ? ip_setup_cork+0x4ed/0x8f0
[  312.721989][ T9532]  ip_make_skb+0x22e/0x440
[  312.722019][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.722056][ T9532]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  312.722090][ T9532]  ? __pfx_ip_make_skb+0x10/0x10
[  312.722132][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.722171][ T9532]  udp_sendmsg+0x1937/0x2140
[  312.722215][ T9532]  ? tomoyo_check_inet_address+0x6b5/0x930
[  312.722255][ T9532]  ? __pfx_udp_sendmsg+0x10/0x10
[  312.722280][ T9532]  ? tomoyo_check_inet_address+0x27f/0x930
[  312.722320][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.722384][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.722413][ T9532]  ? sock_rps_record_flow+0x19/0x350
[  312.722441][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.722470][ T9532]  ? inet_sendmsg+0x23e/0x320
[  312.722498][ T9532]  ? __pfx_inet_sendmsg+0x10/0x10
[  312.722522][ T9532]  sock_sendmsg_nosec+0x10e/0x180
[  312.722563][ T9532]  __sys_sendto+0x408/0x5a0
[  312.722597][ T9532]  ? __pfx___sys_sendto+0x10/0x10
[  312.722655][ T9532]  ? rcu_is_watching+0x15/0xb0
[  312.722680][ T9532]  ? srso_alias_return_thunk+0x5/0xfbef5
[  312.722716][ T9532]  __x64_sys_sendto+0xde/0x100
[  312.722744][ T9532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.722772][ T9532]  do_syscall_64+0x174/0x580
[  312.722802][ T9532]  ? trace_irq_disable+0x3b/0x140
[  312.722843][ T9532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.722870][ T9532] RIP: 0033:0x7f9ab259de99
[  312.722892][ T9532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.722914][ T9532] RSP: 002b:00007f9ab3469028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  312.722940][ T9532] RAX: ffffffffffffffda RBX: 00007f9ab2825fa0 RCX: 00007f9ab259de99
[  312.722959][ T9532] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005
[  312.722976][ T9532] RBP: 00007f9ab2633eaf R08: 0000200000000300 R09: 0000000000000010
[  312.722993][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.723008][ T9532] R13: 00007f9ab2826038 R14: 00007f9ab2825fa0 R15: 00007ffd674e4488
[  312.723048][ T9532]  </TASK>
[  314.581725][    C1] CPU: 1 UID: 0 PID: 9484 Comm: syz.9.492 Not tainted syzkaller #0 PREEMPT(full) 
[  314.581749][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  314.581761][    C1] Call Trace:
[  314.581770][    C1]  <IRQ>
[  314.581778][    C1]  dump_stack_lvl+0xe8/0x150
[  314.581813][    C1]  should_fail_ex+0x40c/0x560
[  314.581843][    C1]  should_failslab+0xa8/0x100
[  314.581876][    C1]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  314.581901][    C1]  ? local_lock_release+0x9c/0x160
[  314.581922][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  314.581939][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  314.581964][    C1]  __alloc_skb+0x1d7/0x7a0
[  314.581987][    C1]  __netdev_alloc_skb+0xc1/0x810
[  314.582006][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.582031][    C1]  ? __ieee80211_beacon_get+0x36/0x1920
[  314.582057][    C1]  __ieee80211_beacon_get+0xcfd/0x1920
[  314.582079][    C1]  ? __ieee80211_beacon_get+0x36/0x1920
[  314.582105][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.582134][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  314.582161][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  314.582186][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.582207][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  314.582233][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.582260][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  314.582286][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.582317][    C1]  __iterate_interfaces+0x2af/0x5a0
[  314.582339][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  314.582363][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  314.582386][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  314.582410][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  314.582433][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  314.582453][    C1]  mac80211_hwsim_beacon+0xaf/0x240
[  314.582472][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  314.582492][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  314.582535][    C1]  hrtimer_run_softirq+0x17a/0x240
[  314.582563][    C1]  handle_softirqs+0x225/0x840
[  314.582590][    C1]  ? __irq_exit_rcu+0xca/0x220
[  314.582620][    C1]  __irq_exit_rcu+0xca/0x220
[  314.582649][    C1]  irq_exit_rcu+0x9/0x30
[  314.582670][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  314.582692][    C1]  </IRQ>
[  314.582699][    C1]  <TASK>
[  314.582708][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  314.582728][    C1] RIP: 0010:kernfs_link_sibling+0x19d/0x5a0
[  314.582762][    C1] Code: 8b 24 24 eb 08 e8 d3 58 52 ff 45 31 e4 4d 8d 6f 18 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 17 ed bf ff 4d 8b 6d 00 <4d> 85 ed 74 24 e8 a9 58 52 ff 49 83 c5 60 4c 89 e8 48 c1 e8 03 80
[  314.582778][    C1] RSP: 0018:ffffc900215fe760 EFLAGS: 00000246
[  314.582795][    C1] RAX: 1ffff11008dc71af RBX: dffffc0000000000 RCX: 0000000000080000
[  314.582810][    C1] RDX: ffffc90049b74000 RSI: 000000000007ffff RDI: 0000000000080000
[  314.582823][    C1] RBP: 0000000000000001 R08: ffffffff8274772c R09: 0000000000000000
[  314.582835][    C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000000
[  314.582848][    C1] R13: 0000000000000000 R14: 000000003d84f730 R15: ffff888046e38d60
[  314.582868][    C1]  ? kernfs_root+0x1c/0x230
[  314.582913][    C1]  kernfs_add_one+0x1d2/0x5e0
[  314.582946][    C1]  __kernfs_create_file+0x22b/0x2e0
[  314.582972][    C1]  sysfs_add_file_mode_ns+0x237/0x300
[  314.583003][    C1]  internal_create_group+0x679/0x1180
[  314.583033][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583063][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583085][    C1]  ? kobject_add+0x163/0x240
[  314.583110][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583135][    C1]  ? __pfx_internal_create_group+0x10/0x10
[  314.583168][    C1]  ? __kmalloc_noprof+0x1ad/0x720
[  314.583197][    C1]  sysfs_create_groups+0x59/0x120
[  314.583228][    C1]  ib_setup_port_attrs+0xfd8/0x2420
[  314.583259][    C1]  ? __lock_acquire+0x683/0x2cf0
[  314.583310][    C1]  ? __pfx_ib_setup_port_attrs+0x10/0x10
[  314.583338][    C1]  ? __mutex_unlock_slowpath+0x731/0x900
[  314.583361][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583386][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  314.583407][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583431][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  314.583454][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583482][    C1]  ? kobject_put+0x50f/0x550
[  314.583510][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  314.583540][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583562][    C1]  ? device_add+0x6f6/0xb80
[  314.583587][    C1]  add_one_compat_dev+0x446/0x650
[  314.583619][    C1]  enable_device_and_get+0x2b3/0x3e0
[  314.583641][    C1]  ? __pfx_enable_device_and_get+0x10/0x10
[  314.583670][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583692][    C1]  ? device_add+0x6f6/0xb80
[  314.583715][    C1]  ib_register_device+0x10af/0x1380
[  314.583746][    C1]  ? __pfx_ib_register_device+0x10/0x10
[  314.583767][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583793][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583818][    C1]  ? xa_load+0x60/0x210
[  314.583842][    C1]  ? xa_load+0x60/0x210
[  314.583863][    C1]  ? xa_load+0x60/0x210
[  314.583887][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583909][    C1]  ? xa_load+0x1db/0x210
[  314.583940][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.583961][    C1]  ? ib_device_set_netdev+0x5c9/0x6d0
[  314.583992][    C1]  rxe_register_device+0x1e3/0x350
[  314.584018][    C1]  rxe_net_add+0x81/0x110
[  314.584051][    C1]  rxe_newlink+0xf4/0x1c0
[  314.584081][    C1]  nldev_newlink+0x5bc/0x650
[  314.584104][    C1]  ? __pfx_nldev_newlink+0x10/0x10
[  314.584227][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.584249][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.584270][    C1]  ? security_capable+0x7e/0x2c0
[  314.584292][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.584316][    C1]  ? __pfx_nldev_newlink+0x10/0x10
[  314.584335][    C1]  rdma_nl_rcv+0x6ef/0xa40
[  314.584367][    C1]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  314.584407][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  314.584431][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  314.584459][    C1]  netlink_unicast+0x7bb/0x940
[  314.584490][    C1]  netlink_sendmsg+0x813/0xb40
[  314.584522][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.584554][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.584575][    C1]  ? aa_sock_msg_perm+0xf1/0x1b0
[  314.584604][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.584638][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.584669][    C1]  sock_sendmsg_nosec+0x13a/0x180
[  314.584711][    C1]  ____sys_sendmsg+0x54e/0x850
[  314.584750][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  314.584775][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.584802][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.584824][    C1]  ? import_iovec+0x73/0xa0
[  314.584846][    C1]  ___sys_sendmsg+0x2a5/0x360
[  314.584867][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.584889][    C1]  ? __lock_acquire+0x683/0x2cf0
[  314.584920][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  314.584952][    C1]  ? futex_wait+0x2a2/0x390
[  314.585002][    C1]  ? __fget_files+0x2a/0x420
[  314.585029][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.585051][    C1]  ? __fget_files+0x3a2/0x420
[  314.585087][    C1]  __x64_sys_sendmsg+0x1b1/0x290
[  314.585109][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.585134][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  314.585164][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.585194][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.585216][    C1]  do_syscall_64+0x174/0x580
[  314.585237][    C1]  ? trace_irq_disable+0x3b/0x140
[  314.585268][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.585288][    C1] RIP: 0033:0x7f61dd39de99
[  314.585306][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.585321][    C1] RSP: 002b:00007f61de2cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  314.585354][    C1] RAX: ffffffffffffffda RBX: 00007f61dd625fa0 RCX: 00007f61dd39de99
[  314.585368][    C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  314.585380][    C1] RBP: 00007f61dd433eaf R08: 0000000000000000 R09: 0000000000000000
[  314.585392][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.585404][    C1] R13: 00007f61dd626038 R14: 00007f61dd625fa0 R15: 00007ffc33790f18
[  314.585433][    C1]  </TASK>
[  315.467656][ T5626] Bluetooth: hci1: command 0x0406 tx timeout
[  315.473699][ T5626] Bluetooth: hci25: command tx timeout
[  315.769632][ T5626] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1
[  315.789225][ T5626] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9
[  315.851820][ T5626] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9
[  315.862489][ T5626] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4
[  315.903152][ T5626] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1
[  315.915671][ T5626] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2
[  315.924267][ T5626] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9
[  315.945696][ T5626] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9
[  315.954323][ T5626] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4
[  315.963833][ T5626] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2
[  316.010755][ T9450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.281991][ T9450] veth0_vlan: entered promiscuous mode
[  316.315009][ T5644] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1
[  316.328423][ T5644] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9
[  316.336180][ T5644] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9
[  316.344160][ T5644] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4
[  316.392752][    C1] sched: DL replenish lagged too much
[  316.421878][ T9450] veth1_vlan: entered promiscuous mode
[  316.441673][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  316.482725][ T5623] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2
[  316.497772][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  316.640224][ T9450] veth0_macvtap: entered promiscuous mode
[  316.665119][ T9450] veth1_macvtap: entered promiscuous mode
[  316.717992][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.784412][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.833190][ T6770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.883851][ T6770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.923943][ T6770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.954801][ T6770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.111827][ T9574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  317.254475][ T3356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.294286][ T3356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.503729][  T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.532671][  T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.558177][ T5626] Bluetooth: hci25: command tx timeout
[  317.939648][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'.
[  317.958878][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'.
[  318.034910][ T5626] Bluetooth: hci27: command tx timeout
[  318.115241][ T5623] Bluetooth: hci26: command tx timeout
[  318.180277][ T9593] bridge0: mtu less than device minimum
[  318.591660][ T9601] bridge0: port 4(gretap0) entered blocking state
[  318.608584][ T5626] Bluetooth: hci28: command tx timeout
[  318.630763][ T9601] bridge0: port 4(gretap0) entered disabled state
[  318.641353][ T9601] gretap0: entered allmulticast mode
[  318.655076][ T9601] gretap0: entered promiscuous mode
[  318.666653][ T9601] bridge0: port 4(gretap0) entered blocking state
[  318.673197][ T9601] bridge0: port 4(gretap0) entered forwarding state
[  318.682269][ T9602] bridge0: port 5(erspan0) entered blocking state
[  318.689058][ T9602] bridge0: port 5(erspan0) entered disabled state
[  318.695854][ T9602] erspan0: entered allmulticast mode
[  318.703276][ T9602] erspan0: entered promiscuous mode
[  318.715533][ T9602] bridge0: port 5(erspan0) entered blocking state
[  318.722049][ T9602] bridge0: port 5(erspan0) entered forwarding state
[  318.743188][ T9601] netlink: 'syz.8.515': attribute type 4 has an invalid length.
[  318.754375][ T9601] netlink: 'syz.8.515': attribute type 4 has an invalid length.
[  318.950905][ T9604] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  320.117138][ T5626] Bluetooth: hci27: command tx timeout
[  320.195496][ T5626] Bluetooth: hci26: command tx timeout
[  320.681233][ T5626] Bluetooth: hci28: command tx timeout
[  320.919499][ T3356] rpcbind: server 127.0.0.1 not responding, timed out
[  321.127129][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.137846][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.145249][ T9541] bridge_slave_0: entered allmulticast mode
[  321.153322][ T9541] bridge_slave_0: entered promiscuous mode
[  321.169295][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.178179][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.185557][ T9541] bridge_slave_1: entered allmulticast mode
[  321.194911][ T9541] bridge_slave_1: entered promiscuous mode
[  321.331830][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.362081][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.553828][ T9541] team0: Port device team_slave_0 added
[  321.604346][ T9541] team0: Port device team_slave_1 added
[  321.711073][ T9641] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  321.723745][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.736487][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  321.762676][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.810781][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.826597][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  321.866390][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.136160][ T9541] hsr_slave_0: entered promiscuous mode
[  322.143207][ T9541] hsr_slave_1: entered promiscuous mode
[  322.151373][ T9541] debugfs: 'hsr0' already exists in 'hsr'
[  322.159835][ T9541] Cannot create hsr debugfs directory
[  322.199732][ T5626] Bluetooth: hci27: command tx timeout
[  322.275125][ T5626] Bluetooth: hci26: command tx timeout
[  322.491476][ T5861] IPVS: starting estimator thread 0...
[  322.617131][ T9659] IPVS: using max 25 ests per chain, 60000 per kthread
[  322.712351][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.719785][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.727107][ T9543] bridge_slave_0: entered allmulticast mode
[  322.740688][ T9543] bridge_slave_0: entered promiscuous mode
[  322.766673][ T5626] Bluetooth: hci28: command tx timeout
[  322.862119][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.886764][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.898396][ T9543] bridge_slave_1: entered allmulticast mode
[  322.929407][ T9543] bridge_slave_1: entered promiscuous mode
[  323.049253][ T9543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.160994][ T9543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.274281][ T9674] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  323.391379][ T9543] team0: Port device team_slave_0 added
[  323.498651][ T9541] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.564403][ T9543] team0: Port device team_slave_1 added
[  323.671731][ T9554] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.689448][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.698902][ T9554] bridge_slave_0: entered allmulticast mode
[  323.710638][ T9554] bridge_slave_0: entered promiscuous mode
[  323.810566][ T9541] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.857788][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.865201][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.892055][ T9543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.910540][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.918968][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.934162][ T9554] bridge_slave_1: entered allmulticast mode
[  323.954100][ T9554] bridge_slave_1: entered promiscuous mode
[  323.975721][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.983210][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  324.024120][ T9543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.145696][ T9541] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.277380][ T5626] Bluetooth: hci27: command tx timeout
[  324.318599][ T9554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.354961][ T5626] Bluetooth: hci26: command tx timeout
[  324.369036][ T9554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.392985][ T5623] Bluetooth: hci29: unexpected cc 0x0c03 length: 249 > 1
[  324.426846][ T5623] Bluetooth: hci29: unexpected cc 0x1003 length: 249 > 9
[  324.436191][ T5623] Bluetooth: hci29: unexpected cc 0x1001 length: 249 > 9
[  324.454895][ T5623] Bluetooth: hci29: unexpected cc 0x0c23 length: 249 > 4
[  324.466059][ T5623] Bluetooth: hci29: unexpected cc 0x0c38 length: 249 > 2
[  324.489307][ T9541] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.835708][ T5626] Bluetooth: hci28: command tx timeout
[  324.970290][ T9554] team0: Port device team_slave_0 added
[  324.995951][ T9554] team0: Port device team_slave_1 added
[  325.039774][ T9543] hsr_slave_0: entered promiscuous mode
[  325.073955][ T9543] hsr_slave_1: entered promiscuous mode
[  325.104252][ T9543] debugfs: 'hsr0' already exists in 'hsr'
[  325.110838][ T9543] Cannot create hsr debugfs directory
[  325.178146][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.194405][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.232531][ T9554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.248384][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.255516][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.294246][ T9554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.611351][ T9554] hsr_slave_0: entered promiscuous mode
[  325.620470][ T9554] hsr_slave_1: entered promiscuous mode
[  325.629261][ T9554] debugfs: 'hsr0' already exists in 'hsr'
[  325.638919][ T9554] Cannot create hsr debugfs directory
[  325.852134][ T9541] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  325.869782][ T9541] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  325.990652][ T9541] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  326.021691][ T9541] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  326.032978][ T9541] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  326.075768][ T9541] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  326.100177][ T9541] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  326.111800][ T9541] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  326.167916][ T9711] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  326.501304][ T9543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.514940][ T5626] Bluetooth: hci29: command tx timeout
[  326.619247][ T9543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.829956][ T9543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.876903][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.942997][ T9541] 8021q: adding VLAN 0 to HW filter on device team0
[  326.973240][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.980394][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.051637][ T9543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.083724][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.090894][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.466587][ T9543] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  327.496521][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  327.535634][ T9543] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  327.562717][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  327.693025][ T9554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.738621][ T9543] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  327.752483][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  327.853907][ T9543] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  327.887185][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  327.974901][ T9554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.132125][ T9741] openvswitch: netlink: Duplicate key (type 6).
[  328.297825][ T9554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.508453][ T9554] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.598373][ T5623] Bluetooth: hci29: command tx timeout
[  328.867423][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.219806][ T9554] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  329.263788][ T9554] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  329.271903][ T9554] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  329.283851][ T9554] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  329.313331][ T9554] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  329.339717][ T9554] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  329.361565][ T9554] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  329.372798][ T9554] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  329.480571][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.504091][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.513533][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.521227][ T9691] bridge_slave_0: entered allmulticast mode
[  329.531476][ T9691] bridge_slave_0: entered promiscuous mode
[  329.552630][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.566809][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.574310][ T9691] bridge_slave_1: entered allmulticast mode
[  329.582372][ T9691] bridge_slave_1: entered promiscuous mode
[  329.720247][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.740858][ T9543] 8021q: adding VLAN 0 to HW filter on device team0
[  329.755712][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.846224][ T9691] team0: Port device team_slave_0 added
[  329.859123][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.866304][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.922733][ T9691] team0: Port device team_slave_1 added
[  329.993679][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.000886][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.031407][ T9541] veth0_vlan: entered promiscuous mode
[  330.044187][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.052259][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  330.085991][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.101228][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.108647][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  330.138815][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.312699][ T9691] hsr_slave_0: entered promiscuous mode
[  330.319953][ T9691] hsr_slave_1: entered promiscuous mode
[  330.328260][ T9691] debugfs: 'hsr0' already exists in 'hsr'
[  330.334057][ T9691] Cannot create hsr debugfs directory
[  330.340807][ T9541] veth1_vlan: entered promiscuous mode
[  330.675382][ T5626] Bluetooth: hci29: command tx timeout
[  330.720203][ T9541] veth0_macvtap: entered promiscuous mode
[  330.813349][ T9541] veth1_macvtap: entered promiscuous mode
[  330.861611][ T9554] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.962141][ T9691] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.047322][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.108515][ T9554] 8021q: adding VLAN 0 to HW filter on device team0
[  331.148504][ T9691] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.183451][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.250503][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.257673][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.269654][ T1017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.298521][ T9691] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.328569][ T1017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.337568][ T1017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.362974][  T183] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.370165][  T183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.387091][ T1017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.468657][ T9691] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.739855][ T9554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.977387][  T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.027876][  T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.166113][ T9543] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.213010][  T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.251178][  T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.300513][ T9691] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  332.367296][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  332.386187][ T9691] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  332.413948][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  332.471340][ T9691] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  332.499696][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  332.509887][ T9691] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  332.546642][ T9691] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  332.743497][ T9543] veth0_vlan: entered promiscuous mode
[  332.755939][ T5626] Bluetooth: hci29: command tx timeout
[  332.787639][ T9543] veth1_vlan: entered promiscuous mode
[  332.903317][   T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.963693][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.012243][   T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.059331][ T9543] veth0_macvtap: entered promiscuous mode
[  333.094081][ T9543] veth1_macvtap: entered promiscuous mode
[  333.104108][ T9691] 8021q: adding VLAN 0 to HW filter on device team0
[  333.120784][ T9554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.163688][   T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.198857][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.205993][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.237558][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.278722][   T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.299932][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.307375][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.327212][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.373395][ T1017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.383517][ T1017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.403704][ T1017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.412523][ T1017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.492296][ T9554] veth0_vlan: entered promiscuous mode
[  333.571575][ T9554] veth1_vlan: entered promiscuous mode
[  333.802924][   T13] bridge_slave_1: left allmulticast mode
[  333.814797][   T13] bridge_slave_1: left promiscuous mode
[  333.828585][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.848335][   T13] bridge_slave_0: left allmulticast mode
[  333.858443][   T13] bridge_slave_0: left promiscuous mode
[  333.879039][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.908328][ T5623] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[  333.918330][ T5623] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[  333.928580][ T5623] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[  333.944117][ T5623] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[  333.958288][ T5623] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[  334.150760][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.162939][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.181179][   T13] bond0 (unregistering): Released all slaves
[  334.291341][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.315144][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.514501][ T9554] veth0_macvtap: entered promiscuous mode
[  334.648195][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.660040][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.661644][ T9554] veth1_macvtap: entered promiscuous mode
[  334.819986][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.911351][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.969669][   T94] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.016278][ T9790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.053135][ T9790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.108425][ T9790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.488213][ T9790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.531338][ T9790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.668633][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.698723][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.826542][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.000685][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  336.038605][ T5623] Bluetooth: hci23: command tx timeout
[  336.289907][   T13] hsr_slave_0: left promiscuous mode
[  336.303319][   T13] hsr_slave_1: left promiscuous mode
[  336.344652][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.371115][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.393040][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.409364][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.448629][   T13] veth1_macvtap: left promiscuous mode
[  336.458643][   T13] veth0_macvtap: left promiscuous mode
[  336.464275][   T13] veth1_vlan: left promiscuous mode
[  336.472378][   T13] veth0_vlan: left promiscuous mode
[  336.910426][   T13] team0 (unregistering): Port device team_slave_1 removed
[  337.024138][   T13] team0 (unregistering): Port device team_slave_0 removed
[  337.182716][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  337.220893][ T5765] syz1: Port: 1 Link DOWN
[  337.536310][ T9691] veth0_vlan: entered promiscuous mode
[  337.590303][ T9691] veth1_vlan: entered promiscuous mode
[  337.685847][ T9691] veth0_macvtap: entered promiscuous mode
[  337.713723][ T9691] veth1_macvtap: entered promiscuous mode
[  337.738996][   T57] smc: removing ib device syz1
[  337.820093][   T57] smbdirect: ib_dev[syz1] removed
[  337.923441][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.988924][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.115920][ T5623] Bluetooth: hci23: command tx timeout
[  338.125169][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.142867][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.224222][  T183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.281303][  T183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.336348][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  338.708890][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.730298][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.044404][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.094792][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.376960][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.384145][ T9811] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.415082][ T9811] bridge_slave_0: entered allmulticast mode
[  339.443575][ T9811] bridge_slave_0: entered promiscuous mode
[  339.501850][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.523806][ T9811] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.531401][ T9811] bridge_slave_1: entered allmulticast mode
[  339.562378][ T9811] bridge_slave_1: entered promiscuous mode
[  339.827770][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4
[  339.853788][ T9811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.884828][ T9811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.131154][ T9811] team0: Port device team_slave_0 added
[  340.186231][ T9811] team0: Port device team_slave_1 added
[  340.194995][ T5623] Bluetooth: hci23: command tx timeout
[  340.453589][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.460758][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.487296][ T9811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.542336][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.549883][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.587183][ T9811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.861753][ T9811] hsr_slave_0: entered promiscuous mode
[  340.895920][ T9811] hsr_slave_1: entered promiscuous mode
[  340.904320][ T9811] debugfs: 'hsr0' already exists in 'hsr'
[  340.910608][ T9811] Cannot create hsr debugfs directory
[  342.229485][ T9811] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.275031][ T5623] Bluetooth: hci23: command tx timeout
[  342.422030][ T9811] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.526046][ T9811] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.622434][ T9811] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.695591][ T4987] udevd[4987]: worker [5750] /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:10C4:EA90.0003/hidraw/hidraw0 timeout; kill it
[  342.712479][ T4987] udevd[4987]: seq 12428 '/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:10C4:EA90.0003/hidraw/hidraw0' killed
[  342.757190][ T4987] udevd[4987]: worker [5750] terminated by signal 9 (Killed)
[  342.788948][ T4987] udevd[4987]: worker [5750] failed while handling '/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:10C4:EA90.0003/hidraw/hidraw0'
[  343.141463][ T9811] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  343.152622][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  343.162037][ T9811] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  343.196988][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  343.207437][ T9811] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  343.218812][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  343.238441][ T9811] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  343.262008][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  343.457225][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.502668][ T9811] 8021q: adding VLAN 0 to HW filter on device team0
[  343.522006][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.529150][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.546666][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.553797][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.284017][ T9811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.763944][ T9811] veth0_vlan: entered promiscuous mode
[  344.783839][ T9811] veth1_vlan: entered promiscuous mode
[  344.860925][ T9811] veth0_macvtap: entered promiscuous mode
[  344.873428][ T9811] veth1_macvtap: entered promiscuous mode
[  344.899979][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.939171][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.964049][ T1017] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.974236][ T1017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.000152][ T1017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.010295][ T1017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.272968][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.282932][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.389674][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.425351][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.496295][ T5626] Bluetooth: hci30: unexpected cc 0x0c03 length: 249 > 1
[  345.517129][ T5626] Bluetooth: hci30: unexpected cc 0x1003 length: 249 > 9
[  345.528530][ T5626] Bluetooth: hci30: unexpected cc 0x1001 length: 249 > 9
[  345.546943][ T5626] Bluetooth: hci30: unexpected cc 0x0c23 length: 249 > 4
[  345.560245][ T5626] Bluetooth: hci30: unexpected cc 0x0c38 length: 249 > 2
[  347.635669][ T5623] Bluetooth: hci30: command tx timeout
[  347.859354][ T5626] Bluetooth: hci31: unexpected cc 0x0c03 length: 249 > 1
[  347.869333][ T5626] Bluetooth: hci31: unexpected cc 0x1003 length: 249 > 9
[  347.879441][ T5626] Bluetooth: hci31: unexpected cc 0x1001 length: 249 > 9
[  347.906453][ T5626] Bluetooth: hci31: unexpected cc 0x0c23 length: 249 > 4
[  347.914229][ T5626] Bluetooth: hci31: unexpected cc 0x0c38 length: 249 > 2
[  348.825239][ T9943] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.832554][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.846424][ T9943] bridge_slave_0: entered allmulticast mode
[  348.855374][ T9943] bridge_slave_0: entered promiscuous mode
[  348.868869][ T9943] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.876470][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.883730][ T9943] bridge_slave_1: entered allmulticast mode
[  348.885978][ T9943] bridge_slave_1: entered promiscuous mode
[  348.942738][ T9943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.004402][ T9943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.152856][ T9943] team0: Port device team_slave_0 added
[  349.168656][ T9943] team0: Port device team_slave_1 added
[  349.236668][ T5626] Bluetooth: hci3: command 0x0406 tx timeout
[  349.276725][ T9943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.290569][ T9943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.318889][ T5637] Bluetooth: hci0: command 0x0406 tx timeout
[  349.319451][ T9943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.366153][ T9943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.373094][ T9943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.400471][ T9943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.610547][ T9943] hsr_slave_0: entered promiscuous mode
[  349.625222][ T9943] hsr_slave_1: entered promiscuous mode
[  349.648090][ T9943] debugfs: 'hsr0' already exists in 'hsr'
[  349.656442][ T9943] Cannot create hsr debugfs directory
[  349.719143][ T5644] Bluetooth: hci30: command tx timeout
[  349.956048][ T5644] Bluetooth: hci31: command tx timeout
[  350.292309][ T5637] Bluetooth: hci32: unexpected cc 0x0c03 length: 249 > 1
[  350.313640][ T5637] Bluetooth: hci32: unexpected cc 0x1003 length: 249 > 9
[  350.324198][ T5637] Bluetooth: hci32: unexpected cc 0x1001 length: 249 > 9
[  350.335939][ T5637] Bluetooth: hci32: unexpected cc 0x0c23 length: 249 > 4
[  350.344246][ T5637] Bluetooth: hci32: unexpected cc 0x0c38 length: 249 > 2
[  350.394233][ T9943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.650288][ T9943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.781878][ T9943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.909959][ T9943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.037305][ T9963] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.047058][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.073235][ T9963] bridge_slave_0: entered allmulticast mode
[  351.088098][ T9963] bridge_slave_0: entered promiscuous mode
[  351.113848][ T9963] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.133893][ T9963] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.153763][ T9963] bridge_slave_1: entered allmulticast mode
[  351.173476][ T9963] bridge_slave_1: entered promiscuous mode
[  351.298844][ T9963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.332963][ T9963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.389377][ T5637] Bluetooth: hci33: unexpected cc 0x0c03 length: 249 > 1
[  351.406634][ T5637] Bluetooth: hci33: unexpected cc 0x1003 length: 249 > 9
[  351.416727][ T5637] Bluetooth: hci33: unexpected cc 0x1001 length: 249 > 9
[  351.431983][ T5637] Bluetooth: hci33: unexpected cc 0x0c23 length: 249 > 4
[  351.443996][ T5637] Bluetooth: hci33: unexpected cc 0x0c38 length: 249 > 2
[  351.650023][ T9963] team0: Port device team_slave_0 added
[  351.723426][ T9963] team0: Port device team_slave_1 added
[  351.795263][ T5637] Bluetooth: hci30: command tx timeout
[  351.916339][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.934774][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.004432][ T9963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.036689][ T5637] Bluetooth: hci31: command tx timeout
[  352.122259][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.145323][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.226358][ T9963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.436376][ T5644] Bluetooth: hci32: command tx timeout
[  352.621214][ T9943] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  352.628532][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.572'.
[  352.641772][ T9943] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  352.660432][ T9963] hsr_slave_0: entered promiscuous mode
[  352.667569][ T9963] hsr_slave_1: entered promiscuous mode
[  352.673961][ T9963] debugfs: 'hsr0' already exists in 'hsr'
[  352.681433][ T9963] Cannot create hsr debugfs directory
[  352.716265][ T9943] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  352.741078][ T9943] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  352.757083][ T9943] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  352.785463][ T9943] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  352.796717][ T9943] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  352.857794][ T9943] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  353.515512][ T5644] Bluetooth: hci33: command tx timeout
[  353.876521][ T5644] Bluetooth: hci30: command tx timeout
[  353.970611][ T9963] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.115699][ T5644] Bluetooth: hci31: command tx timeout
[  354.199401][   T31] INFO: task syz.5.280:7463 blocked for more than 143 seconds.
[  354.208880][   T31]       Not tainted syzkaller #0
[  354.222806][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  354.255388][ T9963] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.268414][   T31] task:syz.5.280       state:D stack:28424 pid:7463  tgid:7461  ppid:6778   task_flags:0x400040 flags:0x00080002
[  354.292250][   T31] Call Trace:
[  354.301864][   T31]  <TASK>
[  354.309029][   T31]  __schedule+0x17d9/0x56c0
[  354.313637][   T31]  ? __lock_acquire+0x683/0x2cf0
[  354.319116][   T31]  ? __lock_acquire+0x683/0x2cf0
[  354.324158][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.332904][   T31]  ? kernel_text_address+0xa5/0xe0
[  354.358683][ T5644] Bluetooth: hci4: command 0x0406 tx timeout
[  354.359250][ T5623] Bluetooth: hci5: command 0x0406 tx timeout
[  354.377776][   T31]  ? __kernel_text_address+0xd/0x30
[  354.383088][   T31]  ? __pfx___schedule+0x10/0x10
[  354.388225][   T31]  ? schedule+0x90/0x2b0
[  354.392569][   T31]  schedule+0x164/0x2b0
[  354.396968][   T31]  schedule_preempt_disabled+0x13/0x30
[  354.402522][   T31]  __mutex_lock+0x7bf/0x1550
[  354.409433][   T31]  ? kasan_save_track+0x3e/0x80
[  354.414379][   T31]  ? __mutex_lock+0x5d4/0x1550
[  354.419421][   T31]  ? write_ports+0xb5/0xd10
[  354.424016][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  354.429271][   T31]  write_ports+0xb5/0xd10
[  354.433696][   T31]  ? __pfx_write_ports+0x10/0x10
[  354.453821][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.460043][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.465921][   T31]  ? _copy_from_user+0x94/0xb0
[  354.470773][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.479104][   T31]  ? simple_transaction_get+0x12d/0x160
[  354.487543][   T31]  nfsctl_transaction_write+0x10f/0x160
[  354.493190][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  354.499496][   T31]  vfs_write+0x296/0xba0
[  354.503834][   T31]  ? __pfx_vfs_write+0x10/0x10
[  354.508805][   T31]  ? __fget_files+0x2a/0x420
[  354.513489][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.520003][ T5623] Bluetooth: hci32: command tx timeout
[  354.530165][   T31]  ? __fget_files+0x3a2/0x420
[  354.535064][   T31]  ? __fget_files+0x2a/0x420
[  354.539751][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.553035][   T31]  ksys_write+0x150/0x270
[  354.557817][   T31]  ? __pfx_ksys_write+0x10/0x10
[  354.562750][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.569036][   T31]  do_syscall_64+0x174/0x580
[  354.573670][   T31]  ? trace_irq_disable+0x3b/0x140
[  354.578852][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.584938][   T31] RIP: 0033:0x7fe82979de99
[  354.589416][   T31] RSP: 002b:00007fe82a642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  354.598653][   T31] RAX: ffffffffffffffda RBX: 00007fe829a26090 RCX: 00007fe82979de99
[  354.606997][   T31] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000005
[  354.615192][   T31] RBP: 00007fe829833eaf R08: 0000000000000000 R09: 0000000000000000
[  354.623212][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.631379][   T31] R13: 00007fe829a26128 R14: 00007fe829a26090 R15: 00007ffeaabc58b8
[  354.639834][   T31]  </TASK>
[  354.642995][   T31] INFO: task syz.5.280:7468 blocked for more than 143 seconds.
[  354.662809][   T31]       Not tainted syzkaller #0
[  354.681445][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  354.702236][   T31] task:syz.5.280       state:D stack:28304 pid:7468  tgid:7461  ppid:6778   task_flags:0x400040 flags:0x00080002
[  354.725806][   T31] Call Trace:
[  354.730721][   T31]  <TASK>
[  354.733737][   T31]  __schedule+0x17d9/0x56c0
[  354.738977][   T31]  ? __lock_acquire+0x683/0x2cf0
[  354.744015][   T31]  ? __lock_acquire+0x683/0x2cf0
[  354.772791][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.778816][   T31]  ? kernel_text_address+0xa5/0xe0
[  354.784005][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.790092][   T31]  ? __kernel_text_address+0xd/0x30
[  354.795634][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  354.802104][   T31]  ? __pfx___schedule+0x10/0x10
[  354.807118][   T31]  ? schedule+0x90/0x2b0
[  354.811395][   T31]  schedule+0x164/0x2b0
[  354.815754][   T31]  schedule_preempt_disabled+0x13/0x30
[  354.821237][   T31]  __mutex_lock+0x7bf/0x1550
[  354.825937][   T31]  ? nfsctl_transaction_write+0xc7/0x160
[  354.831605][   T31]  ? __mutex_lock+0x5d4/0x1550
[  354.838955][   T31]  ? write_threads+0x39d/0x5a0
[  354.843772][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  354.848923][   T31]  ? simple_strntoull+0x111/0x190
[  354.863536][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.869650][   T31]  ? qword_get+0x5ad/0x650
[  354.874115][   T31]  write_threads+0x39d/0x5a0
[  354.879327][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.885203][   T31]  ? __pfx_write_threads+0x10/0x10
[  354.890380][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.896364][   T31]  ? _copy_from_user+0x94/0xb0
[  354.901161][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.907073][   T31]  ? simple_transaction_get+0x12d/0x160
[  354.912684][   T31]  nfsctl_transaction_write+0x10f/0x160
[  354.921081][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  354.927294][   T31]  vfs_write+0x296/0xba0
[  354.936967][   T31]  ? __pfx_vfs_write+0x10/0x10
[  354.941771][   T31]  ? __fget_files+0x2a/0x420
[  354.946468][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.952112][   T31]  ? __fget_files+0x3a2/0x420
[  354.966047][   T31]  ? __fget_files+0x2a/0x420
[  354.970840][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.976892][   T31]  ksys_write+0x150/0x270
[  354.981243][   T31]  ? __pfx_ksys_write+0x10/0x10
[  354.986342][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.992450][   T31]  do_syscall_64+0x174/0x580
[  355.002761][   T31]  ? trace_irq_disable+0x3b/0x140
[  355.009185][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.015223][   T31] RIP: 0033:0x7fe82979de99
[  355.019675][   T31] RSP: 002b:00007fe82a621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  355.029476][   T31] RAX: ffffffffffffffda RBX: 00007fe829a26180 RCX: 00007fe82979de99
[  355.037542][   T31] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000006
[  355.047532][   T31] RBP: 00007fe829833eaf R08: 0000000000000000 R09: 0000000000000000
[  355.068246][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.078083][   T31] R13: 00007fe829a26218 R14: 00007fe829a26180 R15: 00007ffeaabc58b8
[  355.086908][   T31]  </TASK>
[  355.090374][   T31] INFO: task syz.7.285:7492 blocked for more than 144 seconds.
[  355.100169][   T31]       Not tainted syzkaller #0
[  355.105230][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.113897][   T31] task:syz.7.285       state:D stack:28320 pid:7492  tgid:7491  ppid:7049   task_flags:0x400140 flags:0x00080002
[  355.126891][   T31] Call Trace:
[  355.130200][   T31]  <TASK>
[  355.133135][   T31]  __schedule+0x17d9/0x56c0
[  355.138889][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.143877][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.148956][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.155717][   T31]  ? kernel_text_address+0xa5/0xe0
[  355.168418][   T31]  ? __kernel_text_address+0xd/0x30
[  355.176751][   T31]  ? __pfx___schedule+0x10/0x10
[  355.181656][   T31]  ? schedule+0x90/0x2b0
[  355.186019][   T31]  schedule+0x164/0x2b0
[  355.190194][   T31]  schedule_preempt_disabled+0x13/0x30
[  355.196133][   T31]  __mutex_lock+0x7bf/0x1550
[  355.200750][   T31]  ? kasan_save_track+0x3e/0x80
[  355.205989][   T31]  ? __mutex_lock+0x5d4/0x1550
[  355.210799][   T31]  ? write_ports+0xb5/0xd10
[  355.215430][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  355.220609][   T31]  write_ports+0xb5/0xd10
[  355.225098][   T31]  ? __pfx_write_ports+0x10/0x10
[  355.230136][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.236564][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.243019][   T31]  ? _copy_from_user+0x94/0xb0
[  355.248089][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.253810][   T31]  ? simple_transaction_get+0x12d/0x160
[  355.259532][   T31]  nfsctl_transaction_write+0x10f/0x160
[  355.275954][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  355.282131][   T31]  vfs_write+0x296/0xba0
[  355.286550][   T31]  ? __pfx_vfs_write+0x10/0x10
[  355.292446][   T31]  ? __fget_files+0x2a/0x420
[  355.297149][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.302803][   T31]  ? __fget_files+0x3a2/0x420
[  355.307590][   T31]  ? __fget_files+0x2a/0x420
[  355.312207][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.317936][   T31]  ksys_write+0x150/0x270
[  355.322290][   T31]  ? __pfx_ksys_write+0x10/0x10
[  355.327278][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.333353][   T31]  do_syscall_64+0x174/0x580
[  355.337983][   T31]  ? trace_irq_disable+0x3b/0x140
[  355.343029][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.349063][   T31] RIP: 0033:0x7f250439de99
[  355.353488][   T31] RSP: 002b:00007f250529c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  355.369599][   T31] RAX: ffffffffffffffda RBX: 00007f2504625fa0 RCX: 00007f250439de99
[  355.379600][   T31] RDX: 0000000000000009 RSI: 0000200000000500 RDI: 0000000000000003
[  355.388051][   T31] RBP: 00007f2504433eaf R08: 0000000000000000 R09: 0000000000000000
[  355.397637][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.405944][   T31] R13: 00007f2504626038 R14: 00007f2504625fa0 R15: 00007fff3088fcf8
[  355.413964][   T31]  </TASK>
[  355.419480][   T31] INFO: task syz.7.285:7494 blocked for more than 144 seconds.
[  355.428638][   T31]       Not tainted syzkaller #0
[  355.433612][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.442688][   T31] task:syz.7.285       state:D stack:28104 pid:7494  tgid:7491  ppid:7049   task_flags:0x400040 flags:0x00080002
[  355.459849][   T31] Call Trace:
[  355.463148][   T31]  <TASK>
[  355.483053][   T31]  __schedule+0x17d9/0x56c0
[  355.488484][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.493603][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.498814][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.504565][   T31]  ? kernel_text_address+0xa5/0xe0
[  355.510246][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.516102][   T31]  ? __kernel_text_address+0xd/0x30
[  355.521326][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  355.527858][   T31]  ? __pfx___schedule+0x10/0x10
[  355.532755][   T31]  ? schedule+0x90/0x2b0
[  355.537197][   T31]  schedule+0x164/0x2b0
[  355.541388][   T31]  schedule_preempt_disabled+0x13/0x30
[  355.546987][   T31]  __mutex_lock+0x7bf/0x1550
[  355.551610][   T31]  ? nfsctl_transaction_write+0xc7/0x160
[  355.559545][   T31]  ? __mutex_lock+0x5d4/0x1550
[  355.564821][ T5637] Bluetooth: hci33: command tx timeout
[  355.582751][   T31]  ? write_threads+0x39d/0x5a0
[  355.588437][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  355.593481][   T31]  ? simple_strntoull+0x111/0x190
[  355.600100][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.605801][   T31]  ? qword_get+0x5ad/0x650
[  355.610333][   T31]  write_threads+0x39d/0x5a0
[  355.617783][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.623441][   T31]  ? __pfx_write_threads+0x10/0x10
[  355.628683][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.634514][   T31]  ? _copy_from_user+0x94/0xb0
[  355.640109][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.646027][   T31]  ? simple_transaction_get+0x12d/0x160
[  355.651916][   T31]  nfsctl_transaction_write+0x10f/0x160
[  355.657633][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  355.663804][   T31]  vfs_write+0x296/0xba0
[  355.668120][   T31]  ? __pfx_vfs_write+0x10/0x10
[  355.683244][   T31]  ? __fget_files+0x2a/0x420
[  355.688924][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.694579][   T31]  ? __fget_files+0x3a2/0x420
[  355.700477][   T31]  ? __fget_files+0x2a/0x420
[  355.706122][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.711773][   T31]  ksys_write+0x150/0x270
[  355.716444][   T31]  ? __pfx_ksys_write+0x10/0x10
[  355.721373][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.730207][   T31]  do_syscall_64+0x174/0x580
[  355.735042][   T31]  ? trace_irq_disable+0x3b/0x140
[  355.740122][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.746109][   T31] RIP: 0033:0x7f250439de99
[  355.750546][   T31] RSP: 002b:00007f250527b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  355.759037][   T31] RAX: ffffffffffffffda RBX: 00007f2504626090 RCX: 00007f250439de99
[  355.767177][   T31] RDX: 0000000000000002 RSI: 0000200000000700 RDI: 0000000000000004
[  355.782696][   T31] RBP: 00007f2504433eaf R08: 0000000000000000 R09: 0000000000000000
[  355.790785][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.799010][   T31] R13: 00007f2504626128 R14: 00007f2504626090 R15: 00007fff3088fcf8
[  355.807154][   T31]  </TASK>
[  355.813317][   T31] 
[  355.813317][   T31] Showing all locks held in the system:
[  355.843767][   T31] 3 locks held by kworker/u8:0/12:
[  355.855033][   T31]  #0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  355.866950][   T31]  #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  355.899886][   T31]  #2: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0
[  355.910151][   T31] 3 locks held by kworker/u8:1/13:
[  355.915820][   T31] 3 locks held by kworker/1:1/29:
[  355.920918][   T31]  #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  355.932707][   T31]  #1: ffffc90000a57c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  355.950531][   T31]  #2: ffff888067a77250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0
[  355.961682][   T31] 1 lock held by khungtaskd/31:
[  355.966860][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  355.984323][   T31] 2 locks held by kworker/u8:4/57:
[  355.990939][   T31] 5 locks held by kworker/u8:5/94:
[  356.004643][   T31]  #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  356.035603][   T31]  #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  356.097238][   T31]  #2: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  356.132241][   T31]  #3: ffff8880b86281d8 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3e0
[  356.154683][   T31]  #4: ffff888028cba990 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x14d0
[  356.174772][   T31] 5 locks held by kworker/u8:6/183:
[  356.190989][   T31] 2 locks held by getty/5376:
[  356.201822][   T31]  #0: ffff8880361010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  356.211755][ T5626] Bluetooth: hci31: command tx timeout
[  356.217304][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  356.227565][   T31] 3 locks held by syz.5.280/7462:
[  356.232587][   T31]  #0: ffff88807afcd430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.241869][   T31]  #1: ffff88805f75e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.247556][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.250985][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  356.265023][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.274050][   T31] 3 locks held by syz.5.280/7463:
[  356.279281][   T31]  #0: ffff88803312dcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.283746][ T9994] bridge_slave_0: entered allmulticast mode
[  356.296870][   T31]  #1: ffff88805f75e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.309186][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  356.318427][   T31] 3 locks held by syz.5.280/7468:
[  356.323451][   T31]  #0: ffff8880640efcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.332707][   T31]  #1: ffff88805f75e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.341847][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  356.350997][   T31] 3 locks held by syz.7.285/7492:
[  356.360954][   T31]  #0: ffff88802b7ec630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.370430][   T31]  #1: ffff88802ab04450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.379551][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  356.381896][ T9994] bridge_slave_0: entered promiscuous mode
[  356.407512][   T31] 3 locks held by syz.7.285/7494:
[  356.412594][   T31]  #0: ffff8880237c5cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.422936][   T31]  #1: ffff88802ab04450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.432442][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  356.442234][   T31] 3 locks held by syz.3.298/7556:
[  356.447653][   T31]  #0: ffff88807b09c7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.460594][   T31]  #1: ffff888029106450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.463508][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.484736][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  356.487721][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.524684][   T31] 3 locks held by syz.3.298/7558:
[  356.534949][ T9994] bridge_slave_1: entered allmulticast mode
[  356.540810][   T31]  #0: ffff888032ee17b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.555689][ T9994] bridge_slave_1: entered promiscuous mode
[  356.564679][   T31]  #1: ffff888029106450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.585940][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  356.606498][ T5626] Bluetooth: hci32: command tx timeout
[  356.618824][   T31] 3 locks held by syz.9.317/7642:
[  356.636596][   T31]  #0: ffff88807afc7430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.654781][   T31]  #1: ffff88804ec4a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.676194][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  356.686164][   T31] 3 locks held by syz.9.317/7644:
[  356.691214][   T31]  #0: ffff88807ad2e2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.704481][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.715762][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.739271][   T31]  #1: ffff88804ec4a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.753398][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  356.770316][   T31] 3 locks held by syz.9.317/7646:
[  356.778045][   T31]  #0: ffff888033d247f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.814489][   T31]  #1: ffff88804ec4a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.833459][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  356.844501][ T9994] team0: Port device team_slave_0 added
[  356.861588][   T31] 3 locks held by syz.8.327/7709:
[  356.872316][   T31]  #0: ffff8880640ed970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.882869][ T9943] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.893349][ T9994] team0: Port device team_slave_1 added
[  356.894563][   T31]  #1: ffff88802a25a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  356.955852][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  356.975940][   T31] 3 locks held by syz.8.327/7710:
[  356.981005][   T31]  #0: ffff888053562630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  356.990177][   T31]  #1: ffff88802a25a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.007687][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  357.016923][   T31] 3 locks held by syz.2.337/7804:
[  357.022012][   T31]  #0: ffff888032f3d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.031179][   T31]  #1: ffff888079a90450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.040614][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  357.049551][   T31] 1 lock held by syz.2.337/7807:
[  357.054490][   T31]  #0: ffff888032f3d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.063736][   T31] 1 lock held by syz.2.337/7811:
[  357.068736][   T31]  #0: ffff888032f3d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.081388][   T31] 1 lock held by syz.2.337/7814:
[  357.086583][   T31]  #0: ffff888032f3d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.098050][   T31] 3 locks held by syz.2.337/7816:
[  357.103188][   T31]  #0: ffff88802b874630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.128256][   T31]  #1: ffff888079a90450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.137749][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  357.147217][   T31] 3 locks held by syz.2.337/7818:
[  357.152320][   T31]  #0: ffff88807a80e7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.172744][   T31]  #1: ffff888079a90450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.182386][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  357.197936][   T31] 3 locks held by syz.0.351/8074:
[  357.203001][   T31]  #0: ffff888030fa09b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.221175][   T31]  #1: ffff88807ed96450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.230417][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  357.240111][   T31] 3 locks held by syz.0.351/8077:
[  357.245221][   T31]  #0: ffff888035123970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.254327][   T31]  #1: ffff88807ed96450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.263454][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  357.272371][   T31] 3 locks held by syz.0.351/8078:
[  357.277545][   T31]  #0: ffff888032ed10b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.286746][   T31]  #1: ffff88807ed96450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.295855][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  357.306189][   T31] 2 locks held by syz-executor/8079:
[  357.321013][   T31]  #0: ffff888040e860d8 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  357.331422][   T31]  #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  357.341285][   T31] 3 locks held by syz.1.375/8392:
[  357.346393][   T31]  #0: ffff8880123a6d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.355590][   T31]  #1: ffff888086f64450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.364700][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  357.373810][   T31] 3 locks held by syz.1.375/8397:
[  357.378959][   T31]  #0: ffff8880237e09b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.388156][   T31]  #1: ffff888086f64450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.436599][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  357.445551][   T31] 3 locks held by syz.1.375/8398:
[  357.450577][   T31]  #0: ffff8880782b5cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.460545][   T31]  #1: ffff888086f64450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.469640][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  357.480014][   T31] 3 locks held by syz.4.386/8511:
[  357.485218][   T31]  #0: ffff88803511bcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.494341][   T31]  #1: ffff88807e056450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.503509][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  357.512785][   T31] 3 locks held by syz.4.386/8516:
[  357.524589][   T31]  #0: ffff88807b2b7270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.533787][   T31]  #1: ffff88807e056450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.542928][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  357.552011][   T31] 3 locks held by syz.4.386/8517:
[  357.557151][   T31]  #0: ffff88803130feb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.566314][   T31]  #1: ffff88807e056450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.575449][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  357.584577][   T31] 3 locks held by syz.5.407/8662:
[  357.589671][   T31]  #0: ffff8880123ab970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.598879][   T31]  #1: ffff8880685fe450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.607972][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  357.624866][   T31] 3 locks held by syz.5.407/8665:
[  357.629892][   T31]  #0: ffff888020b64ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.639288][ T5637] Bluetooth: hci33: command tx timeout
[  357.645412][   T31]  #1: ffff8880685fe450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.654452][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  357.663587][   T31] 3 locks held by syz.5.407/8668:
[  357.668681][   T31]  #0: ffff8880263320f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.677943][   T31]  #1: ffff8880685fe450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.687005][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  357.696221][   T31] 3 locks held by syz.3.413/8736:
[  357.701261][   T31]  #0: ffff888032ed09b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.710444][   T31]  #1: ffff888022bd8450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.726990][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  357.736180][   T31] 3 locks held by syz.7.414/8752:
[  357.741354][   T31]  #0: ffff8880352beef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.750570][   T31]  #1: ffff8880679a2450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.759712][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  357.768799][   T31] 3 locks held by syz.7.414/8756:
[  357.773847][   T31]  #0: ffff88807c8c5430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.783021][   T31]  #1: ffff8880679a2450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.792127][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  357.801122][   T31] 3 locks held by syz.9.421/8873:
[  357.806243][   T31]  #0: ffff888032f5fcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.815434][   T31]  #1: ffff88807aa7a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.831143][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  357.840038][   T31] 3 locks held by syz.9.421/8876:
[  357.846119][   T31]  #0: ffff88807f081cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.855312][   T31]  #1: ffff88807aa7a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.864335][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  357.873573][   T31] 3 locks held by syz.8.431/8963:
[  357.879536][   T31]  #0: ffff888035126b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.896681][   T31]  #1: ffff888030e8c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.907258][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  357.916514][   T31] 3 locks held by syz.8.431/8964:
[  357.921537][   T31]  #0: ffff8880351262b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.941383][   T31]  #1: ffff888030e8c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.950536][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  357.959586][   T31] 3 locks held by syz.8.431/8965:
[  357.964699][   T31]  #0: ffff888053457270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  357.973805][   T31]  #1: ffff888030e8c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  357.982959][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  357.992284][   T31] 3 locks held by syz.2.423/9037:
[  358.000380][   T31]  #0: ffff88807832fb30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.010622][   T31]  #1: ffff88805c716450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.020949][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0
[  358.056395][   T31] 3 locks held by syz.2.423/9038:
[  358.061452][   T31]  #0: ffff888074c3b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.071049][   T31]  #1: ffff88805c716450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.080336][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0
[  358.089885][   T31] 3 locks held by syz.2.423/9039:
[  358.095287][   T31]  #0: ffff888074c3a470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.104411][   T31]  #1: ffff88805c716450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.113749][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  358.135050][   T31] 3 locks held by syz.2.423/9040:
[  358.140108][   T31]  #0: ffff888030e4a630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.150769][   T31]  #1: ffff88805c716450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.160292][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  358.169408][   T31] 3 locks held by syz.2.423/9041:
[  358.174428][   T31]  #0: ffff888030e4b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.183591][   T31]  #1: ffff88805c716450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.192665][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  358.202725][   T31] 3 locks held by syz.0.435/9055:
[  358.208442][   T31]  #0: ffff88807fe8b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.217846][   T31]  #1: ffff88809605e450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.227188][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  358.244016][   T31] 3 locks held by syz.4.441/9108:
[  358.249218][   T31]  #0: ffff88807b9175f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.258578][   T31]  #1: ffff888034ddc450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.267944][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  358.277350][   T31] 3 locks held by syz.1.453/9202:
[  358.282633][   T31]  #0: ffff8880788915f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.292218][   T31]  #1: ffff88807f582450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.301345][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  358.310707][   T31] 3 locks held by syz.1.453/9203:
[  358.315853][   T31]  #0: ffff888028aa55f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.325088][   T31]  #1: ffff88807f582450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.345314][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  358.354200][   T31] 3 locks held by syz.1.453/9204:
[  358.359741][   T31]  #0: ffff888028aa5270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.369011][   T31]  #1: ffff88807f582450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.378395][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  358.387608][   T31] 3 locks held by syz.5.445/9241:
[  358.392655][   T31]  #0: ffff88807ad1eb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.401844][   T31]  #1: ffff888035868450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.411033][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  358.420204][   T31] 3 locks held by syz.6.466/9345:
[  358.425387][   T31]  #0: ffff88807be99cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.434516][   T31]  #1: ffff88805c79c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.458316][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  358.467508][   T31] 3 locks held by syz.6.466/9347:
[  358.472551][   T31]  #0: ffff8880753c00f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.481690][   T31]  #1: ffff88805c79c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.490962][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  358.500147][   T31] 3 locks held by syz.6.466/9349:
[  358.505333][   T31]  #0: ffff8880787cf970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.514547][   T31]  #1: ffff88805c79c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.524911][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  358.534067][   T31] 3 locks held by syz.3.454/9348:
[  358.551378][   T31]  #0: ffff88801bb53cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.561367][   T31]  #1: ffff8880b3ed0450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.570524][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  358.579532][   T31] 3 locks held by syz.3.454/9350:
[  358.584593][   T31]  #0: ffff8880787cfcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.596438][   T31]  #1: ffff8880b3ed0450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.605565][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  358.614779][   T31] 3 locks held by syz.7.469/9367:
[  358.619820][   T31]  #0: ffff88802b476470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.629355][   T31]  #1: ffff8880aea80450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.638436][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  358.654793][   T31] 3 locks held by syz.2.513/9592:
[  358.659874][   T31]  #0: ffff88807c8cc7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.669501][   T31]  #1: ffff8880259f4450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.683149][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  358.688360][ T5637] Bluetooth: hci32: command tx timeout
[  358.692612][   T31] 3 locks held by syz.2.513/9594:
[  358.704334][   T31]  #0: ffff88805353b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.713906][   T31]  #1: ffff8880259f4450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.723024][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  358.731969][   T31] 3 locks held by syz.2.513/9595:
[  358.737040][   T31]  #0: ffff88805353b7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.754185][   T31]  #1: ffff8880259f4450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.763844][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  358.773201][   T31] 3 locks held by syz.8.556/9776:
[  358.778528][   T31]  #0: ffff888035114470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.788756][   T31]  #1: ffff888099d8c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.797863][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  358.807068][   T31] 3 locks held by syz.8.556/9777:
[  358.812104][   T31]  #0: ffff88807fe717b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.823088][   T31]  #1: ffff888099d8c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.832216][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  358.841338][   T31] 3 locks held by syz.4.503/9794:
[  358.852969][   T31]  #0: ffff8880783af970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.862264][   T31]  #1: ffff88804aafa450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.871340][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  358.880619][   T31] 3 locks held by syz.0.502/9833:
[  358.885875][   T31]  #0: ffff88807fa0db30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.895140][   T31]  #1: ffff88807760c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.904175][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0
[  358.913496][   T31] 3 locks held by syz.0.502/9835:
[  358.919475][   T31]  #0: ffff88807fa0d970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.928705][   T31]  #1: ffff88807760c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.937859][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0
[  358.954440][   T31] 3 locks held by syz.0.502/9838:
[  358.960134][   T31]  #0: ffff8880793e15f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  358.969472][   T31]  #1: ffff88807760c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  358.978717][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  358.988106][   T31] 3 locks held by syz.0.502/9840:
[  358.993167][   T31]  #0: ffff888032f3a0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  359.002890][   T31]  #1: ffff88807760c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  359.012367][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  359.021421][   T31] 3 locks held by syz.0.502/9842:
[  359.026574][   T31]  #0: ffff88801234d270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  359.036653][   T31]  #1: ffff88807760c450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  359.045789][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  359.062010][   T31] 3 locks held by syz.1.504/9851:
[  359.067140][   T31]  #0: ffff888033d24ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  359.079146][   T31]  #1: ffff888028464450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  359.088276][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  359.099643][   T31] 3 locks held by syz.1.504/9853:
[  359.105809][   T31]  #0: ffff888035fd4ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  359.117245][   T31]  #1: ffff888028464450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  359.126718][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  359.136237][   T31] 1 lock held by syz-executor/9943:
[  359.141516][   T31]  #0: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  359.174454][   T31] 3 locks held by syz.6.557/9949:
[  359.190285][   T31]  #0: ffff8880237da7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  359.210314][   T31]  #1: ffff888034e48450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  359.219484][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  359.229455][   T31] 3 locks held by syz.6.557/9951:
[  359.234522][   T31]  #0: ffff88807c464b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  359.265820][   T31]  #1: ffff888034e48450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  359.275219][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  359.284122][   T31] 3 locks held by syz.6.557/9953:
[  359.289269][   T31]  #0: ffff8880367029b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  359.298517][   T31]  #1: ffff888034e48450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  359.307583][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  359.323414][   T31] 7 locks held by syz-executor/9963:
[  359.328804][   T31]  #0: ffff888033600450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  359.337921][   T31]  #1: ffff8880a6b1e080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  359.348005][   T31]  #2: ffff88802806da58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540
[  359.368736][   T31]  #3: ffffffff8f8a96a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  359.379177][   T31]  #4: ffff8880350f3128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  359.389848][   T31]  #5: ffff8880a69d4258 (&devlink->lock_key#32){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170
[  359.400267][   T31]  #6: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  359.411252][   T31] 2 locks held by syz-executor/9994:
[  359.416601][   T31]  #0: ffffffff8f799928 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  359.426217][   T31]  #1: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  359.435525][   T31] 1 lock held by syz-executor/10020:
[  359.440840][   T31]  #0: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  359.451439][   T31] 
[  359.453820][   T31] =============================================
[  359.453820][   T31] 
[  359.477730][   T31] NMI backtrace for cpu 0
[  359.477748][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  359.477770][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  359.477783][   T31] Call Trace:
[  359.477792][   T31]  <TASK>
[  359.477801][   T31]  dump_stack_lvl+0xe8/0x150
[  359.477839][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  359.477874][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.477902][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  359.477938][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  359.477980][   T31]  sys_info+0x135/0x170
[  359.478014][   T31]  watchdog+0xfd7/0x1030
[  359.478055][   T31]  ? watchdog+0x1c7/0x1030
[  359.478095][   T31]  kthread+0x388/0x470
[  359.478132][   T31]  ? __pfx_watchdog+0x10/0x10
[  359.478162][   T31]  ? __pfx_kthread+0x10/0x10
[  359.478200][   T31]  ret_from_fork+0x514/0xb70
[  359.478240][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  359.478277][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.478305][   T31]  ? __switch_to+0xc89/0x1420
[  359.478341][   T31]  ? __pfx_kthread+0x10/0x10
[  359.478383][   T31]  ret_from_fork_asm+0x1a/0x30
[  359.478426][   T31]  </TASK>
[  359.478435][   T31] Sending NMI from CPU 0 to CPUs 1:
[  359.481797][ T5637] Bluetooth: hci6: command 0x0406 tx timeout
[  359.482833][    C1] NMI backtrace for cpu 1
[  359.482848][    C1] CPU: 1 UID: 0 PID: 5637 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  359.482873][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  359.482888][    C1] Workqueue: hci6 hci_cmd_timeout
[  359.482918][    C1] RIP: 0010:unwind_next_frame+0x0/0x2550
[  359.482944][    C1] Code: ff cc 89 d9 80 e1 07 80 c1 03 38 c1 7c 92 48 89 df e8 54 16 bd 00 eb 88 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 49 89 fe 49
[  359.482963][    C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00000202
[  359.482982][    C1] RAX: 0000000000000001 RBX: ffffc90000a08a20 RCX: 0000000080000100
[  359.482998][    C1] RDX: dffffc0000000000 RSI: ffffffff810014ca RDI: ffffc90000a08968
[  359.483015][    C1] RBP: ffffc90000a089f0 R08: ffffc90000a08a30 R09: 000000000000000a
[  359.483031][    C1] R10: dffffc0000000000 R11: ffffffff81b1fa10 R12: ffff88803303be00
[  359.483048][    C1] R13: 0000000000000000 R14: ffffffff81b1fa10 R15: ffffc90000a08968
[  359.483066][    C1] FS:  0000000000000000(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000
[  359.483091][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  359.483107][    C1] CR2: 0000563b050b6a38 CR3: 00000000753e9000 CR4: 0000000000350ef0
[  359.483125][    C1] Call Trace:
[  359.483133][    C1]  <IRQ>
[  359.483141][    C1]  arch_stack_walk+0x11b/0x150
[  359.483171][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.483200][    C1]  stack_trace_save+0xa9/0x100
[  359.483230][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  359.483263][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.483288][    C1]  ? __lock_acquire+0x683/0x2cf0
[  359.483327][    C1]  kasan_save_track+0x3e/0x80
[  359.483360][    C1]  ? kasan_save_track+0x3e/0x80
[  359.483390][    C1]  ? kasan_save_free_info+0x40/0x50
[  359.483413][    C1]  ? __kasan_slab_free+0x5c/0x80
[  359.483447][    C1]  ? kfree+0x1c5/0x640
[  359.483472][    C1]  ? slab_free_after_rcu_debug+0x62/0x220
[  359.483493][    C1]  ? rcu_core+0x78b/0x10a0
[  359.483524][    C1]  ? handle_softirqs+0x225/0x840
[  359.483551][    C1]  ? __irq_exit_rcu+0xca/0x220
[  359.483576][    C1]  ? irq_exit_rcu+0x9/0x30
[  359.483602][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  359.483625][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.483689][    C1]  kasan_save_free_info+0x40/0x50
[  359.483714][    C1]  __kasan_slab_free+0x5c/0x80
[  359.483747][    C1]  kfree+0x1c5/0x640
[  359.483771][    C1]  ? slab_free_after_rcu_debug+0x62/0x220
[  359.483798][    C1]  slab_free_after_rcu_debug+0x62/0x220
[  359.483820][    C1]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  359.483843][    C1]  ? rcu_core+0x70d/0x10a0
[  359.483876][    C1]  rcu_core+0x78b/0x10a0
[  359.483920][    C1]  ? __pfx_rcu_core+0x10/0x10
[  359.483951][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.483981][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.484006][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.484041][    C1]  handle_softirqs+0x225/0x840
[  359.484074][    C1]  ? __irq_exit_rcu+0xca/0x220
[  359.484108][    C1]  __irq_exit_rcu+0xca/0x220
[  359.484136][    C1]  irq_exit_rcu+0x9/0x30
[  359.484161][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  359.484185][    C1]  </IRQ>
[  359.484193][    C1]  <TASK>
[  359.484202][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.484226][    C1] RIP: 0010:vprintk_emit+0x45d/0x560
[  359.484250][    C1] Code: 0f 84 44 ff ff ff e8 72 6c 21 00 fb eb 44 e8 6a 6c 21 00 e8 85 4d 2b 0a 4d 85 f6 74 94 e8 5b 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b
[  359.484268][    C1] RSP: 0018:ffffc900024bf800 EFLAGS: 00000293
[  359.484287][    C1] RAX: ffffffff81a597a5 RBX: ffffffff81a5961f RCX: ffff88803303be00
[  359.484303][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0
[  359.484318][    C1] RBP: ffffc900024bf8b0 R08: ffffffff90579137 R09: 1ffffffff20af226
[  359.484335][    C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000
[  359.484351][    C1] R13: 000000000000002a R14: 0000000000000200 R15: 1ffff92000497f04
[  359.484370][    C1]  ? vprintk_emit+0x2cf/0x560
[  359.484393][    C1]  ? vprintk_emit+0x455/0x560
[  359.484420][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.484446][    C1]  ? __lock_acquire+0x683/0x2cf0
[  359.484479][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  359.484510][    C1]  _printk+0xdd/0x130
[  359.484534][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.484565][    C1]  ? __pfx__printk+0x10/0x10
[  359.484591][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.484619][    C1]  ? trace_hrtimer_start+0x82/0x200
[  359.484659][    C1]  bt_err+0x121/0x180
[  359.484694][    C1]  ? __pfx_bt_err+0x10/0x10
[  359.484736][    C1]  hci_cmd_timeout+0xd8/0x1e0
[  359.484767][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  359.484794][    C1]  process_scheduled_works+0xa8e/0x14e0
[  359.484843][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  359.484874][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.484900][    C1]  ? assign_work+0x3cf/0x5d0
[  359.484930][    C1]  worker_thread+0xa47/0xfb0
[  359.484979][    C1]  kthread+0x388/0x470
[  359.485012][    C1]  ? __pfx_worker_thread+0x10/0x10
[  359.485038][    C1]  ? __pfx_kthread+0x10/0x10
[  359.485077][    C1]  ret_from_fork+0x514/0xb70
[  359.485113][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  359.485146][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.485172][    C1]  ? __switch_to+0xc89/0x1420
[  359.485203][    C1]  ? __pfx_kthread+0x10/0x10
[  359.485238][    C1]  ret_from_fork_asm+0x1a/0x30
[  359.485271][    C1]  </TASK>
[  359.487034][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  359.487053][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  359.487079][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  359.487095][   T31] Call Trace:
[  359.487105][   T31]  <TASK>
[  359.487117][   T31]  vpanic+0x56c/0xa60
[  359.487158][   T31]  ? __pfx___schedule+0x10/0x10
[  359.487186][   T31]  ? __pfx_vpanic+0x10/0x10
[  359.487222][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.487265][   T31]  panic+0xc5/0xd0
[  359.487303][   T31]  ? __pfx_panic+0x10/0x10
[  359.487339][   T31]  ? preempt_schedule_common+0x82/0xd0
[  359.487368][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  359.487400][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  359.487447][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  359.487491][   T31]  watchdog+0x1030/0x1030
[  359.487532][   T31]  ? watchdog+0x1c7/0x1030
[  359.487578][   T31]  kthread+0x388/0x470
[  359.487616][   T31]  ? __pfx_watchdog+0x10/0x10
[  359.487647][   T31]  ? __pfx_kthread+0x10/0x10
[  359.487686][   T31]  ret_from_fork+0x514/0xb70
[  359.487727][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  359.487765][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.487795][   T31]  ? __switch_to+0xc89/0x1420
[  359.487831][   T31]  ? __pfx_kthread+0x10/0x10
[  359.487870][   T31]  ret_from_fork_asm+0x1a/0x30
[  359.487917][   T31]  </TASK>
[  359.495223][   T31] Kernel Offset: disabled